[Server] Net permission check spam for loopback (localhost/::1)

[0xMxh]

Summary

A Node.js server resource that opens outbound connections to loopback (127.0.0.1 / localhost / ::1) repeatedly logs sandbox network permission checks even though the connection is allowed. There is no documented server.cfg permission (unlike add_filesystem_permission / add_unsafe_worker_permission / add_unsafe_child_process_permission) to whitelist loopback or silence these messages.

Issue type

Server

Repro rate

Always

Server build version

FXServer-early-access b96 win32

OS

No response

CPU

No response

GPU

No response

RAM

No response

Storage type

None

Connection type

None

ISP and bandwidth

No response

DxDiag

No response

Network graph

No response

Platform

Windows

OS version / distribution

Windows 11

CPU

No response

RAM

No response

Using txAdmin?

None

Hosting provider

Self-hosted

Machine type

None

/perf endpoint output

No response

DDoS protection

No response

ulimit -n value (Linux only)

No response

Docker Compose file (Docker only)

No response

Steps to Reproduce

1. Start a FiveM for GTAV Enhanced server.
2. Add a minimal Node.js server resource that listens on loopback (e.g. 127.0.0.1:3999) and, on start, does http.get to 127.0.0.1 / localhost / ::1.
3. Ensure/start that resource.
4. Watch the server console.

Expected Behavior

Outbound Node connections to loopback (127.0.0.1 / localhost / ::1) should either:

• be allowed silently, or
• be controllable via a documented server.cfg permission (similar to add_filesystem_permission / add_unsafe_worker_permission / add_unsafe_child_process_permission), or
• log at most once / at debug level.

Actual Behavior

The connection succeeds, but the console repeatedly prints messages like:

[resource-name] Net permission check … localhost - allowed for now
[resource-name] Net permission check … ::1 - allowed for now

There is no documented way to whitelist loopback egress or suppress these messages. The public Sandbox docs only cover filesystem, ConVar, unsafe worker, and unsafe child process permissions, nothing for Node network egress.

Evidence

Server console excerpt:

[11:43:34] [ info] [ example-resource] Net permission check from 'example-resource' for permission net on resource '::1' - allowed for now
[11:43:34] [ info] [ example-resource] Net permission check from 'example-resource' for permission net on resource 'localhost' - allowed for now
[11:43:34] [ info] [ example-resource] Net permission check from 'example-resource' for permission net on resource '::1' - allowed for now
[11:43:34] [ info] [ example-resource] Net permission check from 'example-resource' for permission net on resource 'localhost' - allowed for now
[11:43:34] [ info] [ example-resource] Net permission check from 'example-resource' for permission net on resource '::1' - allowed for now

Crash ID / Perfetto / PCAP: N/A (not a crash, script perf, or packet-loss issue)

Additional Context

fxmanifest.lua:

fx_version 'cerulean'
games { 'gta5', 'gta5enhanced' }
server_only 'yes'
node_version '22'
server_script 'server.js'

server.js:

const http = require('node:http');

const PORT = 3999;
const HOSTS = ['127.0.0.1', 'localhost', '::1'];

function requestOnce(host) {
  const url = host === '::1' ? `http://[::1]:${PORT}/` : `http://${host}:${PORT}/`;
  http.get(url, (res) => {
    res.resume();
    console.log(`GET ${url} -> ${res.statusCode}`);
  }).on('error', (err) => console.error(err.message));
}

const server = http.createServer((_req, res) => {
  res.writeHead(200);
  res.end('ok');
});

server.listen({ port: PORT, host: '::', ipv6Only: false }, () => {
  for (const host of HOSTS) requestOnce(host);
  setInterval(() => {
    for (const host of HOSTS) requestOnce(host);
  }, 5000);
});

[Maccanplayzz]

I have the same problem.

[wolfram-cfx]

Thanks, we are looking into this.

[Gogsi]

A fix for this bug has been implemented and is available in Hotfix 7 (b104). Please try again and let us know if the issue persists. Thanks for your help!

[0xMxh]

Everything's working now. Thanks!