search

haproxytech / kubernetes-ingress

HAProxy Kubernetes Ingress Controller
https://www.haproxy.com/documentation/kubernetes/
Apache License 2.0
719 stars 202 forks source link

Used proxy-protocol for TCP Service #318

Open tili41 opened 3 years ago

tili41 commented 3 years ago

Hi, we have an external HAProxy load-balancer upstream of the K8s cluster. We have enabled the proxy-protocol to be able to whitelist the ip allowed to connect to the different services managed by HAProxy Controller. It works well for HTTPS services. However, it doesn't seem possible to enable the proxy-protocol for TCP services.

Without the proxy-protocol, I do not really have the interest to have whitelists for TCP services (we manage this via the Service backend-config-snippet annotation). To be clear, we don't want to enable proxy-protocol for the backend servers but only for the frontend (Ingress Controller). Any idea? Thank you for your help.

tili41 commented 3 years ago

Hi. Do you have any news about this? Possible or not? If not, in a later release? Thanks.

ivanmatmati commented 3 years ago

Hi @tili41, Currently this is not available on TCP services. We could plan it for a future release.

Mo3m3n commented 3 years ago

I think we better enable config-snippets for TCP frontends, this way you can add whatever configuration you want.

apanagiotou commented 2 years ago

Hi all! Any news on making TCP frontends accept proxy-protocol? In the annotations page, the only frontend relevant option is frontend-config-snippet but it says Defines a group of configuration directives to insert in the main HTTP/HTTPS frontends.. No option for TCP frontends.

strowi commented 2 years ago

Any update on this? Or an example on how to enable accept-proxy on the frontend?

vholer commented 1 year ago

Also interested in an easy way how to enable proxy for other frontends (e.g., stats).