Unable to Maintain TLS 1.0 Communication After Upgrading from Traefik 2.8 to 2.9

Traefik Traefik v2
1

Hi,

A year ago, I deployed Traefik specifically to manage TLS 1.0 for an old legacy server. Unfortunately, this server cannot handle newer TLS versions and cannot be upgraded. My setup is straightforward: I use HTTPS with a recent TLS version between clients and Traefik, and then HTTPS with TLS 1.0 between Traefik and the legacy server. This setup allows my applications to avoid dealing with the outdated TLS protocol directly.

Today, I attempted to upgrade from version 2.8 to version 2.11, but the upgrade broke my configuration because, since version 2.9, Traefik no longer supports TLS 1.0. I noticed the "minimumVersion" TLS option, but it seems applicable only for connections between the client and Traefik, not between Traefik and the backend service.

Is there any solution that would allow me to upgrade Traefik without breaking my setup?

2

It seems there is no option to use legacy TLS in Traefik service (doc).

It’s not Traefik's job to maintain compatibility with inherent insecure old protocols and I would assume that upstream Golang libraries just completely removed old TLS support, so it’s not available in Traefik anymore.