# Consul ConnectAware skips L7 routing?

**URL:** <https://community.traefik.io/t/consul-connectaware-skips-l7-routing/12338>\
**Category:** Traefik v2\
**Tags:** consul-catalog\
**Created:** [November 3, 2021, 10:04pm UTC](https://community.traefik.io/t/consul-connectaware-skips-l7-routing/12338 "2021-11-03T22:04:21Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![evandam](https://avatars.discourse-cdn.com/v4/letter/e/eada6e/32.png) [@evandam](https://community.traefik.io/u/evandam)\
**Post date:** [November 3, 2021, 10:04pm UTC](https://community.traefik.io/t/consul-connectaware-skips-l7-routing/12338/1 "2021-11-03T22:04:21Z")

</div>

Hey folks,

Just wanted to confirm my understanding of how the ConnectAware behavior works with Traefik. When this is enabled, Traefik will handle load balancing requests and communicate directly with a service's instance, correct?

For example, if I add service splitters/routers ([Configuration Entry Kind: Service Splitter | Consul by HashiCorp](https://www.consul.io/docs/connect/config-entries/service-splitter)), they will effectively be ignored since Traefik is the one deciding which instance to send traffic to?

---

<div class="post-metadata">

**Author:** ![blake](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/blake/32/4671_2.png) [@blake](https://community.traefik.io/u/blake)\
**Post date:** [January 12, 2022, 7:12am UTC](https://community.traefik.io/t/consul-connectaware-skips-l7-routing/12338/2 "2022-01-12T07:12:45Z")

</div>

> [@evandam](#):
>
> For example, if I add service splitters/routers ([Configuration Entry Kind: Service Splitter | Consul by HashiCorp](https://www.consul.io/docs/connect/config-entries/service-splitter)), they will effectively be ignored since Traefik is the one deciding which instance to send traffic to?

Yes, this is correct. You will need to configure splitting, routing, etc directly on Traefik using configuration instead of using Consul's configuration entries.

---

<div class="post-metadata">

**Author:** ![vvarga007](https://avatars.discourse-cdn.com/v4/letter/v/9dc877/32.png) [@vvarga007](https://community.traefik.io/u/vvarga007)\
**Post date:** [July 27, 2022, 2:04am UTC](https://community.traefik.io/t/consul-connectaware-skips-l7-routing/12338/3 "2022-07-27T02:04:45Z")

</div>

@blake Which is not the same. For example, with a consul resolver you can define a consul datacenter failover, which is not possible with traefik as it is not aware of the consul wan federation setup. 😕

---

<div class="post-metadata">

**Author:** ![vvarga007](https://avatars.discourse-cdn.com/v4/letter/v/9dc877/32.png) [@vvarga007](https://community.traefik.io/u/vvarga007)\
**Post date:** [July 27, 2022, 2:07am UTC](https://community.traefik.io/t/consul-connectaware-skips-l7-routing/12338/4 "2022-07-27T02:07:18Z")

</div>

@evandam Have you every found a good solution for this?  
I am using Consul Connect which is extremely versatile with the ingress gateway(L7 routing, splitting, resolvers and failover is awesome), but with the ingress gateway I cannot configure custom TLS certs like I can with Traefik.  
Consul API gateway looks promising but it is not available on Nomad just yet. ☹

---

<div class="post-metadata">

**Author:** ![evandam](https://avatars.discourse-cdn.com/v4/letter/e/eada6e/32.png) [@evandam](https://community.traefik.io/u/evandam)\
**Post date:** [July 27, 2022, 4:45am UTC](https://community.traefik.io/t/consul-connectaware-skips-l7-routing/12338/5 "2022-07-27T04:45:40Z")

</div>

Hey @vvarga007 I moved away from this and never ended up getting a solid solution. If I recall you could technically create a Consul ingress gateway and force Traefik through that, but it defeats purpose of the Connect-aware functionality and it feels pretty clunky.

---

<div class="post-metadata">

**Author:** ![vvarga007](https://avatars.discourse-cdn.com/v4/letter/v/9dc877/32.png) [@vvarga007](https://community.traefik.io/u/vvarga007)\
**Post date:** [July 27, 2022, 1:18pm UTC](https://community.traefik.io/t/consul-connectaware-skips-l7-routing/12338/6 "2022-07-27T13:18:53Z")

</div>

Indeed there is no solid solution. You could have Traefik in front of the ingress gateway, so L7 routing could work. But in case u have to give up the global failover functionality achieved by consul prepared queries. Either way, there are sacrifices....