No connection/routing on 443

portboy · February 14, 2020, 2:45pm

Hi,

I'm new and I start with a problem

I have setup traefik on a docker environment.
And without https it works great.
But I want to switch to 443 .... with no luck.
For letsencrypt I use the DNS Challenge.

I can see, the traefik gets successfully the certificate from letsencrypt.

But there is no routing to my target URL https://whoami.heim-zone.de.
If I delete all ssl stuff, or just use my http config für my other subdomain (see dynamic config), it works fine (on port 80).
With ssl I get "ERR_CONNECTION_REFUSED" ....

Where is my error
I hope, someone can find it.

This is my setup:
Docker Compose:

services:
  traefik:
    image: "traefik:latest"
    container_name: "traefik"

    networks:
      - traefik_proxy
      
    ports:
      - "80:80"
      - "443:433"
      - "8181:8080"
    
    environment:
      - DODE_TOKEN=xxxxxxxxxxxxxxx

    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      - "/opt/traefik_latest/traefik_static.yaml:/etc/traefik/traefik.yml"
      - "/opt/traefik_latest/traefik_dynamic.yaml:/etc/traefik/dynamic/traefik.yml"
      - "/opt/traefik_latest/acme/:/etc/traefik/acme/"
      - "/opt/traefik_latest/log/:/etc/traefik/log/"
      
    labels:
      - "traefik.http.routers.traefik.entrypoints=web"
      - "traefik.http.routers.traefik.rule=Host(`heim-zone.de`)"

  whoami:
    image: "containous/whoami"
    container_name: "whoami"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.whoami.rule=Host(`whoami.heim-zone.de`)"
      - "traefik.http.routers.whoami.entrypoints=websecure"
      - "traefik.http.routers.whoami.tls.certresolver=mychallenge"
      
      
    networks:
      - traefik_proxy

My static Config:

global:
  checkNewVersion: true
  sendAnonymousUsage: true

log:
  filePath: "/etc/traefik/log/traefik.log"
  level: debug

api:
  insecure: true
  dashboard: true
  debug: true

providers:
  docker: 
    exposedByDefault: false

  file:
    directory: /etc/traefik/dynamic
    watch: true
    filename: dynamic.yml

entryPoints:
  web:
   address: ":80"
  websecure:
    address: ":443"

certificatesResolvers:
  mychallenge:
    acme:
      caServer: https://acme-staging-v02.api.letsencrypt.org/directory
      email: my@email.de
      storage: /etc/traefik/acme/acme.json
      dnsChallenge:
        provider: dode

My dynamic Conf:

http:
  services:
    TP-LINK:
      loadBalancer:
        servers:
          - url: "http://192.168.0.10/"

  routers:
    TP-LINK:
      entryPoints:
        - "web"
      rule: "Host(`tp-link.heim-zone.de`)"
      service: "TP-LINK"

My DNS Config:

My Log:

time="2020-02-14T11:56:20Z" level=debug msg="legolog: [INFO] acme: Registering account for ma@email.de"
time="2020-02-14T11:56:20Z" level=debug msg="Using DNS Challenge provider: dode" providerName=mychallenge.acme
time="2020-02-14T11:56:20Z" level=debug msg="legolog: [INFO] [whoami.heim-zone.de] acme: Obtaining bundled SAN certificate"
time="2020-02-14T11:56:21Z" level=debug msg="legolog: [INFO] [whoami.heim-zone.de] AuthURL: https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/38899652"
time="2020-02-14T11:56:21Z" level=debug msg="legolog: [INFO] [whoami.heim-zone.de] acme: Could not find solver for: tls-alpn-01"
time="2020-02-14T11:56:21Z" level=debug msg="legolog: [INFO] [whoami.heim-zone.de] acme: Could not find solver for: http-01"
time="2020-02-14T11:56:21Z" level=debug msg="legolog: [INFO] [whoami.heim-zone.de] acme: use dns-01 solver"
time="2020-02-14T11:56:21Z" level=debug msg="legolog: [INFO] [whoami.heim-zone.de] acme: Preparing to solve DNS-01"
time="2020-02-14T11:56:21Z" level=debug msg="legolog: [INFO] [whoami.heim-zone.de] acme: Trying to solve DNS-01"
time="2020-02-14T11:56:21Z" level=debug msg="legolog: [INFO] [whoami.heim-zone.de] acme: Checking DNS record propagation using [127.0.0.11:53]"
time="2020-02-14T11:56:21Z" level=debug msg="legolog: [INFO] Wait for propagation [timeout: 1m0s, interval: 2s]"
time="2020-02-14T11:56:28Z" level=debug msg="legolog: [INFO] [whoami.heim-zone.de] The server validated our request"
time="2020-02-14T11:56:28Z" level=debug msg="legolog: [INFO] [whoami.heim-zone.de] acme: Cleaning DNS-01 challenge"
time="2020-02-14T11:56:29Z" level=debug msg="legolog: [INFO] [whoami.heim-zone.de] acme: Validations succeeded; requesting certificates"
time="2020-02-14T11:56:34Z" level=debug msg="legolog: [INFO] [whoami.heim-zone.de] Server responded with a certificate."
time="2020-02-14T11:56:34Z" level=debug msg="Certificates obtained for domains [whoami.heim-zone.de]" providerName=mychallenge.acme routerName=whoami@docker rule="Host(`whoami.heim-zone.de`)"
time="2020-02-14T11:56:34Z" level=debug msg="Configuration received from provider mychallenge.acme: {\"http\":{},\"tls\":{}}" providerName=mychallenge.acme
time="2020-02-14T11:56:34Z" level=debug msg="Adding certificate for domain(s) whoami.heim-zone.de"
time="2020-02-14T11:56:34Z" level=debug msg="No default certificate, generating one"
time="2020-02-14T11:56:34Z" level=debug msg="Creating middleware" routerName=TP-LINK@file serviceName=TP-LINK middlewareName=pipelining middlewareType=Pipelining entryPointName=web
time="2020-02-14T11:56:34Z" level=debug msg="Creating load-balancer" entryPointName=web routerName=TP-LINK@file serviceName=TP-LINK
time="2020-02-14T11:56:34Z" level=debug msg="Creating server 0 http://192.168.0.10/" serviceName=TP-LINK entryPointName=web serverName=0 routerName=TP-LINK@file
time="2020-02-14T11:56:34Z" level=debug msg="Added outgoing tracing middleware TP-LINK" entryPointName=web routerName=TP-LINK@file middlewareName=tracing middlewareType=TracingForwarder
time="2020-02-14T11:56:34Z" level=debug msg="Creating middleware" entryPointName=web middlewareName=traefik-internal-recovery middlewareType=Recovery
time="2020-02-14T11:56:34Z" level=debug msg="Added outgoing tracing middleware api@internal" entryPointName=traefik routerName=debug@internal middlewareType=TracingForwarder middlewareName=tracing
time="2020-02-14T11:56:34Z" level=debug msg="Added outgoing tracing middleware api@internal" routerName=api@internal middlewareName=tracing middlewareType=TracingForwarder entryPointName=traefik
time="2020-02-14T11:56:34Z" level=debug msg="Added outgoing tracing middleware dashboard@internal" entryPointName=traefik routerName=dashboard@internal middlewareName=tracing middlewareType=TracingForwarder
time="2020-02-14T11:56:34Z" level=debug msg="Creating middleware" middlewareName=dashboard_stripprefix@internal middlewareType=StripPrefix routerName=dashboard@internal entryPointName=traefik
time="2020-02-14T11:56:34Z" level=debug msg="Adding tracing to middleware" middlewareName=dashboard_stripprefix@internal entryPointName=traefik routerName=dashboard@internal
time="2020-02-14T11:56:34Z" level=debug msg="Creating middleware" middlewareName=dashboard_redirect@internal middlewareType=RedirectRegex entryPointName=traefik routerName=dashboard@internal
time="2020-02-14T11:56:34Z" level=debug msg="Setting up redirection from ^(http:\\/\\/[^:\\/]+(:\\d+)?)\\/$ to ${1}/dashboard/" middlewareName=dashboard_redirect@internal middlewareType=RedirectRegex entryPointName=traefik routerName=dashboard@internal
time="2020-02-14T11:56:34Z" level=debug msg="Adding tracing to middleware" entryPointName=traefik routerName=dashboard@internal middlewareName=dashboard_redirect@internal
time="2020-02-14T11:56:34Z" level=debug msg="Creating middleware" entryPointName=traefik middlewareName=traefik-internal-recovery middlewareType=Recovery
time="2020-02-14T11:56:34Z" level=debug msg="Creating middleware" serviceName=whoami-traefik middlewareName=pipelining middlewareType=Pipelining entryPointName=websecure routerName=whoami@docker
time="2020-02-14T11:56:34Z" level=debug msg="Creating load-balancer" serviceName=whoami-traefik entryPointName=websecure routerName=whoami@docker
time="2020-02-14T11:56:34Z" level=debug msg="Creating server 0 http://172.28.0.2:80" entryPointName=websecure routerName=whoami@docker serverName=0 serviceName=whoami-traefik
time="2020-02-14T11:56:34Z" level=debug msg="Added outgoing tracing middleware whoami-traefik" routerName=whoami@docker entryPointName=websecure middlewareName=tracing middlewareType=TracingForwarder
time="2020-02-14T11:56:34Z" level=debug msg="Creating middleware" entryPointName=websecure middlewareName=traefik-internal-recovery middlewareType=Recovery
time="2020-02-14T11:56:34Z" level=debug msg="Try to challenge certificate for domain [whoami.heim-zone.de] found in HostSNI rule" rule="Host(`whoami.heim-zone.de`)" providerName=mychallenge.acme routerName=whoami@docker
time="2020-02-14T11:56:34Z" level=debug msg="Looking for provided certificate(s) to validate [\"whoami.heim-zone.de\"]..." providerName=mychallenge.acme routerName=whoami@docker rule="Host(`whoami.heim-zone.de`)"
time="2020-02-14T11:56:34Z" level=debug msg="No ACME certificate generation required for domains [\"whoami.heim-zone.de\"]." routerName=whoami@docker rule="Host(`whoami.heim-zone.de`)" providerName=mychallenge.acme
time="2020-02-14T12:05:57Z" level=info msg="Anonymous stats sent to https://collect.traefik.io/9vxmmkcdmalbdi635d4jgc5p5rx0h7h8: {\"global\":{\"checkNewVersion\":true,\"sendAnonymousUsage\":true},\"serversTransport\":{\"maxIdleConnsPerHost\":200},\"entryPoints\":{\"traefik\":{\"address\":\"xxxx\"},\"web\":{\"address\":\"xxxx\"},\"websecure\":{\"address\":\"xxxx\"}},\"providers\":{\"providersThrottleDuration\":2000000000,\"docker\":{\"watch\":true,\"endpoint\":\"xxxx\",\"defaultRule\":\"xxxx\",\"swarmModeRefreshSeconds\":15000000000},\"file\":{\"directory\":\"/etc/traefik/dynamic\",\"watch\":true,\"filename\":\"dynamic.yml\"}},\"api\":{\"insecure\":true,\"dashboard\":true,\"debug\":true},\"log\":{\"level\":\"debug\",\"filePath\":\"xxxx\",\"format\":\"xxxx\"},\"certificatesResolvers\":{\"mychallenge\":{\"acme\":{\"email\":\"xxxx\",\"caServer\":\"xxxx\",\"storage\":\"xxxx\",\"keyType\":\"xxxx\"}}}}"
time="2020-02-14T12:05:57Z" level=debug msg="unknown kind to hash: func"
time="2020-02-14T12:05:58Z" level=warning msg="A new release has been found: 2.1.4. Please consider updating."
time="2020-02-14T12:08:41Z" level=debug msg="vulcand/oxy/roundrobin/rr: begin ServeHttp on request" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/1.1\",\"ProtoMajor\":1,\"ProtoMinor\":1,\"Header\":{\"Accept\":[\"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3\"],\"Accept-Encoding\":[\"gzip, deflate\"],\"Accept-Language\":[\"de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Cache-Control\":[\"max-age=0\"],\"Connection\":[\"keep-alive\"],\"Dnt\":[\"1\"],\"Upgrade-Insecure-Requests\":[\"1\"],\"User-Agent\":[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.99 Safari/537.36 Vivaldi/2.9.1705.41\"],\"X-Forwarded-Host\":[\"tp-link.heim-zone.de\"],\"X-Forwarded-Port\":[\"80\"],\"X-Forwarded-Proto\":[\"http\"],\"X-Forwarded-Server\":[\"b27f9cc3b001\"],\"X-Real-Ip\":[\"10.0.0.1\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tp-link.heim-zone.de\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.1:51553\",\"RequestURI\":\"/\",\"TLS\":null}"
time="2020-02-14T12:08:41Z" level=debug msg="vulcand/oxy/roundrobin/rr: Forwarding this request to URL" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/1.1\",\"ProtoMajor\":1,\"ProtoMinor\":1,\"Header\":{\"Accept\":[\"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3\"],\"Accept-Encoding\":[\"gzip, deflate\"],\"Accept-Language\":[\"de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Cache-Control\":[\"max-age=0\"],\"Connection\":[\"keep-alive\"],\"Dnt\":[\"1\"],\"Upgrade-Insecure-Requests\":[\"1\"],\"User-Agent\":[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.99 Safari/537.36 Vivaldi/2.9.1705.41\"],\"X-Forwarded-Host\":[\"tp-link.heim-zone.de\"],\"X-Forwarded-Port\":[\"80\"],\"X-Forwarded-Proto\":[\"http\"],\"X-Forwarded-Server\":[\"b27f9cc3b001\"],\"X-Real-Ip\":[\"10.0.0.1\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tp-link.heim-zone.de\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.1:51553\",\"RequestURI\":\"/\",\"TLS\":null}" ForwardURL="http://192.168.0.10/"
time="2020-02-14T12:08:41Z" level=debug msg="vulcand/oxy/roundrobin/rr: completed ServeHttp on request" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/1.1\",\"ProtoMajor\":1,\"ProtoMinor\":1,\"Header\":{\"Accept\":[\"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3\"],\"Accept-Encoding\":[\"gzip, deflate\"],\"Accept-Language\":[\"de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Cache-Control\":[\"max-age=0\"],\"Connection\":[\"keep-alive\"],\"Dnt\":[\"1\"],\"Upgrade-Insecure-Requests\":[\"1\"],\"User-Agent\":[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.99 Safari/537.36 Vivaldi/2.9.1705.41\"],\"X-Forwarded-Host\":[\"tp-link.heim-zone.de\"],\"X-Forwarded-Port\":[\"80\"],\"X-Forwarded-Proto\":[\"http\"],\"X-Forwarded-Server\":[\"b27f9cc3b001\"],\"X-Real-Ip\":[\"10.0.0.1\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tp-link.heim-zone.de\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.1:51553\",\"RequestURI\":\"/\",\"TLS\":null}"
time="2020-02-14T12:08:41Z" level=debug msg="vulcand/oxy/roundrobin/rr: begin ServeHttp on request" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/localization/globalString.js\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/1.1\",\"ProtoMajor\":1,\"ProtoMinor\":1,\"Header\":{\"Accept\":[\"*/*\"],\"Accept-Encoding\":[\"gzip, deflate\"],\"Accept-Language\":[\"de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Connection\":[\"keep-alive\"],\"Dnt\":[\"1\"],\"If-Modified-Since\":[\"Wed, 7 Mar 2012 13:07:48 GMT\"],\"Referer\":[\"http://tp-link.heim-zone.de/\"],\"User-Agent\":[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.99 Safari/537.36 Vivaldi/2.9.1705.41\"],\"X-Forwarded-Host\":[\"tp-link.heim-zone.de\"],\"X-Forwarded-Port\":[\"80\"],\"X-Forwarded-Proto\":[\"http\"],\"X-Forwarded-Server\":[\"b27f9cc3b001\"],\"X-Real-Ip\":[\"10.0.0.1\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tp-link.heim-zone.de\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.1:51553\",\"RequestURI\":\"/localization/globalString.js\",\"TLS\":null}"
time="2020-02-14T12:08:41Z" level=debug msg="vulcand/oxy/roundrobin/rr: Forwarding this request to URL" ForwardURL="http://192.168.0.10/" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/localization/globalString.js\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/1.1\",\"ProtoMajor\":1,\"ProtoMinor\":1,\"Header\":{\"Accept\":[\"*/*\"],\"Accept-Encoding\":[\"gzip, deflate\"],\"Accept-Language\":[\"de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Connection\":[\"keep-alive\"],\"Dnt\":[\"1\"],\"If-Modified-Since\":[\"Wed, 7 Mar 2012 13:07:48 GMT\"],\"Referer\":[\"http://tp-link.heim-zone.de/\"],\"User-Agent\":[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.99 Safari/537.36 Vivaldi/2.9.1705.41\"],\"X-Forwarded-Host\":[\"tp-link.heim-zone.de\"],\"X-Forwarded-Port\":[\"80\"],\"X-Forwarded-Proto\":[\"http\"],\"X-Forwarded-Server\":[\"b27f9cc3b001\"],\"X-Real-Ip\":[\"10.0.0.1\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tp-link.heim-zone.de\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.1:51553\",\"RequestURI\":\"/localization/globalString.js\",\"TLS\":null}"
time="2020-02-14T12:08:41Z" level=debug msg="vulcand/oxy/roundrobin/rr: completed ServeHttp on request" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/localization/globalString.js\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/1.1\",\"ProtoMajor\":1,\"ProtoMinor\":1,\"Header\":{\"Accept\":[\"*/*\"],\"Accept-Encoding\":[\"gzip, deflate\"],\"Accept-Language\":[\"de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Connection\":[\"keep-alive\"],\"Dnt\":[\"1\"],\"If-Modified-Since\":[\"Wed, 7 Mar 2012 13:07:48 GMT\"],\"Referer\":[\"http://tp-link.heim-zone.de/\"],\"User-Agent\":[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.99 Safari/537.36 Vivaldi/2.9.1705.41\"],\"X-Forwarded-Host\":[\"tp-link.heim-zone.de\"],\"X-Forwarded-Port\":[\"80\"],\"X-Forwarded-Proto\":[\"http\"],\"X-Forwarded-Server\":[\"b27f9cc3b001\"],\"X-Real-Ip\":[\"10.0.0.1\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tp-link.heim-zone.de\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.1:51553\",\"RequestURI\":\"/localization/globalString.js\",\"TLS\":null}"
time="2020-02-14T12:08:41Z" level=debug msg="vulcand/oxy/roundrobin/rr: begin ServeHttp on request" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/images/logo.jpg\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/1.1\",\"ProtoMajor\":1,\"ProtoMinor\":1,\"Header\":{\"Accept\":[\"image/webp,image/apng,image/*,*/*;q=0.8\"],\"Accept-Encoding\":[\"gzip, deflate\"],\"Accept-Language\":[\"de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Connection\":[\"keep-alive\"],\"Dnt\":[\"1\"],\"If-Modified-Since\":[\"Wed, 7 Mar 2012 13:07:48 GMT\"],\"Referer\":[\"http://tp-link.heim-zone.de/\"],\"User-Agent\":[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.99 Safari/537.36 Vivaldi/2.9.1705.41\"],\"X-Forwarded-Host\":[\"tp-link.heim-zone.de\"],\"X-Forwarded-Port\":[\"80\"],\"X-Forwarded-Proto\":[\"http\"],\"X-Forwarded-Server\":[\"b27f9cc3b001\"],\"X-Real-Ip\":[\"10.0.0.1\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tp-link.heim-zone.de\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.1:51553\",\"RequestURI\":\"/images/logo.jpg\",\"TLS\":null}"
time="2020-02-14T12:08:41Z" level=debug msg="vulcand/oxy/roundrobin/rr: Forwarding this request to URL" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/images/logo.jpg\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/1.1\",\"ProtoMajor\":1,\"ProtoMinor\":1,\"Header\":{\"Accept\":[\"image/webp,image/apng,image/*,*/*;q=0.8\"],\"Accept-Encoding\":[\"gzip, deflate\"],\"Accept-Language\":[\"de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Connection\":[\"keep-alive\"],\"Dnt\":[\"1\"],\"If-Modified-Since\":[\"Wed, 7 Mar 2012 13:07:48 GMT\"],\"Referer\":[\"http://tp-link.heim-zone.de/\"],\"User-Agent\":[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.99 Safari/537.36 Vivaldi/2.9.1705.41\"],\"X-Forwarded-Host\":[\"tp-link.heim-zone.de\"],\"X-Forwarded-Port\":[\"80\"],\"X-Forwarded-Proto\":[\"http\"],\"X-Forwarded-Server\":[\"b27f9cc3b001\"],\"X-Real-Ip\":[\"10.0.0.1\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tp-link.heim-zone.de\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.1:51553\",\"RequestURI\":\"/images/logo.jpg\",\"TLS\":null}" ForwardURL="http://192.168.0.10/"
time="2020-02-14T12:08:41Z" level=debug msg="vulcand/oxy/roundrobin/rr: begin ServeHttp on request" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/images/top_bg.gif\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/1.1\",\"ProtoMajor\":1,\"ProtoMinor\":1,\"Header\":{\"Accept\":[\"image/webp,image/apng,image/*,*/*;q=0.8\"],\"Accept-Encoding\":[\"gzip, deflate\"],\"Accept-Language\":[\"de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Connection\":[\"keep-alive\"],\"Dnt\":[\"1\"],\"If-Modified-Since\":[\"Wed, 7 Mar 2012 13:07:48 GMT\"],\"Referer\":[\"http://tp-link.heim-zone.de/\"],\"User-Agent\":[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.99 Safari/537.36 Vivaldi/2.9.1705.41\"],\"X-Forwarded-Host\":[\"tp-link.heim-zone.de\"],\"X-Forwarded-Port\":[\"80\"],\"X-Forwarded-Proto\":[\"http\"],\"X-Forwarded-Server\":[\"b27f9cc3b001\"],\"X-Real-Ip\":[\"10.0.0.1\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tp-link.heim-zone.de\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.1:51552\",\"RequestURI\":\"/images/top_bg.gif\",\"TLS\":null}"
time="2020-02-14T12:08:41Z" level=debug msg="vulcand/oxy/roundrobin/rr: Forwarding this request to URL" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/images/top_bg.gif\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/1.1\",\"ProtoMajor\":1,\"ProtoMinor\":1,\"Header\":{\"Accept\":[\"image/webp,image/apng,image/*,*/*;q=0.8\"],\"Accept-Encoding\":[\"gzip, deflate\"],\"Accept-Language\":[\"de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Connection\":[\"keep-alive\"],\"Dnt\":[\"1\"],\"If-Modified-Since\":[\"Wed, 7 Mar 2012 13:07:48 GMT\"],\"Referer\":[\"http://tp-link.heim-zone.de/\"],\"User-Agent\":[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.99 Safari/537.36 Vivaldi/2.9.1705.41\"],\"X-Forwarded-Host\":[\"tp-link.heim-zone.de\"],\"X-Forwarded-Port\":[\"80\"],\"X-Forwarded-Proto\":[\"http\"],\"X-Forwarded-Server\":[\"b27f9cc3b001\"],\"X-Real-Ip\":[\"10.0.0.1\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tp-link.heim-zone.de\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.1:51552\",\"RequestURI\":\"/images/top_bg.gif\",\"TLS\":null}" ForwardURL="http://192.168.0.10/"
time="2020-02-14T12:08:41Z" level=debug msg="vulcand/oxy/roundrobin/rr: completed ServeHttp on request" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/images/logo.jpg\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/1.1\",\"ProtoMajor\":1,\"ProtoMinor\":1,\"Header\":{\"Accept\":[\"image/webp,image/apng,image/*,*/*;q=0.8\"],\"Accept-Encoding\":[\"gzip, deflate\"],\"Accept-Language\":[\"de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Connection\":[\"keep-alive\"],\"Dnt\":[\"1\"],\"If-Modified-Since\":[\"Wed, 7 Mar 2012 13:07:48 GMT\"],\"Referer\":[\"http://tp-link.heim-zone.de/\"],\"User-Agent\":[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.99 Safari/537.36 Vivaldi/2.9.1705.41\"],\"X-Forwarded-Host\":[\"tp-link.heim-zone.de\"],\"X-Forwarded-Port\":[\"80\"],\"X-Forwarded-Proto\":[\"http\"],\"X-Forwarded-Server\":[\"b27f9cc3b001\"],\"X-Real-Ip\":[\"10.0.0.1\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tp-link.heim-zone.de\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.1:51553\",\"RequestURI\":\"/images/logo.jpg\",\"TLS\":null}"
time="2020-02-14T12:08:41Z" level=debug msg="vulcand/oxy/roundrobin/rr: begin ServeHttp on request" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/images/button.gif\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/1.1\",\"ProtoMajor\":1,\"ProtoMinor\":1,\"Header\":{\"Accept\":[\"image/webp,image/apng,image/*,*/*;q=0.8\"],\"Accept-Encoding\":[\"gzip, deflate\"],\"Accept-Language\":[\"de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Connection\":[\"keep-alive\"],\"Dnt\":[\"1\"],\"If-Modified-Since\":[\"Wed, 7 Mar 2012 13:07:48 GMT\"],\"Referer\":[\"http://tp-link.heim-zone.de/\"],\"User-Agent\":[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.99 Safari/537.36 Vivaldi/2.9.1705.41\"],\"X-Forwarded-Host\":[\"tp-link.heim-zone.de\"],\"X-Forwarded-Port\":[\"80\"],\"X-Forwarded-Proto\":[\"http\"],\"X-Forwarded-Server\":[\"b27f9cc3b001\"],\"X-Real-Ip\":[\"10.0.0.1\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tp-link.heim-zone.de\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.1:51554\",\"RequestURI\":\"/images/button.gif\",\"TLS\":null}"
time="2020-02-14T12:08:41Z" level=debug msg="vulcand/oxy/roundrobin/rr: Forwarding this request to URL" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/images/button.gif\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/1.1\",\"ProtoMajor\":1,\"ProtoMinor\":1,\"Header\":{\"Accept\":[\"image/webp,image/apng,image/*,*/*;q=0.8\"],\"Accept-Encoding\":[\"gzip, deflate\"],\"Accept-Language\":[\"de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Connection\":[\"keep-alive\"],\"Dnt\":[\"1\"],\"If-Modified-Since\":[\"Wed, 7 Mar 2012 13:07:48 GMT\"],\"Referer\":[\"http://tp-link.heim-zone.de/\"],\"User-Agent\":[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.99 Safari/537.36 Vivaldi/2.9.1705.41\"],\"X-Forwarded-Host\":[\"tp-link.heim-zone.de\"],\"X-Forwarded-Port\":[\"80\"],\"X-Forwarded-Proto\":[\"http\"],\"X-Forwarded-Server\":[\"b27f9cc3b001\"],\"X-Real-Ip\":[\"10.0.0.1\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tp-link.heim-zone.de\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.1:51554\",\"RequestURI\":\"/images/button.gif\",\"TLS\":null}" ForwardURL="http://192.168.0.10/"
time="2020-02-14T12:08:41Z" level=debug msg="vulcand/oxy/roundrobin/rr: completed ServeHttp on request" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/images/top_bg.gif\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/1.1\",\"ProtoMajor\":1,\"ProtoMinor\":1,\"Header\":{\"Accept\":[\"image/webp,image/apng,image/*,*/*;q=0.8\"],\"Accept-Encoding\":[\"gzip, deflate\"],\"Accept-Language\":[\"de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Connection\":[\"keep-alive\"],\"Dnt\":[\"1\"],\"If-Modified-Since\":[\"Wed, 7 Mar 2012 13:07:48 GMT\"],\"Referer\":[\"http://tp-link.heim-zone.de/\"],\"User-Agent\":[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.99 Safari/537.36 Vivaldi/2.9.1705.41\"],\"X-Forwarded-Host\":[\"tp-link.heim-zone.de\"],\"X-Forwarded-Port\":[\"80\"],\"X-Forwarded-Proto\":[\"http\"],\"X-Forwarded-Server\":[\"b27f9cc3b001\"],\"X-Real-Ip\":[\"10.0.0.1\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tp-link.heim-zone.de\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.1:51552\",\"RequestURI\":\"/images/top_bg.gif\",\"TLS\":null}"
time="2020-02-14T12:08:41Z" level=debug msg="vulcand/oxy/roundrobin/rr: completed ServeHttp on request" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/images/button.gif\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/1.1\",\"ProtoMajor\":1,\"ProtoMinor\":1,\"Header\":{\"Accept\":[\"image/webp,image/apng,image/*,*/*;q=0.8\"],\"Accept-Encoding\":[\"gzip, deflate\"],\"Accept-Language\":[\"de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Connection\":[\"keep-alive\"],\"Dnt\":[\"1\"],\"If-Modified-Since\":[\"Wed, 7 Mar 2012 13:07:48 GMT\"],\"Referer\":[\"http://tp-link.heim-zone.de/\"],\"User-Agent\":[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.99 Safari/537.36 Vivaldi/2.9.1705.41\"],\"X-Forwarded-Host\":[\"tp-link.heim-zone.de\"],\"X-Forwarded-Port\":[\"80\"],\"X-Forwarded-Proto\":[\"http\"],\"X-Forwarded-Server\":[\"b27f9cc3b001\"],\"X-Real-Ip\":[\"10.0.0.1\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tp-link.heim-zone.de\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.1:51554\",\"RequestURI\":\"/images/button.gif\",\"TLS\":null}"

Chiefmas · February 17, 2020, 6:33pm

I'll ask the dumb, obvious questions:
Are you forwarding 443 at your network border to your Traeffik/Docker host?
and
Did you allow 443 at your network boarder firewall?
and
Did you allow 443 inbound in your Docker hosts' firewall?

The connection refused message suggests to me that you didn't do one of those things, but that you did for port 80. None of those issues would be visible from your Traefik or DNS config. The requests for certs would still work since they would be initiating the connections, but new in bound requests could be affected by any or all 3 of those things, if they aren't all set.

portboy · February 18, 2020, 7:09am

of cause, I checked my router config, and all is fine. traefik is not listening on port 443....

I made a step forward.
If I write my complete static config in my docker compose, it works.

Bu I can't find the reason for this.
Why is traefik listen on port 443 when I made the static entry point setup in my docker compose instead in a toml or yaml file?

ldez · February 18, 2020, 9:15am

Hello,

You cannot use filename and directory at the same time, you have to keep only directory.

portboy · February 18, 2020, 10:46am

txh, I will adapt
But this won't fix my initial 443 issue
I made a test without dynamic conf, only with whoami container, same problem

Chiefmas · February 28, 2020, 12:48am

Ok, well, can you clean up your original post, or post what your current configuration is. You have a lot of config things in your post, but not all of them are currently active?

Which container are you having issues with, the whoami, or tp-link? tp-link isn't listening on websecure, so it won't work on https.

I'm not following if you are able to get traefik to respond on 443 or not? What does the dashboard show you for back end services availability and front end router config?

Topic		Replies	Views
Why does Traefik allow unencrypted HTTP over port 443? Traefik v2 tcp	8	1311	July 20, 2023
Traefik can't connect to lets encrypt directory Traefik v2 docker , letsencrypt-acme	1	2563	February 28, 2020
Let's Encrypt failed with 'Unable to obtain ACME certificate for domains ... acme: error: 400 :: urn:ietf:params:acme:error:connection :: Error getting validation data, url' Traefik v2 docker , letsencrypt-acme	1	4318	October 29, 2020
HTTPS let's encrypt not working Traefik v2 docker , letsencrypt-acme	2	4341	November 15, 2019
Can traefik routing external https(443) -> traefik -> internal http(80)? Traefik v2 docker , letsencrypt-acme	13	3147	October 10, 2020

No connection/routing on 443

Related topics