<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><br>
</p>
<div class="moz-cite-prefix">El 6/7/22 a las 10:47, Francis Daly
escribió:<br>
</div>
<blockquote type="cite" cite="mid:20220706134731.GE14648@daoine.org">
<pre class="moz-quote-pre" wrap="">On Tue, Jul 05, 2022 at 12:53:05PM +0000, Daniel Armando Rodriguez via nginx wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">El 2022-07-02 08:24, Francis Daly escribió:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">On Fri, Jun 24, 2022 at 04:23:54PM -0300, Daniel Armando Rodriguez
wrote:
</pre>
</blockquote>
</blockquote>
<pre class="moz-quote-pre" wrap="">
Hi there,
</pre>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Made this representation to illustrate the situation.
<a class="moz-txt-link-freetext" href="https://i.postimg.cc/Zq1Ndyws/scheme.png">https://i.postimg.cc/Zq1Ndyws/scheme.png</a>
</pre>
</blockquote>
</blockquote>
</blockquote>
<pre class="moz-quote-pre" wrap="">
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">What I need to do is allowing traefik "black" box to negotiate SSL
certificate directly with Let's Encrypt, that was intended to be referred as
stream.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
I think you are saying that you want nginx to be a "plain" tcp-forwarder
in this case.
(I'm not certain *why* that matters here, but that's ok; I don't need
to understand it ;-) .)
Does <a class="moz-txt-link-freetext" href="http://nginx.org/en/docs/stream/ngx_stream_proxy_module.html">http://nginx.org/en/docs/stream/ngx_stream_proxy_module.html</a> work
for you?
Something like
==
stream {
server {
listen nginx-ip:443;
proxy_pass traefik-ip:443;
}
}
==
(If you have a stream listener on an IP:port, you cannot also have a
http listener on that same IP:port.)
Your picture also shows some blue lines on the left-hand
side, so it may be that you also want something like
<a class="moz-txt-link-freetext" href="http://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html">http://nginx.org/en/docs/stream/ngx_stream_ssl_preread_module.html</a>,
to choose which "upstream" to proxy_pass to, depending on the server
name presented in the SSL connection to nginx.
Cheers,
f
</pre>
</blockquote>
<div class="moz-signature"><br>
</div>
<div class="moz-signature">Nginx is actually working as RP for
several subdomains for which is also SSL termination. The traefik
box is out of my scope, but it has the ability to negotiate TLS
certificates for its own. That's why I need to forward just
specific subdomain TCP traffic to it. <br>
</div>
<div class="moz-signature"><br>
</div>
<div class="moz-signature"><br>
</div>
<div class="moz-signature"> <br>
<div dir="ltr">________________________________________________<br>
<table>
<tbody>
<tr>
<td><img
src="https://correo.unau.edu.ar/skins/elastic/images/logo.svg"
width="73" height="96"></td>
<td><strong>Daniel A. Rodriguez</strong><br>
<em>Informática, Conectividad y Sistemas</em><br>
Universidad Nacional del Alto Uruguay<br>
San Vicente - Misiones - Argentina<br>
<a href="https://informatica.unau.edu.ar" rel="noopener">informatica.unau.edu.ar</a></td>
</tr>
</tbody>
</table>
</div>
</div>
</body>
</html>