Traefik Routers Documentation - Traefik in this article is written:
"Traefik will terminate the SSL connections (meaning that it will send decrypted data to the services".
Аs far as I understand requests from router to service are sent via HTTP. But my service has only HTTPS endpoint. How to make the router forward requests to the service via HTTPS?
This is a non-trivial question.
If you want to proxy/forward with TLS/SSL, which certificate do you want to use? Will your target service create a LetsEncrypt cert or just use a custom cert?
Traefik needs to know the cert to decrypt the request to read the HostSNI for matching.
If the target service provides its own custom cert, you need to use insecureSkipVerify
globally or as serverTransport
- or import the custom cert for Traefik to trust it.
When using Docker configuration discovery, you can set …scheme=https
. With dynamic config file, you can just use https
for the target url.