Traefik on Kubernetes wrong Client IP on incoming connections Traefik on Kubernetes wrong Client IP on incoming connections kubernetes kubernetes

Traefik on Kubernetes wrong Client IP on incoming connections


In LoadBalancer service type doc ssl support on aws you can read the following statement:

HTTP and HTTPS will select layer 7 proxying: the ELB will terminate the connection with the user, parse headers and inject the X-Forwarded-For header with the user’s IP address (pods will only see the IP address of the ELB at the other end of its connection) when forwarding requests.

So if you add the following annotation to you traeffik service:

service.beta.kubernetes.io/aws-load-balancer-backend-protocol: https

It should work with the ingress.kubernetes.io/whitelist-x-forwarded-for: "true" annotation present in your ingress config and the forwarded header is added by the aws loadbalancer.

Disclaimer: I have not tested that solution.

Regards.