Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
joshdcu commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-4465520569 I think this issue is still relevant 😢 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
github-actions[bot] commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-4464998329 This issue has been marked as stale due to 90 days of inactivity. It will be closed in 30 days if no further activity occurs. If this issue is still relevant, please simply write any comment. Even if closed, you can still revive the issue at any time or discuss it on the [email protected] list. Thank you for your contributions. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
joshdcu commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-3900654924 I think this issue is still relevant 😢 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
github-actions[bot] commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-3900394886 This issue has been marked as stale due to 90 days of inactivity. It will be closed in 30 days if no further activity occurs. If this issue is still relevant, please simply write any comment. Even if closed, you can still revive the issue at any time or discuss it on the [email protected] list. Thank you for your contributions. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
joshdcu commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-3536718335 > As I understand it, this means that SSL passthrough (upstream is terminating the client's TLS connection) is not really possible with the Kubernetes CRDs right now? I would have a use for this as well. @FewKinG, just to clarify, SSL passthrough for TCP traffic is possible with the Kubernetes CRDs _if you are using port-based routing by APISIX._ It is not currently possible if you are using _SNI-based routing by APISIX._ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
FewKinG commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-3536418286 As I understand it, this means that SSL passthrough (upstream is terminating the client's TLS connection) is not really possible with the Kubernetes CRDs right now? I would have a use for this as well. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
github-actions[bot] commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-3524696328 This issue has been marked as stale due to 90 days of inactivity. It will be closed in 30 days if no further activity occurs. If this issue is still relevant, please simply write any comment. Even if closed, you can still revive the issue at any time or discuss it on the [email protected] list. Thank you for your contributions. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
joshdcu commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-3188477045 Understood, thanks for the clarification! Let's keep this issue open till this feature is supported 👍 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
Baoyuantop commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-3182065860 Not yet supported. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
joshdcu commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-3179603873 Hi @Baoyuantop, as I understand it, the `ApisixTls` resource is used for TLS communication between client and APISIX but I am also interested in TLS communication between APISIX and the upstream. In the link you provided, there is TLS between the client (`redis-cli`) and APISIX but not between APISIX and the upstream (Redis). This is possible to do using the [admin API](https://apisix.apache.org/docs/apisix/admin-api/#stream-route) directly by specifying the `scheme` for the `upstream` to `tls` but cannot be done using the [`ApisixRoute`](https://apisix.apache.org/docs/ingress-controller/reference/apisix-ingress-controller/api-reference/#apisixroute) or [`ApisixUpstream`](https://apisix.apache.org/docs/ingress-controller/reference/apisix-ingress-controller/api-reference/#apisixupstream) resources. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
Baoyuantop commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-3177599979 Hi @joshdcu, can this meet your needs? https://apisix.apache.org/docs/ingress-controller/1.8.0/tutorials/match-stream-route-by-sni/ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
joshdcu commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-304966 I think this issue is still relevant 😢 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
github-actions[bot] commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-3047053155 This issue has been marked as stale due to 90 days of inactivity. It will be closed in 30 days if no further activity occurs. If this issue is still relevant, please simply write any comment. Even if closed, you can still revive the issue at any time or discuss it on the [email protected] list. Thank you for your contributions. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
joshdcu commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-2785301936 I think this issue is still relevant 😢 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
github-actions[bot] commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-2785002557 This issue has been marked as stale due to 90 days of inactivity. It will be closed in 30 days if no further activity occurs. If this issue is still relevant, please simply write any comment. Even if closed, you can still revive the issue at any time or discuss it on the [email protected] list. Thank you for your contributions. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
sereneshikari commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-2574410214 I think this issue is still relevant 😢 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
github-actions[bot] commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-2574220036 This issue has been marked as stale due to 90 days of inactivity. It will be closed in 30 days if no further activity occurs. If this issue is still relevant, please simply write any comment. Even if closed, you can still revive the issue at any time or discuss it on the [email protected] list. Thank you for your contributions. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
sereneshikari commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-2400407759 I think this issue is still relevant 😢 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
sereneshikari commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-2209317115 You're right, @vicaya 😞 The custom resources do not provide feature parity with the APISIX API. I understand it might be challenging but I guess this is important given the [composite architecture the APISIX team is introducing](https://apisix.apache.org/docs/ingress-controller/composite/) which relies solely on the APISIX custom resources -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
Re: [I] request help: create stream route to proxy to TLS over TCP upstream [apisix-ingress-controller]
vicaya commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-2205841895 ApisixRoute supports stream routes, which _should_ support tls over tcp. But alas, the implementation is buggy, the generated apisix upstream has a hard coded scheme of "http". This should be fixable, as stream route can match ingressPort (with tls enabled) and host (SNI), which _should_ use the "tls" scheme if associated tls cert is not found, i.e., no termination (aka passthrough). The gateway api TLSRoute passthrough mode is broken as well, unfortunately. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
