TCP Routers

[Yaya48]

Hi, is it possible with Pangolin to pass through TLS and specify SNI on a TCP router ? Traefik supports that.

[oschwartz10612]

To do this you would need to make a raw TCP resource. Right now Pangolin is configured to use traeifk to terminate ssl connections.

[Yaya48]

To do this you would need to make a raw TCP resource. Right now Pangolin is configured to use traeifk to terminate ssl connections.

I mean that's what I've done but it doesn't seems to work I also use proxy protocol v2 on it it's for stalwart. But I get tls error

[Yaya48]

        - traefik.tcp.routers.stalwart-web.rule=HostSNI(`mail.host.com`) || HostSNI(`autodiscover.host.com`) || HostSNI(`autoconfig.host.com`) || HostSNI(`mta-sts.host.com`)
        - traefik.tcp.routers.stalwart-web.entrypoints=https
        - traefik.tcp.routers.stalwart-web.tls.passthrough=true
        - traefik.tcp.routers.stalwart-web.service=stalwart-web
        - traefik.tcp.services.stalwart-web.loadbalancer.server.port=443
        - traefik.tcp.services.stalwart-web.loadbalancer.proxyProtocol.version=2

        - traefik.tcp.routers.stalwart-smtp.rule=HostSNI(`*`)
        - traefik.tcp.routers.stalwart-smtp.entrypoints=smtp
        - traefik.tcp.routers.stalwart-smtp.service=stalwart-smtp
        - traefik.tcp.services.stalwart-smtp.loadbalancer.server.port=25
        - traefik.tcp.services.stalwart-smtp.loadbalancer.proxyProtocol.version=2

        - traefik.tcp.routers.stalwart-jmap.rule=HostSNI(`*`)
        - traefik.tcp.routers.stalwart-jmap.tls.passthrough=true
        - traefik.tcp.routers.stalwart-jmap.entrypoints=https
        - traefik.tcp.routers.stalwart-jmap.service=stalwart-jmap
        - traefik.tcp.services.stalwart-jmap.loadbalancer.server.port=443
        - traefik.tcp.services.stalwart-jmap.loadbalancer.proxyProtocol.version=2

        - traefik.tcp.routers.stalwart-smtps.rule=HostSNI(`*`)
        - traefik.tcp.routers.stalwart-smtps.tls.passthrough=true
        - traefik.tcp.routers.stalwart-smtps.entrypoints=smtps
        - traefik.tcp.routers.stalwart-smtps.service=stalwart-smtps
        - traefik.tcp.services.stalwart-smtps.loadbalancer.server.port=465
        - traefik.tcp.services.stalwart-smtps.loadbalancer.proxyProtocol.version=2

        - traefik.tcp.routers.stalwart-imaps.rule=HostSNI(`*`)
        - traefik.tcp.routers.stalwart-imaps.tls.passthrough=true
        - traefik.tcp.routers.stalwart-imaps.entrypoints=imaps
        - traefik.tcp.routers.stalwart-imaps.service=stalwart-imaps
        - traefik.tcp.services.stalwart-imaps.loadbalancer.server.port=993
        - traefik.tcp.services.stalwart-imaps.loadbalancer.proxyProtocol.version=2

Thats the config i used when i had only traefik without pangolin i wanna know if something similar is possible

[Yaya48]

On the TCP routers i added proxy protocol v2