Hi Mike,

On Sat, Oct 16, 2010 at 08:18:15PM +0200, Mike Hoffs wrote:
> Is it possible to implement at forwardfor except ipv6 ?

It should not be hard to do. However, as noted in the source, it's a bit
useless, because while IPv6 is used over the net, it's particularly rare
on the local network, and the "except" keyword is only used to reference
your local SSL proxies. Most often, it will only contain 127.0.0.0/8 or
your local LAN address.

> Now it is only possible to except a ipv4 address. If that is possible we can 
> also make the legacy stuff with ssl ipv6 reachable.

In my opinion, this is independant. You can very well have your SSL reverse
proxy receive IPv6 traffic and forward it to haproxy on 127.0.0.1 (IPv4).

Do you have a concrete example where it's really needed ?

Regards,
Willy


Reply via email to