We have incoming TCP Traffic (not http or https) from a bunch of devices at a subdomain in our Azure DNS-Zone. The Traffic arrives (for what ever reason) at port 443 and is linked to the IP of our legacy System (a single Azure VM).
Now we would like to send this traffic to our aks kubernetes cluster (this one should replace the single VM), using Nginx within the cluster, into a pod in kubernetes. Easily I can enter the public IP of the cluster as a target of the subdomain in the DNS-Zone but in the same time, we need to change the port to which the traffice will be directed. That does not seems to be possible in the DNS-Zone.
The Ingress within the kubernetes seems to use 443 per default just for http. We already have configured the Ingress to even handle TCP-Traffice beside of that from http, but we did not manage to handle TPC-Traffic at port 443 within the kubernetes, as this somehow seems to be reserved for http(s).
Reconfigure the port in the server settings of the devices is not an option: Needs too much time and we would loose the legacy-system as a fallback option. Reconfiguring the legacy-System to any other port to listen to is even not possible.
A new loadbalancer does not help, as I just can connect it with a VM, not with the public endpoint of the aks kubernetes-service.
So, is there an option, to just change the Port between DNS-Zone and aks? After the traffic hits the DNS but before it will be managed by the Nginx / Ingress? So we are looking for a TCP-gateway that includes Port-Manipulation, in best case, something that runs as a service on a managed system / cluster.
