Join Slack
Powered by
This message was deleted.
# rke2
a
adamant-kite-43734
11/14/2024, 9:31 PM
This message was deleted.
a
abundant-hair-58573
11/19/2024, 9:52 PM
I know this is a kubernetes nginx ingress issue and not RKE2, but I wanted to put my findings here in case anyone else runs across this. It appears to be an issue with the TLS ClientHello packet being fragmented in newer versions of chrome, and that causes problems with ssl-passthrough in nginx ingress. The real solution is to stop using ssl-passthrough, but you can also fiddle with your browser settings as a workaround. You need to disable this feature in your browser Chrome:
chrome://flags/#enable-tls13-kyber
Edge:
edge://flags/#enable-tls13-kyber
Firefox: about:config –> security.tls.enable_kyber •
https://tldr.fail/
•
https://github.com/kubernetes/ingress-nginx/issues/11424
•
https://blog.boll.ch/webserver-are-suddenly-not-reachable-anymore-due-to-tls-1-3-hybridized-kyber-support/
3
Views
Open in Slack
Previous
Next