Apparent issue proxying but only IPV6 | Cloudflare Developers | Page 1

#

I can provide 2 URLs of 2 different servers with basically the same configuration, one with Proxy enabled (suffering the IPv6 issue - obviously IPv4 works on both), and one without if required.

#

| C:\Users\peter>curl -I http://ProxiedSite
HTTP/1.1 301 Moved Permanently
Date: Tue, 11 Feb 2025 08:56:56 GMT
Content-Type: text/html
Connection: keep-alive
Location: https://ProxiedSite/
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=swMvlgFiznYIfqHEHfjWE8jWLwlwpmrodL4imqAIfaEbT8jgWlZ3VxQK%2B20yX%2FVeNbnAuOMvsUx5aMVU2dC33lFAuC3qo%2BACsdtp3t6INi%2F%2BLksKqO15EPGwJjPKBWABPJv0"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 910320e8ab02d72d-BNE
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=27870&min_rtt=27870&rtt_var=13935&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=81&delivery_rate=0&cwnd=30&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

(No longer proxied site)
C:\Users\peter>curl -I http://NotProxiedsite
HTTP/1.1 301 Moved Permanently
Server: nginx/1.2.6
Date: Tue, 11 Feb 2025 08:57:06 GMT
Content-Type: text/html
Content-Length: 184
Connection: keep-alive
Location: https://NotProxiedsite/

#

this is the headers from HTTP site (IPv4) One from a proxied site in the same domain space, and one from a not-proxied site

#

just to confirm I am returning 301's from the HTTP endpoints

#

And for IPv4 Headers to HTTPS site

C:\Users\peter>curl -I https://ProxiedSite
HTTP/1.1 200 OK
Date: Tue, 11 Feb 2025 09:00:39 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Status: 200 OK
X-Rack-Cache: miss
Cache-Control: max-age=0, private, must-revalidate
X-UA-Compatible: IE=Edge,chrome=1
X-Runtime: 0.126689
X-Request-Id: 704ee9f0168e14a61d549bfe4766289e
Set-Cookie: _diary_session=BAh7CEkiD3Nlc3Npb25faWQGOgZFRkkiJWRiMjNkNDA3MTBmNzA1ZGI4NzYyYzI1Zjg5YzA2ODBmBjsAVEkiC2RvbWFpbgY7AEYiC2ZvbGV5c0kiEF9jc3JmX3Rva2VuBjsARkkiMWdwbTQzSERBMDVrSC8vODdPSkpEc1F5MU5FL0dtcHBGdktNdFFSb1M4T3M9BjsARg%3D%3D--b0bd3faa64ce68e8e1be940a3dc9da07b6c67336; path=/; HttpOnly
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cwN403iFMphaJsvscPiP7x0Cq7bdQSqgsuX8avXqi0eJu5%2FWn6GcxMEz8DVPEmc0ItzuNdYgDQRgtGpPkn8M9v92Ej%2BOL%2Fyd9Pq%2BzuIYUpJRF9aFPRMqVii8pZvT7gPBgcvL"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 9103265a8f26d730-BNE
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=24946&min_rtt=24414&rtt_var=9535&sent=5&recv=6&lost=0&retrans=0&sent_bytes=3119&recv_bytes=650&delivery_rate=167117&cwnd=158&unsent_bytes=0&cid=caf4f2bfbed11272&ts=195&x=0"

#

C:\Users\peter>curl -I https://NotProxiedsite
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Status: 200
X-Powered-By: Phusion Passenger (mod_rails/mod_rack) 3.0.19
X-UA-Compatible: IE=Edge,chrome=1
ETag: "2c495e8ae6628585e84a8192777166eb"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _diary_session=BAh7CUkiD3Nlc3Npb25faWQGOgZFRkkiJWQ0ZWYwMmQyZjM5ZmRjNzhkMjUyMDY2ZTM5ODVkOTE2BjsAVEkiC2RvbWFpbgY7AEYiC2hvbG1lc0kiDWF0dGVtcHRzBjsARmkISSIQX2NzcmZfdG9rZW4GOwBGSSIxcThXSVAvWHJYTEZ3N29icmhOajZhWjJhUDZtVXhuUFpRcUp6TW1SVzFkaz0GOwBG--5c662d7776943215e87a1c05ce7cd4ff3bca7b84; path=/; HttpOnly
X-Request-Id: a684f39163fa7e7098a6d830a0611110
X-Runtime: 1.673053
Date: Tue, 11 Feb 2025 09:00:30 GMT
X-Rack-Cache: miss
Server: nginx/1.2.6 + Phusion Passenger 3.0.19

#

both look fine, status 200 results

#

only on ipv6 do we get the redirect 302 loop

#

C:\Users\peter>curl -I** https://ProxiedSite/**
HTTP/1.1 302 Found
Date: Tue, 11 Feb 2025 09:07:46 GMT
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Status: 302 Found
X-Rack-Cache: miss
Location: https://ProxiedSite/
Cache-Control: no-cache
X-UA-Compatible: IE=Edge,chrome=1
X-Runtime: 3.216701
X-Request-Id: 4927f930c01ae52e427431da5b38f0c4
Set-Cookie: _diary_session=BAh7CkkiD3Nlc3Npb25faWQGOgZFRkkiJWRiOWY2MDkwMWI2M2U1NDFhZmI0ZWE4NGExMzhlNTIzBjsAVEkiC2RvbWFpbgY7AEYiC2ZvbGV5c0kiDWF0dGVtcHRzBjsARmkISSIXaW5pdGlhbF9jb250cm9sbGVyBjsARkkiCmxvZ2luBjsAVEkiE2luaXRpYWxfYWN0aW9uBjsARkkiCmluZGV4BjsAVA%3D%3D--1cbba52fe5fdc3d9c24a8a8e3d3e0add27a2feea; path=/; HttpOnly
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=PrwOG%2BZJ4Vx2gnTLj9blS%2BAVZo%2FkOA0RNSI9Y%2FOaMtb7%2F6PLyWWkea3gf%2FVdUfrpiDAhKwmcredEHM%2F%2B1au3vR1v8jp86qsUknTb9TuZ8cRN0elQwX5b4cYKBW%2BKdoFnu1G4KVUoH2h6xvQxYa6U"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 910330b34d99e7e2-SYD
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=50297&min_rtt=48443&rtt_var=15825&sent=5&recv=6&lost=0&retrans=0&sent_bytes=3121&recv_bytes=650&delivery_rate=72661&cwnd=252&unsent_bytes=0&cid=09c5225c425a8a15&ts=3307&x=0"

#

But note in the above, it still has all the cookies being set as if it was replying to a normal query

#

it has just decided to send a 302 redirect as well

#

and just for the final confirmation for this domain I have:

#

ok I think this is something my system is doing. probably nothign to do with cloudflare.

#

ok, not nothing to do with it, but it is mostly ipv6 not being properly supported by my application, and cloudflare doesn't let me turn it off

#Apparent issue proxying but only IPV6