Use sslh behind traefik

Traefik Traefik v2
3

Alright, I am aware that sftp requires tcp.

In fact this is the main problem that I would like to route http and sftp traffic over port 443.

Due to the fact that sftp does not support HostSNI (cause it does not support tls), I should also not be able to use a Traeffic configuration like this:

traefik.tcp.routers.sshl-tcp.rule=HostSNI(`test.example.com`)

So to solve this problem, there are only three options in my mind:

  1. route all traffic over sslh to traefik (bad, causes huge overhead)
  2. open another port exclusive for sftp (in this environment not possible)
  3. use some technology to tunnle tcp over http (bad, cause the client needs to open a tunnle)

Are there any other (better) options then the three mentioned?

Thanks