Kvindo™ Cloud Docs
A TLS Listener Rule forwards connections from a TLS Listener (after TLS has been terminated) to a Target Group. Like a TCP rule it works at Layer 4 with no path matching; it can forward the plain stream or re-encrypt it to the backends.
• Listener — the TLS listener this rule belongs to (spec.tlsListenerId)
• Forward to TCP — send the decrypted stream to a Target Group (spec.forwardToTcpResponseAction)
• Forward to TLS — re-encrypt to the backends (spec.forwardToTlsResponseAction)
| UI Name | API / kc name | Terraform name | Optional | Format | Default | Is read only | Description |
|---|---|---|---|---|---|---|---|
| Listener | spec.tlsListenerId |
spec.tls_listener_id |
No | ULID — references a TLS Listener | — | No | The listener this rule belongs to |
| Order | spec.order |
spec.order |
Yes | integer | 0 |
No | Evaluation order; lower is checked first |
| Forward to TCP | spec.forwardToTcpResponseAction |
spec.forward_to_tcp_response_action |
Yes | object — {targetGroupId, toPorts, portMappingType} |
— | No | Forward the decrypted stream to a Target Group |
| Forward to TLS | spec.forwardToTlsResponseAction |
spec.forward_to_tls_response_action |
Yes | object — adds tls (backend re-encryption) |
— | No | Forward to a Target Group, re-encrypting to the backends |
A rule that forwards the decrypted stream to a database Target Group on port 5432.
Terraform
Python SDK
kc CLI
Resource docs
More in this section