RE: [squid-users] Dual Stack (IPv4,IPv6) Oddities

From: Zeller, Jan \(ID\) <jan.zeller_at_id.unibe.ch>
Date: Mon, 18 Oct 2010 08:58:50 +0200

> > I create a tunnel to my server that is running squid using ssh and
> > running with a default (debian) configuration. My server is
> > dual-stacked (public IPv4 and IPv6 addresses) while the client is a
> > IPv4 only.
> >
> > Over the past few days I have been developing a website and found an
> > oddity on what address is reported specifically from my laptop while
> > using this tunnel. It appears that Squid is alternating between
> using
> > the IPv4 and IPv6 address (the destination website is also dual
> stack)
> > and as such was making it difficult for myself to deal with these
> > sessions.
> >
> > So this appears to be happening because:
> >
> > * Squid is choosing to use IPv6 and IPv4 randomly /
> > interchangeably causing server side session checking to fail (phpBB
> > has an IP Address check for example)
> >
> > So my question are:
> >
> > * Did I miss something in the configuration file?

hmm my squid boxes are also dual stacked and I was not able to force ipv4 precedence over ipv6 (see : /etc/gai.conf - http://tools.ietf.org/html/rfc3484)

the only way to force ipv4 was :

acl dualstackedDOMAIN dstdomain .the.dualstackeddomain.
tcp_outgoing_address <ipv4-address-of-myinterface> dualstackedDOMAIN

the value

# For sites which prefer IPv4 connections change the last line to
#
precedence ::ffff:0:0/96 100

in /etc/gai.conf seems to be ignored by squid.

---

Jan
Received on Mon Oct 18 2010 - 07:01:14 MDT

This archive was generated by hypermail 2.2.0 : Mon Oct 18 2010 - 12:00:03 MDT