# \#docker-swarm **URL:** https://community.traefik.io/tag/docker-swarm/9.md [Latest](https://community.traefik.io/latest.md) · [Categories](https://community.traefik.io/categories.md) · [Tags](https://community.traefik.io/tags.md) --- ## [Actively maintained certificate extractor](https://community.traefik.io/t/actively-maintained-certificate-extractor/30266)
**Author:** [@kale1d0code](https://community.traefik.io/u/kale1d0code)\ **Replies:** 3\ **Last updated:** [October 10, 2026, 9:05am UTC](https://community.traefik.io/t/actively-maintained-certificate-extractor/30266 "2026-10-10T09:05:31Z")
Hi All, nice to be part of the community :slight\_smile: we've had a long standing requirement to extract certificates from traefiks acme.json so they can be used by the services which require them (postfix, simplerisk,… --- ## [SSL certificate not working for a service using Traefik in Docker Swarm](https://community.traefik.io/t/ssl-certificate-not-working-for-a-service-using-traefik-in-docker-swarm/26187)
**Author:** [@JoaoPasserini](https://community.traefik.io/u/JoaoPasserini)\ **Replies:** 6\ **Last updated:** [July 26, 2026, 12:10pm UTC](https://community.traefik.io/t/ssl-certificate-not-working-for-a-service-using-traefik-in-docker-swarm/26187 "2026-07-26T12:10:14Z")
Hello, I'm experiencing an issue where my Traefik setup is not generating a Let's Encrypt SSL certificate for one of my services. Instead, it uses the default "Traefik Default Cert". My setup includes: VPS: Hetzner Se… --- ## [traefik slow on first request for unkown URLs](https://community.traefik.io/t/traefik-slow-on-first-request-for-unkown-urls/29890)
**Author:** [@webadmin](https://community.traefik.io/u/webadmin)\ **Replies:** 1\ **Last updated:** [July 13, 2026, 10:45am UTC](https://community.traefik.io/t/traefik-slow-on-first-request-for-unkown-urls/29890 "2026-07-13T10:45:45Z")
Hello, We are using Traefik for a Docker Swarm cluster with 6 nodes (3 x managers, 3 x workers). Traefik is running on the manager nodes, while all other containers are running on the worker nodes. So far, everything i… --- ## [WSS Connection cannot be establish issue ](https://community.traefik.io/t/wss-connection-cannot-be-establish-issue/29912)
**Author:** [@cocasin](https://community.traefik.io/u/cocasin)\ **Replies:** 7\ **Last updated:** [June 4, 2026, 5:55am UTC](https://community.traefik.io/t/wss-connection-cannot-be-establish-issue/29912 "2026-06-04T05:55:59Z")
We are running FleetDM (v4.84.2) behind Traefik (v3.7.0) in a clustered Docker Swarm environment. The FleetDM UI and standard HTTP API requests load successfully over HTTPS on the standard websecure entrypoint (:443). H… --- ## [exposedbydefault not working?](https://community.traefik.io/t/exposedbydefault-not-working/29884)
**Author:** [@revenue-open](https://community.traefik.io/u/revenue-open)\ **Replies:** 1\ **Last updated:** [May 17, 2026, 7:17am UTC](https://community.traefik.io/t/exposedbydefault-not-working/29884 "2026-05-17T07:17:12Z")
I am using Traefik with Docker Swarm. Everything seems to be working well except that it appears to be automatically picking up and exposing services including those I don't specify with labels. I have the following co… --- ## [Intermediate Certificate not sent breaking Chain](https://community.traefik.io/t/intermediate-certificate-not-sent-breaking-chain/29812)
**Author:** [@j4care-christianhahn](https://community.traefik.io/u/j4care-christianhahn)\ **Replies:** 2\ **Last updated:** [April 8, 2026, 6:56am UTC](https://community.traefik.io/t/intermediate-certificate-not-sent-breaking-chain/29812 "2026-04-08T06:56:26Z")
Hi ! I have a setup where I have my own Root CA which issues a Intermediate Certificate which then provides the Leaf (Server) Certificate. I’m addint then Leaf + Intermediate Certificate in cert.pem and reference it wi… --- ## [Is there a way to specify the network in a label without including the stack name?](https://community.traefik.io/t/is-there-a-way-to-specify-the-network-in-a-label-without-including-the-stack-name/29667)
**Author:** [@ddean](https://community.traefik.io/u/ddean)\ **Replies:** 1\ **Last updated:** [February 14, 2026, 8:01am UTC](https://community.traefik.io/t/is-there-a-way-to-specify-the-network-in-a-label-without-including-the-stack-name/29667 "2026-02-14T08:01:15Z")
In Traefik 2.x, we were able to use the unqualified network name in Traefik labels. With Traefik 3.x, I’m finding that doesn’t work and the stack name needs to be included in the label for Traefik to select the right IP. … --- ## [How to enable proxyprotocol on a service declared from docker swarm?](https://community.traefik.io/t/how-to-enable-proxyprotocol-on-a-service-declared-from-docker-swarm/9167)
**Author:** [@OuterSystems](https://community.traefik.io/u/OuterSystems)\ **Replies:** 4\ **Last updated:** [February 10, 2026, 1:40pm UTC](https://community.traefik.io/t/how-to-enable-proxyprotocol-on-a-service-declared-from-docker-swarm/9167 "2026-02-10T13:40:59Z")
Hi, The symptom My issue is this log line: level=error msg="field not found, node: proxyprotocol" providerName=docker container=... My setup I try to enable proxyprotocol for a service that I am running in a docker s… --- ## [Using port 10443 instead of 443 from vps wireguard tunnel to traefik in docker swarm](https://community.traefik.io/t/using-port-10443-instead-of-443-from-vps-wireguard-tunnel-to-traefik-in-docker-swarm/29526)
**Author:** [@lesley](https://community.traefik.io/u/lesley)\ **Replies:** 2\ **Last updated:** [January 2, 2026, 10:46pm UTC](https://community.traefik.io/t/using-port-10443-instead-of-443-from-vps-wireguard-tunnel-to-traefik-in-docker-swarm/29526 "2026-01-02T22:46:42Z")
Hi I’ve been using traefik with letsencrypt. On my vps haproxy is running, which proxies services via a wireguard tunnel to my homelab (docker swarm) servers. Worked fine until my internet service provider blocked ports… --- ## [Docker Registry uploads fail with HTTP 499 errors when running behind Traefik (v3.6) in Docker Swarm. Buffering, or timeout behavior during large image pushes](https://community.traefik.io/t/docker-registry-uploads-fail-with-http-499-errors-when-running-behind-traefik-v3-6-in-docker-swarm-buffering-or-timeout-behavior-during-large-image-pushes/29527)
**Author:** [@A.Provenzano](https://community.traefik.io/u/A.Provenzano)\ **Replies:** 3\ **Last updated:** [January 1, 2026, 8:22pm UTC](https://community.traefik.io/t/docker-registry-uploads-fail-with-http-499-errors-when-running-behind-traefik-v3-6-in-docker-swarm-buffering-or-timeout-behavior-during-large-image-pushes/29527 "2026-01-01T20:22:03Z")
I’m running a private Docker Registry (registry:2) behind Traefik in a Docker Swarm setup. Traefik handles HTTPS via Let’s Encrypt, and the registry itself runs without TLS behind the proxy. Small Docker images push suc… --- ## [How to obtain the real IP in Docker Swarm with ingress?](https://community.traefik.io/t/how-to-obtain-the-real-ip-in-docker-swarm-with-ingress/29508)
**Author:** [@FisherMS](https://community.traefik.io/u/FisherMS)\ **Replies:** 1\ **Last updated:** [December 25, 2025, 12:35pm UTC](https://community.traefik.io/t/how-to-obtain-the-real-ip-in-docker-swarm-with-ingress/29508 "2025-12-25T12:35:23Z")
I want to use the Ingress network, but I can no longer obtain the real IP address after using Ingress. Is there a way to obtain the real IP address while using Ingress in docker swarm? --- ## [Looking for the magic decoder ring for Docker Swarm, Traefik and other applications](https://community.traefik.io/t/looking-for-the-magic-decoder-ring-for-docker-swarm-traefik-and-other-applications/29450)
**Author:** [@doobs](https://community.traefik.io/u/doobs)\ **Replies:** 5\ **Last updated:** [December 16, 2025, 10:22pm UTC](https://community.traefik.io/t/looking-for-the-magic-decoder-ring-for-docker-swarm-traefik-and-other-applications/29450 "2025-12-16T22:22:30Z")
So, I've been beating my head against this for literally a month. Two machines (HP EliteDesk 705 G3), Ubuntu 24.04 server, Docker, one defined as the primary, the other the secondary. All good. Portainer set up, Dashb… --- ## [Having issues with docker swarm, sticky session cookie and AWS Cloudfront CDN](https://community.traefik.io/t/having-issues-with-docker-swarm-sticky-session-cookie-and-aws-cloudfront-cdn/29326)
**Author:** [@Twisterking](https://community.traefik.io/u/Twisterking)\ **Replies:** 11\ **Last updated:** [November 21, 2025, 4:16pm UTC](https://community.traefik.io/t/having-issues-with-docker-swarm-sticky-session-cookie-and-aws-cloudfront-cdn/29326 "2025-11-21T16:16:03Z")
So we recently changed from a standard \`docker compose\` setup to \`docker swarm\` and now are running into issues with our AWS Cloudfront CDN setup. We are running sticky sessions with a set cookie name of \`traefiksessio… --- ## [Traefik v3 + Docker 29 no Swarm não ativa roteamento/Let's Encrypt ("client version too old")](https://community.traefik.io/t/traefik-v3-docker-29-no-swarm-nao-ativa-roteamento-lets-encrypt-client-version-too-old/29051)
**Author:** [@lucasdonordeste](https://community.traefik.io/u/lucasdonordeste)\ **Replies:** 1\ **Last updated:** [November 13, 2025, 6:33pm UTC](https://community.traefik.io/t/traefik-v3-docker-29-no-swarm-nao-ativa-roteamento-lets-encrypt-client-version-too-old/29051 "2025-11-13T18:33:32Z")
Problem Scenario After upgrading to Docker 29 in a Swarm environment (GCP VM, Ubuntu 22) and deploying Traefik v3.x for reverse-proxy/HTTPS, custom domains returned self-signed certificate errors and Traefik failed to cr… --- ## [Traefik v3 loadbalancer with keycloak](https://community.traefik.io/t/traefik-v3-loadbalancer-with-keycloak/28977)
**Author:** [@Robin](https://community.traefik.io/u/Robin)\ **Replies:** 1\ **Last updated:** [November 8, 2025, 8:04am UTC](https://community.traefik.io/t/traefik-v3-loadbalancer-with-keycloak/28977 "2025-11-08T08:04:30Z")
Hello, Hi everyone, I'm running into issues while load balancing an external web application (three backend URLs) through Traefik v3. The application uses Keycloak for authentication, and most of the time the login pr… --- ## [Syntax looks correct but I get - field not found, node: rfc2136](https://community.traefik.io/t/syntax-looks-correct-but-i-get-field-not-found-node-rfc2136/28942)
**Author:** [@Macflurry](https://community.traefik.io/u/Macflurry)\ **Replies:** 1\ **Last updated:** [October 31, 2025, 11:41pm UTC](https://community.traefik.io/t/syntax-looks-correct-but-i-get-field-not-found-node-rfc2136/28942 "2025-10-31T23:41:17Z")
Hi, This is my first time setting up Treafik and I’ve definitely jumped in at the deep end. I have 3 hosts running a docker swarm so I am setting Treafik CE up as service. I’ve read that if I want to use ACME certifica… --- ## [Keycloak and Traefik](https://community.traefik.io/t/keycloak-and-traefik/28800)
**Author:** [@Robin](https://community.traefik.io/u/Robin)\ **Replies:** 3\ **Last updated:** [October 6, 2025, 2:56pm UTC](https://community.traefik.io/t/keycloak-and-traefik/28800 "2025-10-06T14:56:21Z")
Hello, I have some trouble to implement a keycloak behind traefik. main.tsx:13 Mixed Content: The page at 'https://keycloak.example.com/admin/master/console/' was loaded over HTTPS, but requested an insecure resource '… --- ## [Help with traefik and cloudflare full strict ssl/tls setup](https://community.traefik.io/t/help-with-traefik-and-cloudflare-full-strict-ssl-tls-setup/26941)
**Author:** [@decypher\_the\_world](https://community.traefik.io/u/decypher_the_world)\ **Replies:** 12\ **Last updated:** [September 26, 2025, 1:05pm UTC](https://community.traefik.io/t/help-with-traefik-and-cloudflare-full-strict-ssl-tls-setup/26941 "2025-09-26T13:05:47Z")
I have spent 3 days trying to get cloudflare full strict ssl/tls to work but have not been successful so here i am coming for help and am confident you guys will bail me out essentially this is for docker swarm setup a… --- ## [Traefik local as docker swarm reverse behind a vps hosted nginx proxy manager](https://community.traefik.io/t/traefik-local-as-docker-swarm-reverse-behind-a-vps-hosted-nginx-proxy-manager/28727)
**Author:** [@sepidre](https://community.traefik.io/u/sepidre)\ **Replies:** 4\ **Last updated:** [September 21, 2025, 10:39am UTC](https://community.traefik.io/t/traefik-local-as-docker-swarm-reverse-behind-a-vps-hosted-nginx-proxy-manager/28727 "2025-09-21T10:39:26Z")
Hi there so far I was able to get my own way with docker swarm and traefik but now I am running into walls since a few weeks so pls help me here. I am running a Hetzner VPS as my external IP with a Tailscale VPN to my … --- ## [Treafik for load balancing Galera Cluster](https://community.traefik.io/t/treafik-for-load-balancing-galera-cluster/28718)
**Author:** [@Robin](https://community.traefik.io/u/Robin)\ **Replies:** 5\ **Last updated:** [September 21, 2025, 6:02am UTC](https://community.traefik.io/t/treafik-for-load-balancing-galera-cluster/28718 "2025-09-21T06:02:18Z")
Hello, I currently have a working Traefik configuration and a separate Galera cluster using HAProxy as a load balancer. Is it possible for Traefik to also handle the load balancing for the Galera cluster, replacing HAP… --- ## [Traefik 502 error](https://community.traefik.io/t/traefik-502-error/28710)
**Author:** [@Asynchronite](https://community.traefik.io/u/Asynchronite)\ **Replies:** 2\ **Last updated:** [September 19, 2025, 6:47am UTC](https://community.traefik.io/t/traefik-502-error/28710 "2025-09-19T06:47:00Z")
Hello traefik community! I’m being faced with an interesting problem. I am self hosting an authentik stack and in the docker compose for authetik I am using the following traefik-related labels: server: # More confi… --- ## [How to add prefix (docker swarm mode)](https://community.traefik.io/t/how-to-add-prefix-docker-swarm-mode/28530)
**Author:** [@Mike-the-one](https://community.traefik.io/u/Mike-the-one)\ **Replies:** 6\ **Last updated:** [September 7, 2025, 12:22pm UTC](https://community.traefik.io/t/how-to-add-prefix-docker-swarm-mode/28530 "2025-09-07T12:22:37Z")
So I have been playing around with this for a while now with AI and I am unable to get it working.I have two sites, aaa.com and bbb.com, they both come from a single springboot service, let’s say service:9000, and aaa.co… --- ## [How is heal check configured for Docker and Swarm providers](https://community.traefik.io/t/how-is-heal-check-configured-for-docker-and-swarm-providers/25238)
**Author:** [@dvicente](https://community.traefik.io/u/dvicente)\ **Replies:** 1\ **Last updated:** [August 29, 2025, 7:37pm UTC](https://community.traefik.io/t/how-is-heal-check-configured-for-docker-and-swarm-providers/25238 "2025-08-29T19:37:12Z")
From the documentation it seems that services can be configured to perform health checks by periodically making requests to a given endpoint. For example, a dynamic configuration using the file provider can be ## Dynam… --- ## [Global 404 handler](https://community.traefik.io/t/global-404-handler/2144)
**Author:** [@gingerbreadassassin](https://community.traefik.io/u/gingerbreadassassin)\ **Replies:** 18\ **Last updated:** [August 15, 2025, 6:29am UTC](https://community.traefik.io/t/global-404-handler/2144 "2025-08-15T06:29:14Z")
Is there some way to globally apply default middlewares, e.g. Errors? Currently, if I specify a subdomain to my instance of traefik 2.0, it serves up the traefik default cert and I don't even get a 404 in my browser, ju… --- ## [Help with insecureSkipVerify](https://community.traefik.io/t/help-with-insecureskipverify/28073)
**Author:** [@AaronSadlerUK](https://community.traefik.io/u/AaronSadlerUK)\ **Replies:** 10\ **Last updated:** [August 13, 2025, 12:16pm UTC](https://community.traefik.io/t/help-with-insecureskipverify/28073 "2025-08-13T12:16:06Z")
I have been trying to set the insecureSkipVerify option, however no matter what I do it seems to be ignored. I am using traefik 3.5.0 and get the below error in the router: error building proxy for server URL \`\`https:/… --- ## [Traefik session stickiness doesn't seem be be working](https://community.traefik.io/t/traefik-session-stickiness-doesnt-seem-be-be-working/28153)
**Author:** [@ghevge](https://community.traefik.io/u/ghevge)\ **Replies:** 18\ **Last updated:** [August 11, 2025, 5:53pm UTC](https://community.traefik.io/t/traefik-session-stickiness-doesnt-seem-be-be-working/28153 "2025-08-11T17:53:49Z")
I am trying to set session stickiness on a Jira environment running 3 nodes, proxied by traefik, and managed by docker swarm. There is no replication in between the Jira nodes, so I want to rely on the session stickines… --- ## [Swarm deployment: TLS settings needed on the router?](https://community.traefik.io/t/swarm-deployment-tls-settings-needed-on-the-router/28057)
**Author:** [@urbaman](https://community.traefik.io/u/urbaman)\ **Replies:** 3\ **Last updated:** [August 2, 2025, 5:45am UTC](https://community.traefik.io/t/swarm-deployment-tls-settings-needed-on-the-router/28057 "2025-08-02T05:45:54Z")
Hi, Having already put tls settings at the command level: command: # CLI arguments - --global.checkNewVersion=true - --global.sendAnonymousUsage=true - --entrypoints.web.address=:80 - --entrypoints.web.http.red… --- ## [Traefik serving default certificate instead of my specified one](https://community.traefik.io/t/traefik-serving-default-certificate-instead-of-my-specified-one/28052)
**Author:** [@chipomho](https://community.traefik.io/u/chipomho)\ **Replies:** 1\ **Last updated:** [August 1, 2025, 10:54am UTC](https://community.traefik.io/t/traefik-serving-default-certificate-instead-of-my-specified-one/28052 "2025-08-01T10:54:50Z")
Running Traefik in docker swarm, I have the following yaml version: '3.8' services: traefik: image: traefik:v3.2 hostname: '{{.Node.Hostname}}' ports: \\# listen on host ports without ingress network - target… --- ## [TLS Stores For Different Certificates But Same Exact Domain](https://community.traefik.io/t/tls-stores-for-different-certificates-but-same-exact-domain/27921)
**Author:** [@decypher\_the\_world](https://community.traefik.io/u/decypher_the_world)\ **Replies:** 9\ **Last updated:** [July 24, 2025, 2:34am UTC](https://community.traefik.io/t/tls-stores-for-different-certificates-but-same-exact-domain/27921 "2025-07-24T02:34:24Z")
I have 2 certificates for the same exact domains example.com and \*.example.com one is private self-signed and the other is public cloudflare certificates how can i set this up so that i can reference the self signed f… --- ## [Traefik tcp router for squid](https://community.traefik.io/t/traefik-tcp-router-for-squid/27949)
**Author:** [@romgo](https://community.traefik.io/u/romgo)\ **Replies:** 3\ **Last updated:** [July 23, 2025, 1:18pm UTC](https://community.traefik.io/t/traefik-tcp-router-for-squid/27949 "2025-07-23T13:18:43Z")
Hello, I want to use traefik to route queries to my squid cluster. For this I need a tcp LB. however according to the documentation I cannot create a rule if I don't use TLS (this is my case here I don't have TLS invo… [Next page](https://community.traefik.io/tag/docker-swarm/9.md?match_all_tags=true&page=1&tags%5B%5D=docker-swarm)