Bug 62389 - Add ipv6 loopback address to the default internalProxies
Summary: Add ipv6 loopback address to the default internalProxies
Status: RESOLVED FIXED
Alias: None
Product: Tomcat 8
Classification: Unclassified
Component: Catalina (show other bugs)
Version: 8.5.x-trunk
Hardware: PC Linux
: P2 normal (vote)
Target Milestone: ----
Assignee: Tomcat Developers Mailing List
URL: https://github.com/apache/tomcat/pull...
Keywords: PatchAvailable
Depends on:
Blocks:
 
Reported: 2018-05-20 00:04 UTC by Craig
Modified: 2018-06-05 01:59 UTC (History)
2 users (show)



Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Craig 2018-05-20 00:04:05 UTC
0:0:0:0:0:0:0:1 is the IPv6 loopback address. It should be added to the default internalProxies regex.
Comment 1 Craig 2018-05-20 00:16:02 UTC
Pull request: https://github.com/apache/tomcat/pull/111
Comment 2 Mark Thomas 2018-06-01 18:13:16 UTC
Fixed in:
- trunk for 9.0.9 onwards
- 8.5.x for 8.5.32 onwards
- 8.0.x for 8.0.53 onwards
- 7.0.x for 7.0.89 onwards

Thanks for the patch.
Comment 3 Konstantin Kolinko 2018-06-05 01:59:04 UTC
::1 should be added to the list as well, like we do for RemoteAddrValve.

When Tomcat runs with APR connector, request.getRemoteAddr() returns "::1" when accessed from localhost. This value can be seen in access logs.