RockteMQ-AI commented on issue #2246: URL: https://github.com/apache/rocketmq-dashboard/issues/2246#issuecomment-5303314135
**Issue Evaluation** Category: `enhancement` | Status: **Evaluated** The feature request is valid and well-scoped. ACL 2.0 currently only accepts IPv4 literals/CIDRs plus the `::/0` wildcard, which makes dual-stack deployments unable to express scoped IPv6 whitelist rules. **Feasibility:** Feasible — extend `IpRangeMatcher` with family-aware parsing (no DNS resolution), byte-level prefix matching for both /32 and /128 families. **Scope:** Shared `IpRangeMatcher` in the Studio backend; validation DTOs; parameterized tests for IPv6, compressed/expanded forms, invalid inputs, and backward compatibility with existing IPv4 behavior. **Compatibility:** No breaking changes — existing IPv4 and `::/0` behavior is preserved. **Proposed approach:** 1. Parse address literals directly (no DNS lookup) to determine address family. 2. Validate prefix length against family (≤32 for IPv4, ≤128 for IPv6). 3. Normalize compressed and expanded IPv6 to bytes for equivalence matching. 4. Reject hostnames, scoped interface addresses, and family mismatches. Reply `/approve` to proceed with PR generation. --- *Automated evaluation by RockteMQ-AI* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
