Multiple Postgres Servers

[maxbec]

Hey guys,

how can i serve multiple postgres DBs with Caddy as reverse proxy? Cant get it to work with the opnsense plugin.
Example:
db1.example.com => local:8446
db2.example.com => local:8447

Any ideas?

[coolaj86]

You'll need to upgrade psql to Postgres 17 and use sslnegotiation=direct. Search other issues here for some recipes for how to do it with earlier versions, or tls sni alpn routing in general.

[divyam234]

@coolaj86 tried this flag but getting this error below

"level":"error","ts":1729340050.662618,"logger":"caddy.listeners.layer4","msg":"handling connection","error":"tls: client requested unsupported application protocols ([postgresql])"}

connecting with ?sslnegotiation=direct&sslmode=require

[coolaj86]

You need to set the ALPN matcher in caddy l4 to include postgresql.

Alternatively, you can temporarily disable ALPN in psql (I think the option will show up in --help).

[divyam234]

Working config for postgres 17

{
    servers {
        listener_wrappers {
            layer4 {
                @postgres tls sni example.com
                route @postgres {
                    tls {
                      connection_policy {
                        alpn postgresql
                      }
                    }
                    proxy postgres:5432
                }
            }
            tls
        }
    }
}