aks-app-routing-operator icon indicating copy to clipboard operation
aks-app-routing-operator copied to clipboard

Enable SSL Passthrough

Open EdSalzedo opened this issue 1 year ago • 7 comments

Hi,

I'd like to be able to add --enable-ssl-passthrough as an argument for starting up NGINX. I currently can't find a way of doing it while using the app-routing plugin, would this be possible?

Thanks,

Ed

EdSalzedo avatar Feb 08 '24 15:02 EdSalzedo

Hi @EdSalzedo! Thanks for reaching out.

It's not possible to enable ssl-passthrough globally today but you can enable it through Ingress annotations on individual Ingresses. This is documented here.

We can look into adding a way of configuring this globally to App Routing. Tagging @sabbour so we can add it to the backlog.

Thanks!

OliverMKing avatar Feb 09 '24 14:02 OliverMKing

Hi, thanks for responding @OliverMKing!

I think without -enable-ssl-passthrough flag set on startup, the nginx.ingress.kubernetes.io/ssl-passthrough annotation has no effect based on the testing I've done, although I could have got that wrong.

It'd be useful to be able to configure it at some point so thank you!

EdSalzedo avatar Feb 12 '24 10:02 EdSalzedo

Hi, thanks for responding @OliverMKing!

I think without -enable-ssl-passthrough flag set on startup, the nginx.ingress.kubernetes.io/ssl-passthrough annotation has no effect based on the testing I've done, although I could have got that wrong.

It'd be useful to be able to configure it at some point so thank you!

You are correct! The documentation even says it, which I missed. We will look into this.

OliverMKing avatar Feb 12 '24 14:02 OliverMKing

I also have a use-case that needs this feature so forgive me a +1

MXClyde avatar Jun 03 '24 21:06 MXClyde

Another similar use case is enabling -use-forwarded-headers , we're using Azure Front Door which is setting these values and then getting overwritten by Nginx.

Have to deploy manually for now till this is enabled.

zjylo avatar Jul 02 '24 14:07 zjylo

Another similar use case is enabling -use-forwarded-headers , we're using Azure Front Door which is setting these values and then getting overwritten by Nginx.

Have to deploy manually for now till this is enabled.

similar issue for us!

dinchand avatar Oct 04 '24 11:10 dinchand

@zjylo: Can you describe your workaround? We are currently in a similar situation.

Internet -> Azure Frontdoor -> AKS Nginx -> Container

Soren-Knudsen avatar Jan 02 '25 14:01 Soren-Knudsen