changelog

Signed-off-by: Steve Kriss <krisss@vmware.com>
projectcontour · Jun 20, 2023 · a058a75 · a058a75
1 parent 82189ae
commit a058a75
Showing 1 changed file with 22 additions and 0 deletions.
diff --git a/changelogs/unreleased/5481-skriss-minor.md b/changelogs/unreleased/5481-skriss-minor.md
@@ -0,0 +1,22 @@
+## Gateway API: Support TLS termination with TLSRoute and TCPRoute
+
+Contour now supports using TLSRoute and TCPRoute in combination with TLS termination.
+To use this feature, create a Gateway with a Listener like the following:
+
+```yaml
+- name: tls-listener
+  protocol: TLS
+  port: 5000
+  tls:
+    mode: Terminate
+    certificateRefs:
+    - name: tls-cert-secret
+  allowedRoutes:
+    namespaces:
+      from: All
+---
+```
+
+It is then possible to attach either 1+ TLSRoutes, or a single TCPRoute, to this Listener.
+If using TLSRoute, traffic can be routed to a different backend based on SNI.
+If using TCPRoute, all traffic is forwarded to the backend referenced in the route.