Ancestors

Toot

Written by Lord egeltje 🦔 🇪🇺 :donor: on 2025-01-03 at 16:51

Random containerization-tip:

If you are trying to expose public services from your #docker #container through a #traefik #loadbalancer, you might have run into this.

If the container is connected to multiple networks (eg. a "traefik" and a "postgresql" network) it is not clear which network will be registered to Traefik (using Docker labels).

If the "postgresql" interface of the container is registered (instead of the "traefik" interface), it leads to unroutable traffic as the "postgresql" network is not connected to Traefik.

You can fix this by connecting every network to Traefik (defeating the purpose of separated networks)

or

you can set the network parameter to a proper value in your Traefik config file:

docker:

endpoint: "unix:///var/run/docker.sock"

exposedByDefault: false

network: "traefik"  # <<<<<

Now the interface of the container that is connected to the "traefik" network will be registered to Traefik, regardless of all other networks the container is connected to.

=> More informations about this toot | More toots from egeltje@infosec.exchange

Descendants