title: Can PostgreSQL service in OpenShift cluster receive external traffic via exposed route
body: <p>Is it possible to run PostgreSQL as a service inside an OpenShift cluster and get <a href="https://docs.openshift.com/container-platform/3.9/dev_guide/expose_service/index.html" rel="nofollow noreferrer">external traffic</a> to it via an exposed route (the recommended default way for communicating from the outside)?</p>
  
  <p>The OpenShift 3.9 <a href="https://docs.openshift.com/container-platform/3.9/dev_guide/expose_service/expose_internal_ip_router.html#getting-traffic-into-cluster-router" rel="nofollow noreferrer">documentation</a> states this:</p>
  
  <blockquote>
    <p>A router is configured to accept external requests and proxy them
    based on the configured routes. This is limited to
    HTTP/HTTPS(SNI)/TLS(SNI), which covers web applications.</p>
  </blockquote>
  
  <p>PostgreSQL can to SSL and it can be configured to listen on port 443 (HTTPS), but I think it <a href="https://www.postgresql.org/message-id/9af47a45-f92d-7ede-2d71-222ba24447eb%402ndquadrant.com" rel="nofollow noreferrer">cannot</a> do SNI yet. I would only run a single pod behind the service, so load balancing should not cause issues. If feasible, I would expect to connect into the cluster and to the service with <code>psql -h ...</code>.</p>