[
https://issues.apache.org/jira/browse/HADOOP-19962?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18126180#comment-18126180
]
ASF GitHub Bot commented on HADOOP-19962:
-----------------------------------------
smengcl commented on PR #8812:
URL: https://github.com/apache/hadoop/pull/8812#issuecomment-6117866284
> One suggestion: could you add a service-authorization test covering IPv6
clients with IPv4-only and matching IPv6 blocked CIDRs? This would explicitly
cover the behavior change documented in the PR.
Thanks @slfan1989 for taking a look. Added
`testBlockedMachineListWithIPv6Client`
> Support IPv6 CIDR rules in MachineList
> --------------------------------------
>
> Key: HADOOP-19962
> URL: https://issues.apache.org/jira/browse/HADOOP-19962
> Project: Hadoop Common
> Issue Type: Sub-task
> Reporter: Siyao Meng
> Assignee: Siyao Meng
> Priority: Major
> Labels: pull-request-available
>
> MachineList uses the IPv4-only SubnetUtils class. IPv6 CIDR rules therefore
> fail in address-based security policies. Add family-aware prefix matching for
> IPv4 and IPv6. Preserve existing IPv4 behavior. Reject invalid prefixes and
> addresses from the wrong family.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
