kubernetes-ingress icon indicating copy to clipboard operation
kubernetes-ingress copied to clipboard
verified publisher icon haproxytech

Used proxy-protocol for TCP Service

Open tili41 opened this issue 4 years ago • 6 comments

Hi, we have an external HAProxy load-balancer upstream of the K8s cluster. We have enabled the proxy-protocol to be able to whitelist the ip allowed to connect to the different services managed by HAProxy Controller. It works well for HTTPS services. However, it doesn't seem possible to enable the proxy-protocol for TCP services.

Without the proxy-protocol, I do not really have the interest to have whitelists for TCP services (we manage this via the Service backend-config-snippet annotation). To be clear, we don't want to enable proxy-protocol for the backend servers but only for the frontend (Ingress Controller). Any idea? Thank you for your help.

tili41 avatar May 20 '21 15:05 tili41

Hi. Do you have any news about this? Possible or not? If not, in a later release? Thanks.

tili41 avatar Jun 14 '21 07:06 tili41

Hi @tili41, Currently this is not available on TCP services. We could plan it for a future release.

ivanmatmati avatar Jun 14 '21 10:06 ivanmatmati

I think we better enable config-snippets for TCP frontends, this way you can add whatever configuration you want.

Mo3m3n avatar Jun 14 '21 11:06 Mo3m3n

Hi all! Any news on making TCP frontends accept proxy-protocol? In the annotations page, the only frontend relevant option is frontend-config-snippet but it says Defines a group of configuration directives to insert in the main HTTP/HTTPS frontends.. No option for TCP frontends.

apanagiotou avatar Jun 21 '22 17:06 apanagiotou

Any update on this? Or an example on how to enable accept-proxy on the frontend?

strowi avatar Oct 27 '22 18:10 strowi

Also interested in an easy way how to enable proxy for other frontends (e.g., stats).

vholer avatar Dec 19 '22 15:12 vholer