Kvindo™ Cloud Docs
A TCP Listener Rule forwards connections from a TCP Listener to a Target Group. Because TCP is Layer 4 there is no path matching — the rule simply directs the stream, optionally re-encrypting it with TLS to the backends.
• Listener — the TCP listener this rule belongs to (spec.tcpListenerId)
• Forward to TCP — send the raw stream to a Target Group (spec.forwardToTcpResponseAction)
• Forward to TLS — re-encrypt to the backends (spec.forwardToTlsResponseAction)
| UI Name | API / kc name | Terraform name | Optional | Format | Default | Is read only | Description |
|---|---|---|---|---|---|---|---|
| Listener | spec.tcpListenerId |
spec.tcp_listener_id |
No | ULID — references a TCP Listener | — | No | The listener this rule belongs to |
| Order | spec.order |
spec.order |
Yes | integer | 0 |
No | Evaluation order; lower is checked first |
| Forward to TCP | spec.forwardToTcpResponseAction |
spec.forward_to_tcp_response_action |
Yes | object — {targetGroupId, toPorts, portMappingType} |
— | No | Forward the raw TCP stream to a Target Group |
| Forward to TLS | spec.forwardToTlsResponseAction |
spec.forward_to_tls_response_action |
Yes | object — adds tls (backend re-encryption) |
— | No | Forward to a Target Group, re-encrypting to the backends |
A rule that forwards the TCP stream to a database Target Group on port 5432.
Terraform
Python SDK
kc CLI
Resource docs
More in this section