Hello, I am trying to not apply a forward-auth middleware to a specific IP that hits the API. The middleware works fine otherwise. I tried a few combinations like in which the most promising on was the following but I still get redirected when accessing the endpoint from 192.168.1.63. - match: …

I fixed it by setting externalTrafficPolicy: local on the traefik service (running in K3s) which preserves the client source IP. . - match: 'Host(`test.domain`) && !ClientIP("192.168.1.63/32")' kind: Rule services: - kind: Service name: test-svc namespace: test port: …

It is the same with back ticks. I enabled debug logs in traefik and I'm not getting anything. EDIT: Ok it seems the issue is due to the fact that Traefik only sees the IP address of the CNI's bridge interface 10.42.0.1 a.k.a. cni0. The solution will be to find how/if I can pass the client's IP to …

Apply middleware to specific client IP

Traefik Traefik v2

bluepuma77 February 12, 2024, 2:59pm 2

You probably need to use backticks instead of " (doc).

Topic		Replies	Views
Traefik selective middleware Traefik v2 middleware	1	300	October 8, 2023
Bypass Authentik Forward Auth for Local Addresses Traefik v3 (latest) file , middleware	3	1499	October 21, 2024
How to deny / allow a client based on an IP dynamically looked up from a DNS name? Traefik v2 middleware	2	539	October 24, 2023
IpWhileList Middleware Traefik v3 (latest) docker , middleware	0	67	February 25, 2025
How to configure Traefik to restrict incoming traffic exclusively to my office's IP address Traefik v3 (latest) middleware , plugin	3	534	March 14, 2025

Apply middleware to specific client IP

Related topics