Skip to content

Wrong assertion with TLS passthrough in reverse proxy doc #674

@HarukaMa

Description

@HarukaMa

This capability is called **TLS passthrough**, and among common reverse proxies, **only Traefik supports it** via its TCP routers. Other reverse proxies (Nginx, Caddy, Nginx Proxy Manager) terminate TLS themselves and cannot forward the raw encrypted connection, which breaks the proxy's certificate management.

This is not true; at least nginx supports tls passthrough with stream module. See https://nginx.org/en/docs/stream/ngx_stream_core_module.html.

Depends on if your distro enables the feature though, but at least on Debian, it's not hard to convert the existing configuration to be compatible with passthrough on port 443.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions