Unable to connect to emqx broker via IngressRouteTCP

[wfe8006]

I'm trying to use Traefik's IngressRouteTCP to expose the emqx-listeners service. I am able to connect to the broker's Cluster IP via mqttx, but I cannot connect using the domain name; the connection is always closed for some reason. Does anyone know why?

user@master1:~$ kubectl get svc -n emqx
NAME             TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)                               AGE
emqx-dashboard   ClusterIP   10.43.222.136   <none>        80/TCP,18083/TCP                      10h
emqx-headless    ClusterIP   None            <none>        4370/TCP                              10h
emqx-listeners   ClusterIP   10.43.49.140    <none>        8883/TCP,1883/TCP,8083/TCP,8084/TCP   10h


user@master1:~$ mqttx conn -h 10.43.49.140 -p 1883 -u <uid> -P <password>
[7/20/2023] [1:25:08 PM] › …  Connecting...
[7/20/2023] [1:25:08 PM] › ✔  Connected
^C

user@master1:~$ mqttx conn -h <domain_name> -p 1883 -u <uid> -P <password>
[7/20/2023] [1:25:27 PM] › …  Connecting...
[7/20/2023] [1:25:57 PM] › ✖  Connection closed
[7/20/2023] [1:25:58 PM] › …  Reconnecting...
[7/20/2023] [1:26:28 PM] › ✖  Connection closed
[7/20/2023] [1:26:29 PM] › …  Reconnecting...
[7/20/2023] [1:26:59 PM] › ✖  Connection closed
[7/20/2023] [1:27:00 PM] › …  Reconnecting...
^C

user@master1:~/k3s$ echo -n | telnet <domain_name> 1883
Trying x.x.x.x...
Connected to <domain_name>.
Escape character is '^]'.
Connection closed by foreign host.

user@master1:~/k3s$ kubectl describe ingressroutetcp emqx-tcp -n emqx
Name:         emqx-tcp
Namespace:    emqx
Labels:       <none>
Annotations:  <none>
API Version:  traefik.containo.us/v1alpha1
Kind:         IngressRouteTCP
Metadata:
  Creation Timestamp:  2023-07-19T13:25:05Z
  Generation:          1
  Resource Version:    456960
  UID:                 d16508f4-5ac2-4fba-9e4c-6e20970be6a9
Spec:
  Entry Points:
    mqtt
  Routes:
    Match:  HostSNI(`<domain_name>`)
    Services:
      Name:  emqx-listeners
      Port:  1883
  Tls:
    Passthrough:  true
Events:           <none>

[Rory-Z]

Hi, I'm sorry, I don't know much for Traefik's IngressRouteTCP. Could you please set EMQX's log level to debug, and check if the MQTT connection request has reached the EMQX container.