Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow opt out of SNI ALB #129

Closed
mikkeloscar opened this issue Feb 22, 2018 · 1 comment
Closed

Allow opt out of SNI ALB #129

mikkeloscar opened this issue Feb 22, 2018 · 1 comment

Comments

@mikkeloscar
Copy link
Collaborator

mikkeloscar commented Feb 22, 2018

#111 added support for aggregating ingresses with different Certificates under a single ALB using SNI.

Some clients might not support SNI and thus we should support opting out of an SNI ALB and create an a single ALB per certificate like before.

I suggest we do this with an annotation on the ingress object.

Something like:

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: myingress
  annotations:
    zalando.org/aws-load-balancer-sni: false

https://en.wikipedia.org/wiki/Server_Name_Indication

@szuecs
Copy link
Member

szuecs commented Feb 22, 2018

It might makes sense to opt-out globally per flag, too

mikkeloscar added a commit that referenced this issue Feb 23, 2018
)

* Make it possible to get a unique ALB for a single ingress resource

Fix #129

* Few ALBs

* Add test for when LB is not shared
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants