On Wed, Jan 18, 2012 at 02:14:49PM +0100, "Brane F. Gra??nar" wrote:
> On 01/18/2012 01:59 PM, Agustin Lopez wrote:
> > 
> > Hello!
> > 
> > I will like to know if it is possible set one ACL to filter
> > IPv6 addresses.  I have read that IPv4 is Ok.
> > 
> > Some like:
> > 
> > frontend
> >          ...
> >          acl     ipv6_ok  src XXXX:XXX:XXXX:0:0:0:0:0/48
> 
> Nope, matching ipv6 addresses is currently unsupported in 1.4.x and in
> 1.5-devX.
> 
> Too bad, i'd like to have that too.

I've started working on this two weeks ago. The main issue was that
the ACL patterns could only fit in 32-bit. I've changed the internals
to rely on the pattern extraction code used by stick tables, so now
we can transport v6 information internally. Now I need to change the
address parser (and return type) so that we can parse an IPv6 address
in the config file. It's less obvious than what I initially thought,
as always due to many types cast as int32.

*maybe* this could be ready for -dev8, but I cannot promise anything.

Cheers,
Willy


Reply via email to