IngressRouteTCP fails

Traefik Traefik v2
1

Hello! Don't judge me harshly, I have very bad English. I tried to find information and used the official documentation.

The problem is that such a construction works on version 2.2.8, but does not work on 2.4. My backend checks SSL itself.

in logs:

tls: first record does not look like a TLS handshake

apiVersion: traefik.containo.us/v1alpha1
kind: IngressRouteTCP
metadata:
  name: app
  namespace: test
spec:
  entryPoints:
    - websecure
  routes:
    - match: HostSNI(`test1.example.com`)
      kind: Rule
      services:
      - name: test
        port: 443
    tls:
    passthrough: true
2

Hello @Yonris,

Can you try with v2.4.9 and see if the same issue exists?

Also, not sure if it is a copy-paste issue, but passthrough is a subkey of tls, and yaml is an indented format, so you need to ensure that you replace this:

apiVersion: traefik.containo.us/v1alpha1
kind: IngressRouteTCP
metadata:
  name: app
  namespace: test
spec:
  entryPoints:
    - websecure
  routes:
    - match: HostSNI(`test1.example.com`)
      kind: Rule
      services:
      - name: test
        port: 443
    tls: #<--------
    passthrough: true #<------------

with this:

apiVersion: traefik.containo.us/v1alpha1
kind: IngressRouteTCP
metadata:
  name: app
  namespace: test
spec:
  entryPoints:
    - websecure
  routes:
    - match: HostSNI(`test1.example.com`)
      kind: Rule
      services:
      - name: test
        port: 443
  tls:
    passthrough: true
3

Hello! @daniel.tomcej

I checked the indents, everything is in order, I made a mistake in the editor here.

The latest working version for me is "traefik: 2.3.6" deployed with "helm: 9.12.3". Any version above and the construction stops working for me. Perhaps this is because of my backend, but unfortunately I cannot change it.