Jump to content
ChaOConnor

[REQUEST] Traefik reverse proxy

59 posts in this topic Last Reply

Recommended Posts

On 6/2/2018 at 4:36 PM, primeval_god said:

Before everyone jumps ship from traefik here, I want to chime in and say that i believe there is a way to shore up the security to an acceptable level. Unfortunately i haven't gotten it to work quite yet. I believe the key lies in a program called docker-proxy-acl which provides can restrict access to certain endpoints on the docker socket. At the moment traefik does not function correctly through this proxy but I hopeful that the issue can be fixed in short order.

Check out the docker-proxy-acl container available here https://hub.docker.com/r/dcflachs/docker-proxy-acl/ . I believe that it prevents the type of attack described above. This particular container has a version of docker-proxy-acl that supports traefik, which requires the containers, info, version, networks, tasks, events and services endpoints.

Share this post


Link to post

How do I change the backend url that traefik points towards? The gui says "http://172.17.0.2:8091" however the docker is actually accessible on "http://10.0.0.53:8091". Any help is greatly appreciated.

 

Edit: Never mind, seems to be an issue with my comcast router not with traefik.

Edited by mysterio0

Share this post


Link to post

Hi, has someone figured out how to use Traefik with e.g. Booksonic.

What I'd like to do would be to redirect to the address, e.g. 172.17.0.2:4040/booksonic when calling booksonic.<domain>.duckdns.org.

Currently Traefik redirects to 172.17.0.2:4040 but not to 172.17.0.2:4040/booksonic.

 

How do I need to setup Traefik to achieve this?

Share this post


Link to post
5 hours ago, Tuumke said:

Anyone else having issues that traefik is really slow?

Slow in what way? I have been generally pleased with the performance of Traefik, however i have noticed that it recently seems slow to see and update new docker configurations and occasionally misses them all together. I am fairly certain that mine is a setup issue with the docker socket proxy i am using however.

Share this post


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now