traefik white list did not work as expect

I create d whitle list:

spec:
  ipWhiteList:
    ipStrategy: {}
    sourceRange:
      - 116.237.112.1/24

my local ip is: 116.237.112.223 when I access the web site, it still blocked.

Hey @jiangxiaoqiang

According to the documentation you need to correctly get the real IP address in order to relay on the source IP address. Thus, trusted headers should be configured to forward Real IP address through to Traefik. See the following configuration parameters:

https://doc.traefik.io/traefik/routing/entrypoints/#forwarded-headers

You need to also change the externalTrafficPolicy in the load balancing Traefik service to Local to get real IP addresses. Then, you can configure the ipWhiteList middleware.

Thanks, Jakub