zespri
October 13, 2019, 11:23pm
1
Hello,
this is to make sure that this is indeed an issue, before opening one on github.
This is in regards with this piece of documentation:
https://docs.traefik.io/routing/entrypoints/#forwarded-header
There are a couple of issues I can see.
CLI example has wrong casing
The documentation specifies:
--entryPoints.web.forwardedHeaders.trustedIPs=127.0.0.1/32,192.168.1.7
; and
--entryPoints.web.forwardedHeaders.insecure
Both use wrong casing and do not work. Correct casing is all low letters.
No error is produced anywhere on the logs even in debug logs
Those casing issues are very hard to diagnose, because nowhere in the logs they are reflected. Specfically, wrong casing keys are silently ignored.
Note: I'm not very confident if casing in CLI part of traefik documentation web site is not wrong elsewhere too, it loks like it might be (wrongly) autogenerated. The reference here is correct.
ldez
October 14, 2019, 12:38am
2
Hello,
the CLI flags are case insensitive. So there are no correct casing.
Check if you are using at least v2.0.1
$ docker run traefik:v2.0.1 \
--entryPoints.web.address=:80 \
--entryPoints.web.forwardedHeaders.trustedIPs=127.0.0.1/32,192.168.1.7 \
--entryPoints.web.forwardedHeaders.insecure \
--log.level=debug
time="2019-10-14T00:42:43Z" level=info msg="Configuration loaded from flags."
time="2019-10-14T00:42:43Z" level=info msg="Traefik version 2.0.1 built on 2019-09-26T16:18:03Z"
time="2019-10-14T00:42:43Z" level=debug msg="Static configuration loaded {\"global\":{\"checkNewVersion\":true},\"serversTransport\":{\"maxIdleConnsPerHost\":200},\"entryPoints\":{\"web\":{\"address\":\":80\",\"transport\":{\"lifeCycle\":{\"graceTimeOut\":10000000000},\"respondingTimeouts\":{\"idleTimeout\":180000000000}},\"forwardedHeaders\":{\"insecure\":true,\"trustedIPs\":[\"127.0.0.1/32\",\"192.168.1.7\"]}}},\"providers\":{\"providersThrottleDuration\":2000000000},\"log\":{\"level\":\"debug\",\"format\":\"common\"}}"
$ docker run traefik:v2.0.2 \
--entryPoints.web.address=:80 \
--entryPoints.web.forwardedHeaders.trustedIPs=127.0.0.1/32,192.168.1.7 \
--entryPoints.web.forwardedHeaders.insecure \
--log.level=debug
time="2019-10-14T00:43:37Z" level=info msg="Configuration loaded from flags."
time="2019-10-14T00:43:37Z" level=info msg="Traefik version 2.0.2 built on 2019-10-09T19:26:05Z"
time="2019-10-14T00:43:37Z" level=debug msg="Static configuration loaded {\"global\":{\"checkNewVersion\":true},\"serversTransport\":{\"maxIdleConnsPerHost\":200},\"entryPoints\":{\"web\":{\"address\":\":80\",\"transport\":{\"lifeCycle\":{\"graceTimeOut\":10000000000},\"respondingTimeouts\":{\"idleTimeout\":180000000000}},\"forwardedHeaders\":{\"insecure\":true,\"trustedIPs\":[\"127.0.0.1/32\",\"192.168.1.7\"]}}},\"providers\":{\"providersThrottleDuration\":2000000000},\"log\":{\"level\":\"debug\",\"format\":\"common\"}}"
zespri
October 14, 2019, 3:25am
3
@ldez was using v2.0.0. Thanks.