traefik/integration/fixtures/tcp/non-tls-fallback.toml

[global]
  checkNewVersion = false
  sendAnonymousUsage = false

[log]
  level = "DEBUG"

[entryPoints]
  [entryPoints.tcp]
    address = ":8093"

[api]
  insecure = true

[providers.file]
  filename = "{{ .SelfFilename }}"

## dynamic configuration ##

[tcp]
  [tcp.routers]
    [tcp.routers.to-whoami-a]
      rule = "HostSNI(`whoami-a.test`)"
      service = "whoami-a"
      entryPoints = [ "tcp" ]
      [tcp.routers.to-whoami-a.tls]
        passthrough = true

    [tcp.routers.to-whoami-b]
      rule = "HostSNI(`whoami-b.test`)"
      service = "whoami-b"
      entryPoints = [ "tcp" ]
      [tcp.routers.to-whoami-b.tls]
        passthrough = true

    [tcp.routers.to-whoami-no-cert]
      rule = "HostSNI(`whoami-c.test`)"
      service = "whoami-no-cert"
      entryPoints = [ "tcp" ]
      [tcp.routers.to-whoami-no-cert.tls]

    [tcp.routers.to-whoami-no-tls]
      entryPoints = ["tcp"]
      rule="HostSNI(`*`)"
      service = "whoami-no-tls"

  [tcp.services]
    [tcp.services.whoami-no-tls.loadBalancer]
      [[tcp.services.whoami-no-tls.loadBalancer.servers]]
        address = "whoami-no-tls:8080"

    [tcp.services.whoami-a.loadBalancer]
      [[tcp.services.whoami-a.loadBalancer.servers]]
        address = "whoami-a:8080"

    [tcp.services.whoami-b.loadBalancer]
      [[tcp.services.whoami-b.loadBalancer.servers]]
        address = "whoami-b:8080"

    [tcp.services.whoami-no-cert.loadBalancer]
      [[tcp.services.whoami-no-cert.loadBalancer.servers]]
        address = "whoami-no-cert:8080"