0:0:0:0:0:0:0:1 is the IPv6 loopback address. It should be added to the default internalProxies regex.
Pull request: https://github.com/apache/tomcat/pull/111
Fixed in: - trunk for 9.0.9 onwards - 8.5.x for 8.5.32 onwards - 8.0.x for 8.0.53 onwards - 7.0.x for 7.0.89 onwards Thanks for the patch.
::1 should be added to the list as well, like we do for RemoteAddrValve. When Tomcat runs with APR connector, request.getRemoteAddr() returns "::1" when accessed from localhost. This value can be seen in access logs.