Skip to main content

Dual-stack Load Balancing

CCC.LB.CP08

The service can accept traffic originating from both IPv4 and IPv6 clients on the same frontend.

Related Threats

IDTitleDescription
CCC.LB.TH14IPv6 Frontend Bypasses IPv4-Only Access RulesA dual-stack frontend exposes the same backend targets over IPv6 while network access rules, firewall policies, or allowlists may be defined for IPv4 addresses only. Requests arriving over IPv6 are then accepted without the intended restrictions, compromising the confidentiality and integrity of the resources behind the load balancer.