https://rancher.com/ logo
Title
c

cool-monkey-71774

02/16/2023, 10:09 AM
Hi everyone, I have a haproxy that load balance requests to my kubernetes cluster, in order to keep the IP address of the client I used the
send-proxy
param in haproxy, and I used the
use-proxy-protocol
config for my rke2-nginx-ingress-controller. Unfortunately when I do this my services under nodeport are no longer working, and I also want to keep the ip for the nodeport in order to apply network policies based on client ip, any idea how to fix maybe the proxy or my nodeport so it works ?
b

bright-whale-83501

02/16/2023, 1:09 PM
could you apply network policies in haproxy only? Or do you want to manage them within k8s?
c

cool-monkey-71774

02/16/2023, 1:10 PM
I would like to manage them in k8s as if someone make the request directly to my node (for whatever reason) then the policy wont apply