TIL haproxy's "bind *:443" does not actually mean "bind to all addresses" but rather "all ipv4". Eew. WTF, this is 2017.
-
-
Replying to @RichFelker
To be fair, I think most software does that. I usually have to use ":::443" for all ipv6+ipv4 addresses. I know nginx is like that
1 reply 0 retweets 0 likes -
Replying to @JPReganJR @RichFelker
I think technically :::443 is all ipv6 and the system encapsulates ipv4 as ipv6? The more I think about it - *:443 should just be all ints
2 replies 0 retweets 0 likes -
Replying to @JPReganJR
Binding to :: normally can accept v4 in addition to v6 simply by magic at the standards-conforming OS's TCP stack level. No net-level hacks.
1 reply 0 retweets 1 like
Replying to @RichFelker @JPReganJR
There's a contingent of people who object to this, & some OS's have an option to (or always) disable it system-wide, but they're wrong.
9:22 PM - 1 Aug 2017
0 replies
0 retweets
1 like
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.