0

I have ingress-nginx running on a 3-node k3s cluster. In front of that, I have haproxy running, attached to my public IP and using proxy protocol to send HTTP/S (et al) connections to the cluster, and it works great with HTTP/1.1 and HTTP/2. Ingress-nginx manages the TLS termination for HTTPS connections, and haproxy can manage the TCP connections easily enough.

My question is: can I add support for HTTP/3 to this setup? I cannot see any way to do it without moving TLS termination to haproxy, since haproxy would need some mechanism to know where to route incoming UDP packets, and for that to work all the ingress-nginx pods on the cluster would need a place to share that state.

I've searched high and low for a howto on this, and haven't found any that doesn't use haproxy for TLS termination.

koehn
  • 361

0 Answers0