vicaya commented on issue #2254: URL: https://github.com/apache/apisix-ingress-controller/issues/2254#issuecomment-2205841895
ApisixRoute supports stream routes, which _should_ support tls over tcp. But alas, the implementation is buggy, the generated apisix upstream has a hard coded scheme of "http". This should be fixable, as stream route can match ingressPort (with tls enabled) and host (SNI), which _should_ use the "tls" scheme if associated tls cert is not found, i.e., no termination (aka passthrough). The gateway api TLSRoute passthrough mode is broken as well, unfortunately. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications-unsubscr...@apisix.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org