SSL passthrough

Traefik Traefik v2
,
1

Hello everyone,
First time using v2.0 of Traefik and Im wondering if anyone managed to get SSLpassthrough working. Is there an example to follow?
Tried the 'passtlsclientcert' middleware with a single node rancher but it's not working.
Any help or guidance is immensely appreciated.

version: '3.3'
services:
    rancher:
        image: rancher/rancher:v2.3.0-rc9
        restart: always
        networks:
            - traefik
        labels:
            - traefik.enable=true
            # rancher router
            - traefik.http.routers.rancher.entrypoints=http
            - traefik.http.routers.rancher.rule=Host(`rancher.thinkpad.tld`)
            - traefik.http.routers.rancher.middlewares=https-redirect@file
            # rancher-ssl router
            - traefik.http.routers.rancher-ssl.entrypoints=https
            #- traefik.http.routers.rancher-ssl.tls=true
            - traefik.http.routers.rancher-ssl.rule=Host(`rancher.thinkpad.tld`)
            - traefik.http.middlewares.rancher-passtlsclientcert.passtlsclientcert.pem=true
            - traefik.http.routers.rancher-ssl.middlewares=rancher-passtlsclientcert
            - traefik.http.routers.rancher-ssl.service=rancher
            # rancher service
            - traefik.http.services.rancher.loadbalancer.server.port=80
        volumes:
            - ./data:/var/lib/rancher
        container_name: 'rancher'
networks:
  traefik:
    external: true
2

For anyone interested. This works with TCP routers.
I was able to access rancher behind Traefik while using rancher's default certificates.

version: '3.3'
services:
    rancher:
        image: rancher/rancher:v2.3.0-rc9
        restart: always
        networks:
            - traefik
        labels:
            - traefik.enable=true
            # rancher router
            - traefik.tcp.routers.rancher.rule=HostSNI(`rancher.thinkpad.tld`)
            - traefik.tcp.routers.rancher.tls.passthrough=true
            - traefik.tcp.routers.rancher.service=rancher
            - traefik.tcp.services.rancher.loadbalancer.server.port=443

        volumes:
            - ./data:/var/lib/rancher
        container_name: 'rancher'

networks:
  traefik:
    external: true
1 Like