proxmox-mirrors/pve-docs
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-docs synced 2025-05-08 01:34:40 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

pveproxy: add note about bindv6only sysctl

Browse Source 
Seems certain hosting environments (e.g. OVH) set net.ipv6.bindv6only
to 1, which caused problems for those users after the 6.4 upgrade.

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
This commit is contained in:
Stoiko Ivanov 2021-05-05 16:36:28 +02:00 committed by Thomas Lamprecht
parent 684db7e318
commit 2a057d732a
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
pveproxy.adoc
View File

@ -62,6 +62,9 @@ The default policy is `allow`.
Listening IP
------------
By default the `pveproxy` and `spiceproxy` daemons listen on the wildcard
address and accept connections from both IPv4 and IPv6 clients.
By setting `LISTEN_IP` in `/etc/default/pveproxy` you can control to which IP
address the `pveproxy` and `spiceproxy` daemons bind. The IP-address needs to
be configured on the system.
@ -102,6 +105,12 @@ long-running worker processes, for example a running console or shell from a
virtual guest. So, please use a maintenance window to bring this change in
effect.
NOTE: setting the `sysctl` `net.ipv6.bindv6only` to `1` will cause the daemons
to only accept connection from IPv6 clients. This non-default setting usually
also causes other issues. Either remove the `sysctl` setting, or set the
`LISTEN_IP` to `0.0.0.0` (which will only allow IPv4 clients).
SSL Cipher Suite
----------------