[jira] [Commented] (TS-938) Our outgoing (request) Via: header seems to always default to 127.0.0.1 as the IP identifier

["Alan M. Carroll (Commented) (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/TS-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13124632#comment-13124632 ] 

Alan M. Carroll commented on TS-938:
------------------------------------

For the fix, the address used is (in order of preference)

1) The outgoing_ip_to_bind
2) The incoming_ip_to_bind
3) An address selected from an interface.

If an address is selected automatically, global addresses are preferred, then multicast, non-routable, and finally loopback.

Use the per-transaction outbound IP address was considered but this makes the cycle checking (the entire point of this work) problematic as it is then unclear what to check against, the original transaction (and its associated outbound IP address) unable to be accurately determined.
                
> Our outgoing (request) Via: header seems to always default to 127.0.0.1 as the IP identifier
> --------------------------------------------------------------------------------------------
>
>                 Key: TS-938
>                 URL: https://issues.apache.org/jira/browse/TS-938
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: Network
>    Affects Versions: 3.1.0
>            Reporter: Leif Hedstrom
>            Assignee: Alan M. Carroll
>             Fix For: 3.1.1
>
>
> This can cause serious problems, because if the other end is also an ATS server, also defaulting to thinking it's on 127.0.0.1, will treat this as a loop, and send a 400 response.
> We ought to try to send something more intelligent as the hex-IP in the request Via: header. This is particularly problematic when ATS is used as a forward (or intercepting) proxy, and have outgoing Via: headers enabled.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira