TCP SNI passthrough with "wildcard" routing?

Traefik Traefik v2
1

hello,
iam trying to use Traefik as a global ingress gateway and want to split traffic for 2 domains.
For Example like so:

[tcp.routers]
  [tcp.routers.example1]
    entryPoints = ["https"]
    rule = "HostSNI(`*.example1.com`)"
    service = "example1_backend_https"
    [tcp.routers.example1.tls]
        passthrough = true


  [tcp.routers.example2]
    entryPoints = ["https"]
    rule = "HostSNI(`*.example2.com`)"
    service = "example2_backend_https"
    [tcp.routers.example2.tls]
        passthrough = true

I Think this is not implemented yet? something Like HostSniRegex('*.domain.tld')?

Best Regards

2

Yeah, it does not look like there is a way to make this work currently.

3

I would also like to be able to do this. Any idea if there's a feature request for it or where to make a request?

4

@ldez is that something you are considering?

5

Would be nice to have this feature.
So i dont have to use haproxy for example.
Best Regards

6

I would definitely love to see this as well. It's not possible to add all subdomains of my application because, well, they're a wildcard haha :stuck_out_tongue_closed_eyes:

7

I also agree, this would be hugely useful. I build many sites that dynamically create subdomains. So I depend on wildcard SSL certs. When it comes time to specify routing rules, I rely heavily on regex/wildcard pattern matching because I cannot manually enumerate all subdomains.

8

I've prepared a patch to allow wildcard SNI matches.
The patch can be obtained from our github fork: Allow wildcards in HostSNI · Soffid/traefik@6847738 · GitHub

It would be nice it could be merged in mainstream code.