unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 7 Actions Packages Projects Releases Wiki Activity

Terminate haproxy edge TLS at Traefik #547

Merged
benvin merged 1 commits from benvin/haproxy-httproute-termination into main 2026-10-13 21:12:40 +11:00
Conversation 1 Commits 1 Files Changed 6
+67 -43
unkin-agent commented 2026-10-13 21:08:07 +11:00
Member
Copy Link
Copy Source

Browsers coalesce HTTP/2 connections across *.unkin.net hosts sharing the traefik-external IP. A request for a haproxy-fronted host (e.g. git.unkin.net) on a grafana connection skips SNI passthrough and hits Traefik with no HTTP router, returning 404.

  • replace the TLS passthrough listener with an HTTPS listener terminating the three LE wildcards
  • replace the haproxy TLSRoute with an HTTPRoute for the same hosts
  • add a BackendTLSPolicy re-encrypting to haproxy:443
Browsers coalesce HTTP/2 connections across *.unkin.net hosts sharing the traefik-external IP. A request for a haproxy-fronted host (e.g. git.unkin.net) on a grafana connection skips SNI passthrough and hits Traefik with no HTTP router, returning 404. - replace the TLS passthrough listener with an HTTPS listener terminating the three LE wildcards - replace the haproxy TLSRoute with an HTTPRoute for the same hosts - add a BackendTLSPolicy re-encrypting to haproxy:443
unkin-agent added 1 commit 2026-10-13 21:08:07 +11:00
Terminate haproxy edge TLS at Traefik to fix coalesced-connection 404s
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
cad1232ad0
unkin-agent commented 2026-10-13 21:10:03 +11:00
Author
Member
Copy Link
Copy Source

No findings.

No findings.
benvin merged commit 02ded6c26b into main 2026-10-13 21:12:40 +11:00
benvin deleted branch benvin/haproxy-httproute-termination 2026-10-13 21:12:41 +11:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#547
Delete Branch "benvin/haproxy-httproute-termination"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?