java socket problem

Francois Tigeot ftigeot at wolfpond.org
Tue Jan 13 11:30:32 PST 2015


On Tue, Jan 13, 2015 at 12:20:26PM +0100, Francois Tigeot wrote:
> 
> Java is known to create IPv6 sockets and try to use IPv4 addresses with them.
> 

More explanations:

There has been an official bug report against OpenJDK:
https://bugs.openjdk.java.net/browse/JDK-6882910

The solution the OpenJDK developers have chosen has been to continue
to use a dual IPv6+IPv4 socket and force IPV6_V6ONLY to 0:
http://hg.openjdk.java.net/jdk7/jdk7/jdk/rev/1f996198877b

Put another way, they didn't understand anything.


Support for IPv4 addresses in IPv6 sockets has been removed in DragonFly
due to various reasons, including security ones.

More details are available in this document:
https://tools.ietf.org/html/draft-cmetz-v6ops-v4mapped-api-harmful-01

As well as in the commit removing v4-mapped addresses support:
http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/727ccde8cce813911d885b7f6ed749dcea68a886


Given this situation, I think the best course of action is to remove
IPv6 support from the openjdk packages.

This will at least make Java application usable again with most
production networks.

-- 
Francois Tigeot



More information about the Users mailing list