Problem with SSH in self-hosted GitLab instance

Traefik Traefik v3 (latest)
,
1

Hello everyone, I launched a compose docker with the following images:

  • traefik:v3.0
  • gitlab/gitlab-ce:15.10.0-ce.0

The compose docker has the following configuration:

services:
  traefik:
    ...
    command:
      ...
      - --entryPoints.ssh.address=:2222

  gitlab:
    environment:
      ...
      GITLAB_SHELL_SSH_PORT: 2222
    
    labels:
      ...
      traefik.tcp.routers.gitlab-ssh.tls: true
      traefik.tcp.routers.gitlab-ssh.entrypoints: ssh
      traefik.tcp.routers.gitlab-ssh.rule: HostSNI(`${SERVICE_NAME:-gitlab}.${DOMAIN}`)

      traefik.tcp.routers.gitlab-ssh.service: gitlab-ssh-svc
      traefik.tcp.services.gitlab-ssh-svc.loadbalancer.server.port: 2222

My problem is that the moment I try to verify the ssh connection via the command ssh -Tvvv git@gitlab.domain.com -p 2222, the response is "Network is unreachable".

Could you give me some advice to solve this problem?

Thank you

2

As far as I remember SSH is not using TLS, so you can only use HostSNI(`*`) for the TCP router rule and need a dedicated Traefik SSH entrypoint with only the single router and service for SSH.

3

Thanks for the information regarding TLS, however I have already tried the settings you suggested unfortunately, the problem persists