Skip to content

Implement load balancer proxy protocol support

Jack Henschel requested to merge jack-proxy-protocol into master

To enable the PROXY protocol [1] of the CERN cloud loadbalancer, we need to set a specific annotation on the Kubernetes Service resource. [2]

Unfortunately, this cannot be configured with the regular IngressController spec. Thus, we need to create an IngressController with the Private endpointPublishingStategy, which will effectively provision a Kubernetes Service of type "ClusterIP". Then, we provision an additional Service of type "LoadBalancer" ourselves, which has the appropriate annotation.

In general, this a probably a useful solution, since we have an easy path to add more annotation (as required) in the future.

Edited by Jack Henschel

Merge request reports