TLS passthrough and IP forwarding?

Traefik Traefik v2
1

Hi,

I have configured the following Ingress route (see below). It works almost the same way as required.
The only problem is that my backend always got the same IP address of the Ingress controller (?) and not the real IP address, of the callers.

  • Is it possible configure traefik somehow to keep the IP address of the real callers in tcp/ip packages, which go to my backend?
  • If not, is there any other way to pass the IP address of the callers to backend while still having TLS passthrough enabled?

Best regards,
Igor

apiVersion: traefik.containo.us/v1alpha1
kind: IngressRouteTCP
metadata:
  annotations:
    kubernetes.io/ingress.class: ingress-int
  labels:
    app.kubernetes.io/name: test-server
  name: test-server
  namespace: services-test
spec:
  entryPoints:
    - websecure
  tls:
    passthrough: true
  routes:
    - match: HostSNI(`test.net`)      
      services:
        - name: test-server
          port: 9000
2

To keep the IP, you would need to use ProxyProtocol, which prepends the IP to the TCP connection/request. With regular http, it is usually passed on in the headers.