pdns icon indicating copy to clipboard operation
pdns copied to clipboard

Webserver can't listen on multiple addresses

Open zeha opened this issue 12 years ago • 4 comments

I found no way of telling the webserver to listen on multiple addresses.

Use case:

webserver-address=127.0.0.1 ::1

(Which should then become the default.)

I'm tempted to classify this as an IPv6 operational issue ;-)

zeha avatar Aug 21 '13 10:08 zeha

Extra fun: with webserver-address=::, connections over v4 might yield:

Jan 13 16:41:40 [webserver] Webserver closing socket: remote (::ffff:127.0.0.1) does not match the set ACL(127.0.0.1/32, ::1/128)

Habbie avatar Jan 13 '20 15:01 Habbie

Extra fun: with webserver-address=::, connections over v4 might yield:

Jan 13 16:41:40 [webserver] Webserver closing socket: remote (::ffff:127.0.0.1) does not match the set ACL(127.0.0.1/32, ::1/128)

same here

rnalrd avatar Dec 16 '22 13:12 rnalrd

Are there any plans for implementing a multi-IP webserver-address?

o1ramsky avatar Jul 15 '24 08:07 o1ramsky

Are there any plans for implementing a multi-IP webserver-address?

not from us. We'd happily review patches.

Habbie avatar Jul 15 '24 12:07 Habbie

Extra fun: with webserver-address=::, connections over v4 might yield: Jan 13 16:41:40 [webserver] Webserver closing socket: remote (::ffff:127.0.0.1) does not match the set ACL(127.0.0.1/32, ::1/128)

same here

As a workaround, you can use "::" and add "::ffff:127.0.0.1/32" to the webserver-allow-from option.

You can even add ::ffff:192.168.0.0/120 (or some other subnet) to allow specific subnets, but you have to calculate the mask based on 128, so what would be a /24 in IPv4 is a /120 in IPv6 (32-24=8 -> 128-120=8)

rcgreenw avatar Nov 21 '24 20:11 rcgreenw

As a workaround, you can use "::" and add "::ffff:127.0.0.1/32" to the webserver-allow-from option.

Then shouldn't this be /128? (I did not try). Nice workaround btw :)

Habbie avatar Nov 21 '24 20:11 Habbie

Fixed in rec-5.3.0

omoerbeek avatar Sep 10 '25 05:09 omoerbeek

is this also fixed in auth?

zeha avatar Sep 10 '25 06:09 zeha

No, I was to eager closing this

omoerbeek avatar Sep 10 '25 07:09 omoerbeek