Forward Certificate from another server

Traefik Traefik v2
1

How to configure traefik to use certificate from another traefik instance and not serve it's own default certificate?

Here is my use case:

Each organization on my network has their own traefik server that they use for routing internal, DNS-challenged Let's Encrypt certificate, HTTPS traffic. I also have an edge traefik server that forwards requests to organization specific traefik server based on a domain.

HTTP forward works as intend, but I am unable to configure traefik to forward HTTPS traffic to individual organization traefik server to also use their certificate.

Current config:

http:
  routers:
    MyService:
      entryPoints:
        - https
      # my-service.my-organization.org points to Public IP address
      rule: Host(`my-service.my-organization.org`)
      service: "myService"
      tls: {}

  services:
    myService:
      loadBalancer:
        servers:
          # resolved to 10.27.3.10 by internal recursive dns resolver
          - url: "https://my-service.my-organization.org/"

Going to https://my-service.my-organization.org/ on the organization internal network, I get the generated certificate. Works as expected.

Going to https://my-service.my-organization.org/ on the outside network, I get the traefik default certificate.

How to I configure traefik to use the service certificate?

Best regards!

2

Figured it out! Use TCP to forward packets and a dummy http service for https redirect.

Example:

http:
  routers:
    my-service:
      entryPoints:
        - http
      rule: Host(`my-service.my-organization.org`)
      middlewares:
        - redirect
      service: "dummy"
      
  middlewares:
    redirect:
      redirectScheme:
        scheme: https

  services:
    dummy: 
      loadBalancer:
        servers: 
    
tcp: 
  routers:
    my-service:
      rule: "HostSNI(`my-service.my-organization.org`)"
      service: "my-service"
      tls:
        passthrough: true

  services:
    my-service:
      loadBalancer:
        servers:
          - address: "my-service.my-organization.org:443"