Does Nginx Gateway Fabric support "use-cluster-ip: true" for TCP and UDP traffic?

[Nikoolayy1]

I see that this is supported for Nginx Ingress VirtualServer CRD but not TransportServer CRD as I mentioned in nginx/kubernetes-ingress#8776 , so I wanted to check here for TCP/UDP or TLS passthrough if it is supported in the k8s gateway,

[bjee19]

Hey @Nikoolayy1, currently NGINX Gateway Fabric does not support sending traffic to a Kubernetes Service's clusterIP. However, if you'd like to see that implemented, you can feel free to open up and issue describing your use case!

[bjee19]

As a side note, we do support TLS passthrough via TLSRoute, and are looking to support TCPRoute and UDPRoute soon.

[Nikoolayy1]

Hey @bjee19 a use case is when you have F5 BIG-IP and CIS and the Nginx Ingress or Gateway Fabric is just as a layer 3 entry and the k8s service is with internaltrafficpolicy set to Local this way Nginx will contact only app pods on the same node and F5 with HTTP/HTTPS health monitors will know which nodes have the app pods through the nginx gateway fabric.

The fabric is deployed in daemonset. If the use-cluster-ip: true is not enabled then the internaltrafficpolicy set to Local does not take effect at all. I tested this with VirtualServer CRD and that supports it and it works https://my.f5.com/manage/s/article/K000092470 but Nginx Ingress does not support this for TransportServer and there is no SSL passthrough.