# How to obtain the real IP in Docker Swarm?

**URL:** <https://community.traefik.io/t/how-to-obtain-the-real-ip-in-docker-swarm/27443>\
**Category:** Traefik v3 (latest)\
**Tags:** docker-swarm\
**Created:** [May 7, 2025, 9:33am UTC](https://community.traefik.io/t/how-to-obtain-the-real-ip-in-docker-swarm/27443 "2025-05-07T09:33:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![seepine](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/seepine/32/9112_2.png) [@seepine](https://community.traefik.io/u/seepine)\
**Post date:** [May 7, 2025, 9:33am UTC](https://community.traefik.io/t/how-to-obtain-the-real-ip-in-docker-swarm/27443/1 "2025-05-07T09:33:48Z")

</div>

Deploy by docker swarm

```yml
version: '3.8'
services:
  reverse-proxy:
    image: traefik:v3.2
    restart: always
    command:
      - --providers.swarm.endpoint=unix:///var/run/docker.sock
      - --providers.swarm.exposedByDefault=false
      - --providers.swarm.network=traefik
      
      # 暴露端口
      - --entryPoints.web.address=:80
      - --entryPoints.web.forwardedHeaders.insecure
      - --entryPoints.web.http.redirections.entryPoint.to=websecure
      - --entryPoints.web.http.redirections.entryPoint.scheme=https
      - --entryPoints.websecure.address=:443
      #- --entryPoints.websecure.forwardedHeaders.trustedIPs=0.0.0.0/0 # not work
      - --entryPoints.websecure.forwardedHeaders.insecure

      # ...
    ports:
      - "80:80"
      - "443:443"
    networks:
      - traefik

  treafik-whoami:
    image: traefik/whoami
    deploy:
      labels:
        - traefik.enable=true
        - traefik.http.routers.treafik-whoami.rule=Host(`whoami.traefik.example.com`)
        - traefik.http.services.treafik-whoami.loadbalancer.server.port=80
        - traefik.http.routers.treafik-whoami.tls.certresolver=alidns
        - traefik.http.routers.treafik-whoami.tls.domains[0].main=*.traefik.example.com
    networks:
      - traefik

networks:
  traefik:
    external: true

```

And curl [whoami.traefik.example.com](http://whoami.traefik.example.com)

```auto
Hostname: c87c225777ee
IP: 127.0.0.1
IP: ::1
IP: 10.0.1.207
IP: 172.27.0.3
RemoteAddr: 10.0.1.205:56708
GET / HTTP/1.1
Host: whoami.traefik.example.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6
Priority: u=0, i
Sec-Ch-Ua: "Microsoft Edge";v="135", "Not-A.Brand";v="8", "Chromium";v="135"
Sec-Ch-Ua-Mobile: ?0
Sec-Ch-Ua-Platform: "Windows"
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
Upgrade-Insecure-Requests: 1
X-Forwarded-For: 10.0.0.2
X-Forwarded-Host: whoami.traefik.example.com
X-Forwarded-Port: 443
X-Forwarded-Proto: https
X-Forwarded-Server: d85275e31f80
X-Real-Ip: 10.0.0.2

```

---

<div class="post-metadata">

**Author:** ![bluepuma77](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@bluepuma77](https://community.traefik.io/u/bluepuma77)\
**Post date:** [May 7, 2025, 1:44pm UTC](https://community.traefik.io/t/how-to-obtain-the-real-ip-in-docker-swarm/27443/2 "2025-05-07T13:44:37Z")

</div>

Swarm will automatically create an ingress network, so IP packets get routed, you see a different IP. Use host mode (from [simple Traefik Swarm example](https://github.com/bluepuma77/traefik-best-practice/tree/main/docker-swarm-traefik)):

```auto
    ports:
      # listen on host ports without ingress network
      - target: 80
        published: 80
        protocol: tcp
        mode: host
      - target: 443
        published: 443
        protocol: tcp
        mode: host

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/containo/original/2X/b/bd81ebdb578656e76e56ff3cc3eed021d3ba132d.png) [@system](https://community.traefik.io/u/system)\
**Post date:** [May 10, 2025, 1:44pm UTC](https://community.traefik.io/t/how-to-obtain-the-real-ip-in-docker-swarm/27443/3 "2025-05-10T13:44:50Z")

</div>

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.