Skip to content

add tcp passtrough to traefik#2184

Open
gsaudade99 wants to merge 1 commit into
usegalaxy-eu:masterfrom
gsaudade99:migrate/cvmfs
Open

add tcp passtrough to traefik#2184
gsaudade99 wants to merge 1 commit into
usegalaxy-eu:masterfrom
gsaudade99:migrate/cvmfs

Conversation

@gsaudade99

@gsaudade99 gsaudade99 commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

Part of the stratum 0 migration and upgrade we need to put it behind the traefik and enable tcp passtrough so @natefoo can rsync the stratums. We would need to change the rsync port tho.

The KVM is prepared and right now mounted as read-only. We can switch as soon we test the sync.

To switch, we can stop the old server and make the new one read-write (cvmfs_server transaction).

ref: https://github.com/usegalaxy-eu/issues/issues/616

@gsaudade99
gsaudade99 requested a review from mira-miracoli July 14, 2026 08:36
tcp:
routers:
cvmfs-stratum0-rsync:
rule: "HostSNI(`*`)"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This would be a catchall router. Even though routers get higher priority, the longer the rulestext is, I would prefer to specify a Host here.

@domgz domgz Jul 14, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, there is no HTTP Host header nor TLS handshake in an SSH connection, I don't think there is a way around this.

The port that the cvmfs-rsync entry point uses is afaik the only way Traefik can identify the intended destination of the traffic.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Now I remember I had to handle it the same way with RabbitMQ. Since this is on a different entrypoint, this should be fine.

Comment thread group_vars/traefik.yml
published_port: 8086
protocol: tcp
mode: host
- target_port: 5432

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please don't forget the Configure Firewall task in the playbook itself. 🤓

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants