Ingress-nginx: Documentation for ProxyProtocol with AWS ELB to get Client IP

[ohaiwalt]

Hi,

While attempting to get ProxyProtocol working on AWS to get Client IPs, I followed the docs and added the ProxyProtocol policy to the ELB and use-proxy-protocol: "true" on the nginx-ingress-controller configMap, I ran into what seemed like a brick wall and it was only after talking with @justinsb did I discover that there's an nginx-ingress-controller service annotation for that, described in https://github.com/kubernetes/kubernetes/pull/24569

What I was missing was this doing a string match against this constant so the ProxyProtocol policy I had on the ELB wasn't working due to being incorrectly named.

I'd be happy to submit a PR for some updates, creating the issue for anyone else who runs into this.

[whereisaaron]

I saw your issue in the chat but you solved it with a Service annotation like below. Note for others, despite the discussion right now, the only allowed value is "*".

  annotations:
    # Proxy Protocol must also be enabled in the nginx config map 'use-proxy-protocol'
    service.beta.kubernetes.io/aws-load-balancer-proxy-protocol: "*"

[aledbf]

Closing. This example shows how it's possible to configure the ELB https://github.com/kubernetes/ingress/tree/master/examples/aws/nginx

[PassKit]

@aledbf your link is a 404

[aledbf]

@PassKit https://github.com/kubernetes/ingress-nginx/tree/master/examples/aws

[PassKit]

Also a 404!

[blairccx]

FWIW, I think this is where the aforementioned broken links would take you:
https://github.com/kubernetes/ingress-nginx/tree/master/deploy/provider/aws

[adubkov]

again 404.

[nvtkaszpir]

https://github.com/kubernetes/ingress-nginx/blob/master/deploy/aws/l4/service-l4.yaml

[paulashbourne]

https://github.com/kubernetes/ingress-nginx/blob/master/deploy/aws/l4/service-l4.yaml

404

[aledbf]

404

@paulashbourne the deployment now is just one yaml file.
Please check https://kubernetes.github.io/ingress-nginx/deploy/#network-load-balancer-nlb