Used proxy-protocol for TCP Service

[tili41]

Hi, we have an external HAProxy load-balancer upstream of the K8s cluster.
We have enabled the proxy-protocol to be able to whitelist the ip allowed to connect to the different services managed by HAProxy Controller. It works well for HTTPS services.
However, it doesn't seem possible to enable the proxy-protocol for TCP services.

Without the proxy-protocol, I do not really have the interest to have whitelists for TCP services (we manage this via the Service backend-config-snippet annotation).
To be clear, we don't want to enable proxy-protocol for the backend servers but only for the frontend (Ingress Controller).
Any idea? Thank you for your help.

[tili41]

Hi. Do you have any news about this? Possible or not? If not, in a later release? Thanks.

[ivanmatmati]

Hi @tili41, Currently this is not available on TCP services. We could plan it for a future release.

[Mo3m3n]

I think we better enable config-snippets for TCP frontends, this way you can add whatever configuration you want.

[apanagiotou]

Hi all! Any news on making TCP frontends accept proxy-protocol? In the annotations page, the only frontend relevant option is frontend-config-snippet but it says Defines a group of configuration directives to insert in the main HTTP/HTTPS frontends.. No option for TCP frontends.

[strowi]

Any update on this? Or an example on how to enable accept-proxy on the frontend?

[vholer]

Also interested in an easy way how to enable proxy for other frontends (e.g., stats).