Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for TLS Passthrough using TLSRoutes #2356

Merged
merged 7 commits into from
Aug 9, 2024
Merged

Add support for TLS Passthrough using TLSRoutes #2356

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
6756a2f
update nginx template for TLS passthrough (#2166)
sarthyparty Jul 8, 2024
eea2a72
add support for TLS route (#2211)
sarthyparty Aug 8, 2024
f4a298c
fix spacing and gated volumes for exp
sarthyparty Aug 9, 2024
e06f098
ran make generate
sarthyparty Aug 9, 2024
ad4646e
reformat
sarthyparty Aug 9, 2024
f0b3f99
revert gating stream conf volumes
sarthyparty Aug 9, 2024
3576853
make generate
sarthyparty Aug 9, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions charts/nginx-gateway-fabric/templates/deployment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -129,8 +129,10 @@ spec:
volumeMounts:
- name: nginx-conf
mountPath: /etc/nginx/conf.d
{{- if .Values.nginxGateway.gwAPIExperimentalFeatures.enable }}
- name: nginx-stream-conf
kate-osborn marked this conversation as resolved.
Show resolved Hide resolved
mountPath: /etc/nginx/stream-conf.d
{{ end }}
- name: module-includes
mountPath: /etc/nginx/module-includes
- name: nginx-secrets
Expand Down Expand Up @@ -168,8 +170,10 @@ spec:
volumeMounts:
- name: nginx-conf
mountPath: /etc/nginx/conf.d
{{- if .Values.nginxGateway.gwAPIExperimentalFeatures.enable }}
- name: nginx-stream-conf
mountPath: /etc/nginx/stream-conf.d
{{ end }}
- name: module-includes
mountPath: /etc/nginx/module-includes
- name: nginx-secrets
Expand Down Expand Up @@ -204,8 +208,10 @@ spec:
volumes:
- name: nginx-conf
emptyDir: {}
{{- if .Values.nginxGateway.gwAPIExperimentalFeatures.enable }}
- name: nginx-stream-conf
emptyDir: {}
{{ end }}
- name: module-includes
emptyDir: {}
- name: nginx-secrets
Expand Down
15 changes: 7 additions & 8 deletions internal/mode/static/nginx/conf/nginx-plus.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,18 +55,17 @@ http {
}

stream {
kate-osborn marked this conversation as resolved.
Show resolved Hide resolved
variables_hash_bucket_size 512;
variables_hash_max_size 1024;
variables_hash_bucket_size 512;
variables_hash_max_size 1024;

map_hash_max_size 2048;
map_hash_bucket_size 256;
map_hash_max_size 2048;
map_hash_bucket_size 256;

log_format stream-main '$remote_addr [$time_local] '
log_format stream-main '$remote_addr [$time_local] '
'$protocol $status $bytes_sent $bytes_received '
'$session_time "$ssl_preread_server_name"';
sarthyparty marked this conversation as resolved.
Show resolved Hide resolved
access_log /dev/stdout stream-main;

include /etc/nginx/stream-conf.d/*.conf;
access_log /dev/stdout stream-main;
include /etc/nginx/stream-conf.d/*.conf;
}

mgmt {
Expand Down
15 changes: 7 additions & 8 deletions internal/mode/static/nginx/conf/nginx.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,16 +40,15 @@ http {
}

stream {
variables_hash_bucket_size 512;
variables_hash_max_size 1024;
variables_hash_bucket_size 512;
variables_hash_max_size 1024;

map_hash_max_size 2048;
map_hash_bucket_size 256;
map_hash_max_size 2048;
map_hash_bucket_size 256;

log_format stream-main '$remote_addr [$time_local] '
log_format stream-main '$remote_addr [$time_local] '
'$protocol $status $bytes_sent $bytes_received '
'$session_time "$ssl_preread_server_name"';
sarthyparty marked this conversation as resolved.
Show resolved Hide resolved
access_log /dev/stdout stream-main;

include /etc/nginx/stream-conf.d/*.conf;
access_log /dev/stdout stream-main;
include /etc/nginx/stream-conf.d/*.conf;
}
Loading