# ServerTransport and insecureSkipVerify specific hosts

**URL:** <https://community.traefik.io/t/servertransport-and-insecureskipverify-specific-hosts/13477>\
**Category:** Traefik v2\
**Tags:** file, docker\
**Created:** [February 16, 2022, 12:40pm UTC](https://community.traefik.io/t/servertransport-and-insecureskipverify-specific-hosts/13477 "2022-02-16T12:40:29Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![rombo](https://avatars.discourse-cdn.com/v4/letter/r/50afbb/32.png) [@rombo](https://community.traefik.io/u/rombo)\
**Post date:** [February 16, 2022, 12:40pm UTC](https://community.traefik.io/t/servertransport-and-insecureskipverify-specific-hosts/13477/1 "2022-02-16T12:40:30Z")

</div>

In the docker-compose with the cli command of `- "--serversTransport.insecureSkipVerify=true"` I can reach the external host. But what I cant figure out is how to use ServerTransport and using insecureSkipVerify on specific hosts rather than using the global option? Stuck with an error of `Internal Server Error` `caused by: x509: cannot validate certificate for 192.168.10.10 because it doesn't contain any IP SANs"`

dynamic config:

```auto
http:
  middlewares:
    test-auth:
      basicAuth:
        usersFile: "/rules/htpasswd"
    test-ratelimit:
      rateLimit:
        average: 100
        burst: 50
    idrac:
      headers:
        frameDeny: true
        sslRedirect: true
        browserXssFilter: true
        forceSTSHeader: true
        stsIncludeSubdomains: true
        stsSeconds: 15552000
        customFrameOptionsValue: SAMEORIGIN
        customRequestHeaders:
          X-Forwarded-Proto: https
  routers:
    idrac1:
      rule: "Host(`idrac1.my.domain`)"
      priority: 1000
      entryPoints:
        - websecure
      middlewares:
        - idrac
      service: idrac1
      tls:
        certResolver: myresolver
  services:
    idrac1:
      loadBalancer:
        servers:
          - url: "https://192.168.10.10:443" # or whatever your external host's IP:port is 
        passHostHeader: true
        # sticky:
        # cookie:
        # name: "__Secure-idrac1.my.domain"
        # secure: true
        # httpOnly: true
        # sameSite: "none"
  serversTransports:
    mytransport:
      serverName: "idrac1.my.domain"
      # serverName: "192.168.10.10"
      insecureSkipVerify: true

```

---

<div class="post-metadata">

**Author:** ![rombo](https://avatars.discourse-cdn.com/v4/letter/r/50afbb/32.png) [@rombo](https://community.traefik.io/u/rombo)\
**Post date:** [March 5, 2022, 2:08am UTC](https://community.traefik.io/t/servertransport-and-insecureskipverify-specific-hosts/13477/2 "2022-03-05T02:08:26Z")

</div>

I think I figured some of it out while making several changes i cannot all recall. But in the documentation for the section on [[Services - Traefik](https://doc.traefik.io/traefik/routing/services/#serverstransport_1)]([https://routing](https://routing) services docs) services it uses the name (node?) `serversTransport:` But outside of services-but still indented at that peer level- `serversTransports:` it uses a different name in the docs, the `s` is added at the end.  
Also if you check your debug logs there should be some error about about a node? in this case insecureSkipVerify. So in the end using the two slightly different names fixed it?

---

<div class="post-metadata">

**Author:** ![jerrac](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/jerrac/32/5384_2.png) [@jerrac](https://community.traefik.io/u/jerrac)\
**Post date:** [September 21, 2022, 8:20pm UTC](https://community.traefik.io/t/servertransport-and-insecureskipverify-specific-hosts/13477/3 "2022-09-21T20:20:21Z")

</div>

I just spent all morning, and part of this afternoon trying to figure out why my config wasn't working, and it was serversTransport vs. serversTransport **s**.

Thank you @rombo for cluing me in on that.
