Route TCP to an SFTP server

Traefik Traefik v2
1

I'm extending my Traefik setup to have a new entry point and route SFTP traffic to a server inside the network. At the moment I can't get any connection at all and the logs, even set to debug haven't given me any data to work on.
My static setup is now as follows:

entryPoints:
  #--------------------------
  http:
    address: :6080
    forwardedHeaders:
      trustedIPs: 10.0.10.0/24,172.16.0.0/16,192.168.0.0/16,fc00::/7
      insecure: false
    proxyProtocol:
      trustedIPs: 10.0.10.0/24,172.16.0.0/16,192.168.0.0/16,fc00::/7
      insecure: false
    http:
      redirections:
        entrypoint:
          to: https
          scheme: https
  #--------------------------
  https:
    address: :6443
    forwardedHeaders:
      trustedIPs: 10.0.10.0/24,172.16.0.0/16,192.168.0.0/16,fc00::/7
      insecure: false
    proxyProtocol:
      trustedIPs: 10.0.10.0/24,172.16.0.0/16,192.168.0.0/16,fc00::/7
      insecure: false
    http:
      tls:
        certResolver: letsencrypt
  #--------------------------
  traefik:
    address: :6081
    forwardedHeaders:
      trustedIPs: 10.0.10.0/24,172.16.0.0/16,192.168.0.0/16,fc00::/7
      insecure: false
    proxyProtocol:
      trustedIPs: 10.0.10.0/24,172.16.0.0/16,192.168.0.0/16,fc00::/7
      insecure: false
  #--------------------------
  sftp:
    address: :2223/tcp

and in the dynamic file I've added a tcp: section as follows:

tcp:
  routers:
    sftp-router:
      entryPoints:
        - "sftp"
      rule: "HostSNI(`*`)"
      service: "sftp-service"
      tls:
        passthrough: true

  services:
    sftp-service:
      loadBalancer:
        servers:
          - address: "10.0.10.10:2222"

in the Traefik log all I see is:

time="2023-07-01T16:57:44+01:00" level=debug msg="Starting TCP Server" entryPointName=sftp
time="2023-07-01T16:57:44+01:00" level=debug msg="Creating middleware" entryPointName=sftp middlewareName=metrics-entrypoint middlewareType=Metrics
time="2023-07-01T16:57:44+01:00" level=debug msg="Creating TCP server 0 at 10.0.10.10:2222" serverName=0 entryPointName=sftp routerName=sftp-router@file serviceName=sftp-service
time="2023-07-01T16:57:44+01:00" level=debug msg="Adding Passthrough route for \"HostSNI(`*`)\"" entryPointName=sftp routerName=sftp-router@file

My first question is, have I got this setup completely wrong please? The HTTP(S) routing is fine and has been for the last 2 years, I just can't get any TCP path to the SFTP server.
Thanks, Arthur

2

I think when using

    tls:
        passthrough: true

you enable TLS in Traefik on that route, but you want it to pass as plain TCP, so try removing it.

See simple Traefik TCP example.

3

Thank you, that did the trick nicely. :slight_smile:

4

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.