Ingress with SSL Passthrough

[Rudy Bonefas]

I have recently been using the nginxdemo/nginx-ingress controller.  As I understand it this controller cannot do SSL Passthrough (by that I mean pass the client certificate all the way through to the backend service for authentication), so instead I have been passing the clients subject DN through a header.  Ultimately I would prefer SSL-Passthrough and have been looking at the kubernetes/ingress-nginx project which apparently supports SSL passthrough.  Does anyone have an experience with this controller and SSL Passthrough.  The few Ingress examples showing passthrough that I have found leave the path setting blank.  Is this because passthrough has to take place at the TCP level (4) rather then at HTTP (7)?  Right now, I have a single host rule that services mutiple paths.  Any help would be appreciated.