[135578] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Ipv6 for the content provider

daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Wed Jan 26 18:15:17 2011

To: Antonio Querubin <tony@lava.net>
In-Reply-To: Your message of "Wed, 26 Jan 2011 12:56:01 -1000."
	<alpine.OSX.2.00.1101261242070.211@cust11794.lava.net>
From: Valdis.Kletnieks@vt.edu
Date: Wed, 26 Jan 2011 18:13:04 -0500
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

--==_Exmh_1296083584_6470P
Content-Type: text/plain; charset=us-ascii

On Wed, 26 Jan 2011 12:56:01 -1000, Antonio Querubin said:
> On Wed, 26 Jan 2011, Owen DeLong wrote:
> 
> >>  Listen a.b.c.d:80         ->  Listen 80
> >>  <Virtualhost a.b.c.d:80>  ->  <Virtualhost *:80>
> >>
> > That only works if you have only one address on the machine and.
> 
> Actually it works fine on machines with multiple IP addresses for both 
> FreeBSD and CentOS.  And IPv6 enabled servers can easily have multiple 
> IPv6 addresses.

What Owen meant was that if you expect it to answer *only* for a.b.c.d:80,
and *not* to answer for other addresses/interfaces, you may be in for a
surprise (consider a DMZ host where you have:

outside world -  128.257.12.2
inside facing - 192.168.149.149

VirtualHost 198.168.149.149:80 # super-sekrit corporate internal site

Changing that VirtualHost to *:80 will probably cause some grief. ;)

--==_Exmh_1296083584_6470P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFNQKqAcC3lWbTT17ARAjlEAJ9cNnxPqFpe2gL+Fds370GD6k1S/QCfQIOc
Zcf47hz3AZoR9AzXPaWLVZE=
=X8Ol
-----END PGP SIGNATURE-----

--==_Exmh_1296083584_6470P--



home help back first fref pref prev next nref lref last post