Hacker News Reader

I love nomad too. Quick question, how have you solved ingress using nomad + consul connect for service mesh?

The big thing for me is needing mTLS support for some of my services.

I use Consul Connect + Traefik annotations, and am planning to write about it soon. If you want a sneak peak, I'm happy to screen-share the config to get you going, ping me at the email in my profile!

Yea consul connect is a good choice for mTLS, it's enforced by default with no way to turn it off.

You can also go DIY with something like Traefik and just configure everything to require TLS with client TLS pass-through for enforced mutual TLS, that puts you into 'require a set of central load balancers' but you still get all the benefits.

Reply on news.ycombinator.com