-
Notifications
You must be signed in to change notification settings - Fork 113
Wrong assertion with TLS passthrough in reverse proxy doc #674
Copy link
Copy link
Open
Description
| This capability is called **TLS passthrough**, and among common reverse proxies, **only Traefik supports it** via its TCP routers. Other reverse proxies (Nginx, Caddy, Nginx Proxy Manager) terminate TLS themselves and cannot forward the raw encrypted connection, which breaks the proxy's certificate management. |
This is not true; at least nginx supports tls passthrough with stream module. See https://nginx.org/en/docs/stream/ngx_stream_core_module.html.
Depends on if your distro enables the feature though, but at least on Debian, it's not hard to convert the existing configuration to be compatible with passthrough on port 443.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels