Gateway pods not reachable through LoadBalancer #3798
Description
Describe the bug
I've installed the gateway fabric through Helm with these values:
nginxGateway:
gatewayClassName: 'nginx-public'
nginx:
replicas: 2
service:
type: LoadBalancer
Created a Gateway like so:
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
name: mygatway-nginx
namespace: system-gateways
spec:
infrastructure:
annotations:
service.beta.kubernetes.io/transip-loadbalancer-healthcheck-mode: tcp
service.beta.kubernetes.io/transip-loadbalancer-protocol: proxy
management.cattle.io/ui-hidden: "true"
gatewayClassName: nginx-public
listeners:
- name: my-gateway-https
protocol: HTTPS
port: 443
hostname: "gateway.example.com"
tls:
certificateRefs:
- kind: Secret
group: ""
namespace: example-com-namespace
name: "gateway.example.com-lets-encrypt"
However, when going to the LB IP/host it doesn't work. I've traced down multiple things and I noticed I was not able to connect to the services while using port-forward:
$ kubectl -n system-gateways get svc
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
mygatway-nginx-nginx-public LoadBalancer 10.43.73.68 10-200-300-40.some.host.com 443:31405/TCP 26h
$ kubectl -n system-gateways port-forward svc/mygatway-nginx-nginx-public 4433:443
Forwarding from 127.0.0.1:4433 -> 443
Forwarding from [::1]:4433 -> 443
Handling connection for 4433 <--- TRIED CURL COMMAND HERE
E0827 13:20:48.902986 21262 portforward.go:406] an error occurred forwarding 4433 -> 443: error forwarding port 443 to pod 38a59d1e6260b7d76f11e1f5a57fe281a76ffd6cde134bbc14a6681ac88b162e, uid : failed to execute portforward in network namespace "/var/run/netns/cni-76c8dfb5-4256-880b-c4c8-0d980502c2de": failed to connect to localhost:443 inside namespace "38a59d1e6260b7d76f11e1f5a57fe281a76ffd6cde134bbc14a6681ac88b162e", IPv4: dial tcp4 127.0.0.1:443: connect: connection refused IPv6 dial tcp6: address localhost: no suitable address found
E0827 13:20:48.903755 21262 portforward.go:234] lost connection to pod
So I thought to try the pod directly:
$ kubectl -n system-gateways port-forward mygatway-nginx-nginx-public-645fcfc787-x69xg 4433:443
Forwarding from 127.0.0.1:4433 -> 443
Forwarding from [::1]:4433 -> 443
Handling connection for 4433
E0827 13:21:32.182168 21773 portforward.go:406] an error occurred forwarding 4433 -> 443: error forwarding port 443 to pod 38a59d1e6260b7d76f11e1f5a57fe281a76ffd6cde134bbc14a6681ac88b162e, uid : failed to execute portforward in network namespace "/var/run/netns/cni-76c8dfb5-4256-880b-c4c8-0d980502c2de": failed to connect to localhost:443 inside namespace "38a59d1e6260b7d76f11e1f5a57fe281a76ffd6cde134bbc14a6681ac88b162e", IPv4: dial tcp4 127.0.0.1:443: connect: connection refused IPv6 dial tcp6: address localhost: no suitable address found
E0827 13:21:32.182703 21773 portforward.go:234] lost connection to pod
After checking the pod logs, the nginx config I noticed it might be running on port 8081. So I tried that:
$ kubectl -n system-gateways port-forward mygatway-nginx-nginx-public-645fcfc787-x69xg 443:8081
Forwarding from 127.0.0.1:443 -> 8081
Forwarding from [::1]:443 -> 8081
Handling connection fo
$ curl localhost:443
<html>
<head><title>404 Not Found</title></head>
<body>
<center><h1>404 Not Found</h1></center>
<hr><center>nginx</center>
</body>
</html>
To Reproduce
see info above
Expected behavior
That the servce created by the controller points to the right port nginx listens for in the inside of the pod.
Your environment
Version of the NGINX Gateway Fabric:
ghcr.io/nginx/nginx-gateway-fabric:2.1.0
Version of Kubernetes:
1.31.x
Kubernetes platform:
Rancher
Details on how you expose the NGINX Gateway Fabric Pod:
Loadbalancer
Logs of NGINX container:
+ trap handle_term TERM
+ trap handle_quit QUIT
+ rm -rf '/var/run/nginx/*.sock'
+ echo 'starting nginx ...'
+ '[' false = debug ']'
starting nginx ...
+ nginx_pid=8
+ /usr/sbin/nginx -g 'daemon off;'
+ SECONDS=0
+ ps -ef
+ grep 'nginx: master process'
+ grep -v grep
+ (( SECONDS > 5 ))
+ ps -ef
+ grep -v grep
+ grep 'nginx: master process'
+ (( SECONDS > 5 ))
+ ps -ef
+ grep -v grep
+ grep 'nginx: master process'
+ (( SECONDS > 5 ))
+ ps -ef
+ grep 'nginx: master process'
+ grep -v grep
+ (( SECONDS > 5 ))
+ ps -ef
+ grep 'nginx: master process'
+ grep -v grep
2025/08/27 11:11:08 [notice] 8#8: js vm init njs: 00007297B8035B00
+ (( SECONDS > 5 ))
+ ps -ef
+ grep 'nginx: master process'
+ grep -v grep
+ (( SECONDS > 5 ))
+ ps -ef
+ grep 'nginx: master process'
+ grep -v grep
2025/08/27 11:11:08 [notice] 8#8: using the "epoll" event method
2025/08/27 11:11:08 [notice] 8#8: nginx/1.29.1
2025/08/27 11:11:08 [notice] 8#8: built by gcc 14.2.0 (Alpine 14.2.0)
2025/08/27 11:11:08 [notice] 8#8: OS: Linux 6.8.0-71-generic
2025/08/27 11:11:08 [notice] 8#8: getrlimit(RLIMIT_NOFILE): 1048576:1048576
2025/08/27 11:11:08 [notice] 8#8: start worker processes
2025/08/27 11:11:08 [notice] 8#8: start worker process 30
2025/08/27 11:11:08 [notice] 8#8: start worker process 31
2025/08/27 11:11:08 [notice] 8#8: start worker process 32
2025/08/27 11:11:08 [notice] 8#8: start worker process 33
+ echo 'starting nginx-agent ...'
2025/08/27 11:11:08 [notice] 8#8: start worker process 34
+ agent_pid=35
+ nginx-agent
+ '[' 0 '!=' 0 ']'
2025/08/27 11:11:08 [notice] 8#8: start worker process 36
8 nginx 0:00 nginx: master process /usr/sbin/nginx -g daemon off;
30 nginx 0:00 nginx: master process /usr/sbin/nginx -g daemon off;
starting nginx-agent ...
+ wait_term
+ wait 35
time=2025-08-27T11:11:08.421Z level=INFO msg="Configured allowed directories" allowed_directories="[/etc/nginx-agent /etc/nginx /usr/share/nginx /var/run/nginx]"
time=2025-08-27T11:11:08.421Z level=INFO msg="Configured labels" labels="map[cluster-id:791a9f09-244a-45da-b2bf-a5ce9d8f5801 control-id:80954684-814e-4880-a4db-a6efe582fe6d control-name:public-nginx-nginx-gateway-fabric-58745fb64d-lx9vv control-namespace:system-gateway-controller product-type:ngf product-version:2.1.0]"
time=2025-08-27T11:11:08.422Z level=INFO msg="Excluded files from being watched for file changes" exclude_files=[^.*(\.log|.swx|~|.swp)$]
time=2025-08-27T11:11:08.422Z level=INFO msg="Starting NGINX Agent" version=v3.2.1 commit=504a66a
time=2025-08-27T11:11:08.422Z level=INFO msg="Dialing grpc server" server_addr=public-nginx-nginx-gateway-fabric.system-gateway-controller.svc:443
time=2025-08-27T11:11:08.427Z level=INFO msg="Finished registering plugins" plugins="[resource command file collector watcher]"
time=2025-08-27T11:11:08.429Z level=INFO msg="Starting OTel Collector plugin"
time=2025-08-27T11:11:08.429Z level=INFO msg="Writing OTel collector config"
time=2025-08-27T11:11:08.430Z level=INFO msg="Starting OTel collector"
time=2025-08-27T11:11:13.443Z level=WARN msg="Currently error log outputs to stderr. Log monitoring is disabled while applying a config; log errors to file to enable error monitoring" error_log=stderr correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4
time=2025-08-27T11:11:13.444Z level=WARN msg="NGINX Plus API is not configured, searching for stub status endpoint" correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4
time=2025-08-27T11:11:13.444Z level=INFO msg="Reloading OTel collector config, nginx config updated" correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4
time=2025-08-27T11:11:13.444Z level=INFO msg="Writing OTel collector config"
time=2025-08-27T11:11:13.444Z level=INFO msg="Updating overview after nginx config update" correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4 server_type=command
time=2025-08-27T11:11:13.447Z level=INFO msg="Closing OTel Collector plugin" correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4
time=2025-08-27T11:11:13.447Z level=INFO msg="Shutting down OTel Collector" state=Running correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4
time=2025-08-27T11:11:13.452Z level=INFO msg="OTel collector run finished"
time=2025-08-27T11:11:13.480Z level=INFO msg="Connection created" response=response:{status:COMMAND_STATUS_OK} correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4 server_type=command
time=2025-08-27T11:11:13.480Z level=INFO msg="Agent connected" correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4 server_type=command
time=2025-08-27T11:11:14.083Z level=INFO msg="OTel Collector shutdown" state=Closed correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4
time=2025-08-27T11:11:14.083Z level=INFO msg="Restarting OTel collector" correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4
time=2025-08-27T11:11:14.092Z level=INFO msg="Reloading OTel collector config, resource updated" correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4
time=2025-08-27T11:11:14.092Z level=INFO msg="Writing OTel collector config"
time=2025-08-27T11:11:14.093Z level=INFO msg="Closing OTel Collector plugin" correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4
time=2025-08-27T11:11:14.093Z level=INFO msg="Shutting down OTel Collector" state=Running correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4
time=2025-08-27T11:11:14.094Z level=INFO msg="OTel collector run finished" correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4
time=2025-08-27T11:11:14.502Z level=INFO msg="Received management plane config apply request" server_type=command
time=2025-08-27T11:11:14.514Z level=WARN msg="Currently error log outputs to stderr. Log monitoring is disabled while applying a config; log errors to file to enable error monitoring" error_log=stderr correlation_id=0b451793-f582-4028-a24a-bdbcd5011992 server_type=command
time=2025-08-27T11:11:14.529Z level=INFO msg="NGINX config tested" output="2025/08/27 11:11:14 [notice] 51#51: js vm init njs: 000075335ABB9980\nnginx: the configuration file /etc/nginx/nginx.conf syntax is ok\nnginx: configuration file /etc/nginx/nginx.conf test is successful\n" correlation_id=0b451793-f582-4028-a24a-bdbcd5011992 server_type=command
time=2025-08-27T11:11:14.530Z level=INFO msg="Reloading NGINX PID" pid=8 correlation_id=0b451793-f582-4028-a24a-bdbcd5011992 server_type=command
2025/08/27 11:11:14 [notice] 8#8: signal 1 (SIGHUP) received from 35, reconfiguring
2025/08/27 11:11:14 [notice] 8#8: reconfiguring
time=2025-08-27T11:11:14.531Z level=INFO msg="No NGINX error logs found to monitor" correlation_id=0b451793-f582-4028-a24a-bdbcd5011992 server_type=command
2025/08/27 11:11:14 [notice] 8#8: js vm init njs: 00007297B7BBA080
2025/08/27 11:11:14 [notice] 8#8: using the "epoll" event method
2025/08/27 11:11:14 [notice] 8#8: start worker processes
2025/08/27 11:11:14 [notice] 8#8: start worker process 53
2025/08/27 11:11:14 [notice] 8#8: start worker process 54
2025/08/27 11:11:14 [notice] 8#8: start worker process 55
2025/08/27 11:11:14 [notice] 8#8: start worker process 56
2025/08/27 11:11:14 [notice] 8#8: start worker process 57
2025/08/27 11:11:14 [notice] 8#8: start worker process 58
2025/08/27 11:11:14 [notice] 30#30: gracefully shutting down
2025/08/27 11:11:14 [notice] 30#30: exiting
2025/08/27 11:11:14 [notice] 34#34: gracefully shutting down
2025/08/27 11:11:14 [notice] 34#34: exiting
2025/08/27 11:11:14 [notice] 31#31: gracefully shutting down
2025/08/27 11:11:14 [notice] 31#31: exiting
2025/08/27 11:11:14 [notice] 34#34: exit
2025/08/27 11:11:14 [notice] 30#30: exit
2025/08/27 11:11:14 [notice] 31#31: exit
2025/08/27 11:11:14 [notice] 32#32: gracefully shutting down
2025/08/27 11:11:14 [notice] 32#32: exiting
2025/08/27 11:11:14 [notice] 33#33: gracefully shutting down
2025/08/27 11:11:14 [notice] 33#33: exiting
2025/08/27 11:11:14 [notice] 32#32: exit
2025/08/27 11:11:14 [notice] 36#36: gracefully shutting down
2025/08/27 11:11:14 [notice] 36#36: exiting
2025/08/27 11:11:14 [notice] 33#33: exit
2025/08/27 11:11:14 [notice] 36#36: exit
2025/08/27 11:11:14 [notice] 8#8: signal 17 (SIGCHLD) received from 31
2025/08/27 11:11:14 [notice] 8#8: worker process 31 exited with code 0
2025/08/27 11:11:14 [notice] 8#8: signal 29 (SIGIO) received
2025/08/27 11:11:14 [notice] 8#8: signal 17 (SIGCHLD) received from 34
2025/08/27 11:11:14 [notice] 8#8: worker process 34 exited with code 0
2025/08/27 11:11:14 [notice] 8#8: worker process 30 exited with code 0
2025/08/27 11:11:14 [notice] 8#8: worker process 32 exited with code 0
2025/08/27 11:11:14 [notice] 8#8: worker process 33 exited with code 0
2025/08/27 11:11:14 [notice] 8#8: signal 29 (SIGIO) received
2025/08/27 11:11:14 [notice] 8#8: signal 17 (SIGCHLD) received from 30
2025/08/27 11:11:14 [notice] 8#8: signal 17 (SIGCHLD) received from 36
2025/08/27 11:11:14 [notice] 8#8: worker process 36 exited with code 0
2025/08/27 11:11:14 [notice] 8#8: signal 29 (SIGIO) received
time=2025-08-27T11:11:14.885Z level=INFO msg="OTel Collector shutdown" state=Closed correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4
time=2025-08-27T11:11:14.885Z level=INFO msg="Restarting OTel collector" correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4
time=2025-08-27T11:11:15.645Z level=INFO msg="All NGINX workers have been reloaded" correlation_id=0b451793-f582-4028-a24a-bdbcd5011992 server_type=command
time=2025-08-27T11:11:15.645Z level=INFO msg="NGINX reloaded" process_id=8 correlation_id=0b451793-f582-4028-a24a-bdbcd5011992 server_type=command
time=2025-08-27T11:11:15.645Z level=INFO msg="Finished monitoring post reload" correlation_id=0b451793-f582-4028-a24a-bdbcd5011992 server_type=command
time=2025-08-27T11:11:15.646Z level=WARN msg="NGINX Plus API is not configured, searching for stub status endpoint" correlation_id=0b451793-f582-4028-a24a-bdbcd5011992
time=2025-08-27T11:11:15.646Z level=INFO msg="Sending data plane response message" message="Config apply successful" status=COMMAND_STATUS_OK correlation_id=0b451793-f582-4028-a24a-bdbcd5011992 server_type=command
time=2025-08-27T11:11:15.647Z level=INFO msg="Updating overview after nginx config update" correlation_id=0b451793-f582-4028-a24a-bdbcd5011992 server_type=command
time=2025-08-27T11:11:18.447Z level=WARN msg="Currently error log outputs to stderr. Log monitoring is disabled while applying a config; log errors to file to enable error monitoring" error_log=stderr correlation_id=8e1fa5b7-8336-11f0-b24e-b2362a4150d4
2025/08/27 11:38:56 [error] 57#57: *171 "/etc/nginx/html/index.html" is not found (2: No such file or directory), client: 127.0.0.1, server: , request: "GET / HTTP/1.1", host: "localhost:8081"
127.0.0.1 - - [27/Aug/2025:11:38:56 +0000] "GET / HTTP/1.1" 404 146 "-" "curl/8.14.1"
2025/08/27 11:38:56 [info] 57#57: *171 client 127.0.0.1 closed keepalive connection
2025/08/27 11:39:57 [info] 57#57: *178 client closed connection while waiting for request, client: 10.42.191.139, server: 0.0.0.0:8081
time=2025-08-27T11:59:23.440Z level=INFO msg="Dialing grpc server" server_addr=public-nginx-nginx-gateway-fabric.system-gateway-controller.svc:443 correlation_id="correlation_id=45b7d708-833d-11f0-b24e-b2362a4150d4" server_type=command
time=2025-08-27T11:59:23.444Z level=INFO msg="Closing grpc connection" correlation_id="correlation_id=45b7d708-833d-11f0-b24e-b2362a4150d4" server_type=command
time=2025-08-27T11:59:23.444Z level=ERROR msg="Failed toreceive message from subscribe stream" error="rpc error: code = Canceled desc = grpc: the client connection is closing" correlation_id=8b249f52-8336-11f0-b24e-b2362a4150d4 server_type=command
time=2025-08-27T11:59:23.477Z level=INFO msg="Connection created" response=response:{status:COMMAND_STATUS_OK} correlation_id="correlation_id=45b7d708-833d-11f0-b24e-b2362a4150d4" server_type=command
time=2025-08-27T11:59:23.477Z level=INFO msg="Agent connected" correlation_id="correlation_id=45b7d708-833d-11f0-b24e-b2362a4150d4" server_type=command
time=2025-08-27T11:59:23.477Z level=INFO msg="Successfully sent create connection request" response=response:{status:COMMAND_STATUS_OK} correlation_id="correlation_id=45b7d708-833d-11f0-b24e-b2362a4150d4" server_type=command
time=2025-08-27T11:59:25.774Z level=INFO msg="Received management plane config apply request" server_type=command
time=2025-08-27T11:59:25.774Z level=INFO msg="Sending data plane response message" message="Config apply successful, no files to change" status=COMMAND_STATUS_OK correlation_id=512b4c38-3e9f-4e77-87be-37367a76fbda server_type=command
NGINX Configuration: kubectl -n <nginx-deployment-namespace> exec -it deployments/<nginx-deployment> -- nginx -T
2025/08/27 12:18:07 [notice] 940#940: js vm init njs: 0000714442C2E980
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
# configuration file /etc/nginx/nginx.conf:
load_module /usr/lib/nginx/modules/ngx_http_js_module.so;
include /etc/nginx/main-includes/*.conf;
worker_processes auto;
pid /var/run/nginx/nginx.pid;
events {
include /etc/nginx/events-includes/*.conf;
}
http {
include /etc/nginx/conf.d/*.conf;
include /etc/nginx/mime.types;
js_import /usr/lib/nginx/modules/njs/httpmatches.js;
default_type application/octet-stream;
proxy_headers_hash_bucket_size 512;
proxy_headers_hash_max_size 1024;
server_names_hash_bucket_size 256;
server_names_hash_max_size 1024;
variables_hash_bucket_size 512;
variables_hash_max_size 1024;
sendfile on;
tcp_nopush on;
server_tokens off;
server {
listen unix:/var/run/nginx/nginx-status.sock;
access_log off;
location /stub_status {
stub_status;
}
}
}
stream {
variables_hash_bucket_size 512;
variables_hash_max_size 1024;
map_hash_max_size 2048;
map_hash_bucket_size 256;
log_format stream-main '$remote_addr [$time_local] '
'$protocol $status $bytes_sent $bytes_received '
'$session_time "$ssl_preread_server_name"';
access_log /dev/stdout stream-main;
include /etc/nginx/stream-conf.d/*.conf;
}
# configuration file /etc/nginx/main-includes/main.conf:
error_log stderr info;
# configuration file /etc/nginx/events-includes/events.conf:
worker_connections 1024;
# configuration file /etc/nginx/conf.d/http.conf:
http2 on;
# Set $gw_api_compliant_host variable to the value of $http_host unless $http_host is empty, then set it to the value
# of $host. We prefer $http_host because it contains the original value of the host header, which is required by the
# Gateway API. However, in an HTTP/1.0 request, it's possible that $http_host can be empty. In this case, we will use
# the value of $host. See http://nginx.org/en/docs/http/ngx_http_core_module.html#var_host.
map $http_host $gw_api_compliant_host {
'' $host;
default $http_host;
}
# Set $connection_header variable to upgrade when the $http_upgrade header is set, otherwise, set it to close. This
# allows support for websocket connections. See https://nginx.org/en/docs/http/websocket.html.
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
## Returns just the path from the original request URI.
map $request_uri $request_uri_path {
"~^(?P<path>[^?]*)(\?.*)?$" $path;
}
# NGINX health check server block.
server {
listen 8081;
location = /readyz {
access_log off;
return 200;
}
}
js_preload_object matches from /etc/nginx/conf.d/matches.json;
server {
listen unix:/var/run/nginx/nginx-503-server.sock;
access_log off;
return 503;
}
server {
listen unix:/var/run/nginx/nginx-500-server.sock;
access_log off;
return 500;
}
upstream invalid-backend-ref {
random two least_conn;
server unix:/var/run/nginx/nginx-500-server.sock;
}
# configuration file /etc/nginx/mime.types:
types {
text/html html htm shtml;
text/css css;
text/xml xml;
image/gif gif;
image/jpeg jpeg jpg;
application/javascript js;
application/atom+xml atom;
application/rss+xml rss;
text/mathml mml;
text/plain txt;
text/vnd.sun.j2me.app-descriptor jad;
text/vnd.wap.wml wml;
text/x-component htc;
image/avif avif;
image/png png;
image/svg+xml svg svgz;
image/tiff tif tiff;
image/vnd.wap.wbmp wbmp;
image/webp webp;
image/x-icon ico;
image/x-jng jng;
image/x-ms-bmp bmp;
font/woff woff;
font/woff2 woff2;
application/java-archive jar war ear;
application/json json;
application/mac-binhex40 hqx;
application/msword doc;
application/pdf pdf;
application/postscript ps eps ai;
application/rtf rtf;
application/vnd.apple.mpegurl m3u8;
application/vnd.google-earth.kml+xml kml;
application/vnd.google-earth.kmz kmz;
application/vnd.ms-excel xls;
application/vnd.ms-fontobject eot;
application/vnd.ms-powerpoint ppt;
application/vnd.oasis.opendocument.graphics odg;
application/vnd.oasis.opendocument.presentation odp;
application/vnd.oasis.opendocument.spreadsheet ods;
application/vnd.oasis.opendocument.text odt;
application/vnd.openxmlformats-officedocument.presentationml.presentation
pptx;
application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
xlsx;
application/vnd.openxmlformats-officedocument.wordprocessingml.document
docx;
application/vnd.wap.wmlc wmlc;
application/wasm wasm;
application/x-7z-compressed 7z;
application/x-cocoa cco;
application/x-java-archive-diff jardiff;
application/x-java-jnlp-file jnlp;
application/x-makeself run;
application/x-perl pl pm;
application/x-pilot prc pdb;
application/x-rar-compressed rar;
application/x-redhat-package-manager rpm;
application/x-sea sea;
application/x-shockwave-flash swf;
application/x-stuffit sit;
application/x-tcl tcl tk;
application/x-x509-ca-cert der pem crt;
application/x-xpinstall xpi;
application/xhtml+xml xhtml;
application/xspf+xml xspf;
application/zip zip;
application/octet-stream bin exe dll;
application/octet-stream deb;
application/octet-stream dmg;
application/octet-stream iso img;
application/octet-stream msi msp msm;
audio/midi mid midi kar;
audio/mpeg mp3;
audio/ogg ogg;
audio/x-m4a m4a;
audio/x-realaudio ra;
video/3gpp 3gpp 3gp;
video/mp2t ts;
video/mp4 mp4;
video/mpeg mpeg mpg;
video/quicktime mov;
video/webm webm;
video/x-flv flv;
video/x-m4v m4v;
video/x-mng mng;
video/x-ms-asf asx asf;
video/x-ms-wmv wmv;
video/x-msvideo avi;
}
# configuration file /etc/nginx/stream-conf.d/stream.conf:
server {
listen unix:/var/run/nginx/connection-closed-server.sock;
return "";
}
Additional context
- I have changed service/pod names to something generic
- I have changed external ips to something generic