NodeBalancer support for PROXY protocol
Do Linode NodeBalancers support PROXY protocol when talking to the backend, so that I can use transparent TCP proxying and still learn the client's IP address?
I mean this: https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt
Other cloud providers I've tried do support it and it's very useful combined with kubernetes' ingress controllers, both Traefik and Nginx ingress support it.
I don't want to use a HTTPS NodeBalancer, because I'd like to manage virtual hosts and certificates using cert-manager on the kubernetes ingress controller.
4 Replies
Found the answer, it's mentioned at the end of this post in the roadmap for 2020:
https://www.linode.com/2019/12/30/2019-a-year-in-review/
NodeBalancer PROXY protocol support
Hi Linode team, is there any update on this (NodeBalancer PROXY protocol support when the NodeBalancer is in TCP mode)? Similar to the original poster, I'm working with LKE, ingress, cert-manager, and multiple SNI certificates. The lack of PROXY protocol support is surprisingly cumbersome to work around, and is forcing me to evaluate other vendors where such workarounds are not needed and this setup just works out-of-the-box. Thank you.
That's awesome, thanks for the update @phillc. For others searching, there is documentation about this new feature: https://www.linode.com/docs/platform/nodebalancer/nodebalancer-proxypass-configuration/ and LKE-specific annotations here: https://www.linode.com/docs/kubernetes/getting-started-with-load-balancing-on-a-lke-cluster/