Nginx – How to do dual stack IPv4/IPv6 with virtual hosts on nginx 1.4

ipv4ipv6nginxvirtualhost

I'm using nginx 1.4.1 (now, before it was 1.2.1) and would like to support dual stack (IPv4 and IPv6). I'm always getting duplicate listen options for xyz errors from nginx.

server {
    listen 80 default_server;
    listen [::]:80 ipv6only=on default_server;
    server_name domain1;
}
server {
    listen 443 ssl default_server;
    listen [::]:443 ssl ipv6only=on default_server;
    server_name domain1;
}

server {
    listen 80;
    listen [::]:80 ipv6only=on;
    server_name domain2;
}
server {
    listen 443 ssl;
    listen [::]:443 ssl ipv6only=on;
    server_name domain2;
}

If I use only listen 80 I'm getting only IPv4. Otherwise if I use listen [::]:80 I'm getting only IPv6.

How to setup nginx 1.4.x to support virtual host dual stack?

Best Answer

You've used default_server in more than one server block. This is only meant to be used to define the default virtual host for a given IP address/port combination. So it should appear only once per IP/port pair in your entire configuration. Which host should be the default virtual host is up to you. (Or you did, until you edited this part out.)

Also, ipv6only can appear only once in the entire configuration. Since its default in 1.4 and higher is on, you can safely omit it entirely.

Related Solutions

Nginx – Name-Based Virtual Hosts on IPv6

You only need listen options on one declaration for a socket. Generally you would put them on the declaration that also includes the default_server flag, but for some options, I think you can just set them on any one listen directive. Just remove the ipv6only=on from all of the listens except one.

Nginx – Properly setting up a “default” nginx server for https

I managed to configure a shared dedicated hosting on a single IP with nginx. Default HTTP and HTTPS serving a 404 for unknown domains incoming.

1 - Create a default zone

As nginx is loading vhosts in ascii order, you should create a 00-default file/symbolic link into your /etc/nginx/sites-enabled.

2 - Fill the default zone

Fill your 00-default with default vhosts. Here is the zone i am using:

server {
    server_name _;
    listen       80  default_server;
    return       404;
}


server {
    listen 443 ssl;
    server_name _;
    ssl_certificate /etc/nginx/ssl/nginx.crt;
    ssl_certificate_key /etc/nginx/ssl/nginx.key;
    return       404;
}

3 - Create self signed certif, test, and reload

You will need to create a self signed certificate into /etc/nginx/ssl/nginx.crt.

Create a default self signed certificate:

sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/ssl/nginx.key -out /etc/nginx/ssl/nginx.crt

Just a reminder:

Test the nginx configuration before reloading/restarting : nginx -t
Reload a enjoy: sudo service nginx reload

Hope it helps.

Best Answer

Related Solutions

Nginx – Name-Based Virtual Hosts on IPv6

Nginx – Properly setting up a “default” nginx server for https

Related Topic