Traefik suddenly stopped working on wildcard

Traefik Traefik v3 (latest)
1

Hello,
I've had a problem for 2 hours. My traefik suddenly stopped working on my routes using my synology wildcard.

For example, before I accessed traefik this way:
traefik.nom.synology.me, and now I had to change the route to traefik.syno. So no more SSL access (or invalid certificate) but above all no more access from outside my network.

Until now (October 2024) I had no problem accessing all my services but since this afternoon nothing has happened.

I tried to look at the traefik logs but I don't see anything.

Can I have some advice to help me?

my traefik conf :

  • docker :
  traefik:
    image: traefik:v3
    container_name: traefik_v3
    restart: unless-stopped
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /volume1/docker/reverseProxy/Traefik/traefik.yml:/traefik.yml
      - /volume1/docker/reverseProxy/Traefik/config:/config:ro
      - /volume1/docker/reverseProxy/Traefik/acme.json:/acme.json
      - /usr/syno/etc/certificate/_archive/HethY1:/certificates:ro
      - /volume1/docker/reverseProxy/Traefik/access.log:/log/access.log
    environment:
      - CF_DNS_API_TOKEN=__TOKEN__
      - OTEL_EXPORTER_OTLP_ENDPOINT=http://otel_collector:4317
    labels:
      - "traefik.enable=true"
      # Routeur pour l'accès général à Traefik
      - "traefik.http.routers.traefik-public.rule=Host(`traefik.nom.synology.me`)"
      - "traefik.http.routers.traefik-public.entrypoints=websecure"
      - "traefik.http.routers.traefik-public.service=api@internal"
      - "traefik.http.routers.traefik-public.tls=true"

      # Routeur pour les métriques Prometheus de Traefik
      - "traefik.http.routers.traefik-metrics.rule=Host(`traefik.nom.synology.me`) && PathPrefix(`/metrics`)"
      - "traefik.http.routers.traefik-metrics.entrypoints=websecure"
      - "traefik.http.routers.traefik-metrics.tls=true"
      - "traefik.http.services.traefik-metrics.loadbalancer.server.port=8180"

      # Routeur sécurisé pour le tableau de bord avec middleware Authelia
      - "traefik.http.routers.traefik-dashboard.rule=Host(`traefik.nom.synology.me`) && (PathPrefix(`/dashboard`) || PathPrefix(`/api`))"
      - "traefik.http.routers.traefik-dashboard.entrypoints=websecure"
      - "traefik.http.routers.traefik-dashboard.service=api@internal"
      - "traefik.http.routers.traefik-dashboard.middlewares=authelia@docker"
      - "traefik.http.services.traefik-dashboard.loadbalancer.server.port=9091"
      - "traefik.http.routers.traefik-dashboard.tls=true"
    networks:
      traefik_bridge:
      macvlan:
        ipv4_address: 192.168.1.241
  • config file
http:
  routers:
    traefik-http:
      entryPoints:
        - web
      rule: "Host(`traefik.syno`)"
      service: traefik

  middlewares:
    redirect-to-https:
      redirectScheme:
        scheme: https
    auth:
      basicauth:
        users: __USER__:__PASSWORD__

  services:
    traefik:
      loadBalancer:
        servers:
          - url: "http://127.0.0.1:8080"
  • traefik.yaml
api:
  dashboard: true
  insecure: true

entryPoints:
  mqtt:
    address: ":1883"
  metrics:
    address: ":8082"
  web:
    address: ":80"
  websecure:
    address: ":443"
    http:
      tls: {}
  rustdesk-17tcp:
    address: ":21117"
  rustdesk-16udp:
    address: ":21116/udp"

providers:
  file:
    directory: /config
    watch: true
  docker:
    endpoint: "unix:///var/run/docker.sock"
    exposedByDefault: false
    network: traefik_bridge

accessLog:
  filePath: "/log/access.log"
  format: json
  fields:
    defaultMode: drop
    names:
      ClientHost: keep
      Status: keep
      ServiceName: keep
      RouterName: keep
      RequestAddr: keep
      RequestPath: keep
      RequestMethod: keep
      StartLocal: keep

log:
  level: DEBUG

tracing:
  serviceName: "traefik"
  otlp:
    http:
      endpoint: "http://jaeger:4318/v1/traces"#"http://otel_collector:4317"

metrics:
  prometheus:
    entryPoint: metrics
  
tls:
  certificates:
    - certFile: "/certificates/fullchain.pem"
      keyFile: "/certificates/privkey.pem"
      
certificatesresolvers:
  zerossl:
    acme:
      email: __EMAIL__
      storage: /acme.json
      caServer: https://acme.zerossl.com/v2/DV90
      eab:
        kid: "__KID__"
        hmacEncoded: "__HMAC__"
      httpChallenge:
        entryPoint: web
  letsencrypt:
    acme:
      email: __EMAIL__
      storage: /acme.json
      caServer: https://acme-v02.api.letsencrypt.org/directory
      dnsChallenge:
        provider: cloudflare
        delayBeforeCheck: 0
2

interesting thing, the traefik redirection outside my network is functional. I only have the problem locally.

EDIT : Ok I found it, my internet box received an update. And they enabled IPv6...
After deactivation, everything returned to normal.

3

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.