Search code examples
google-cloud-platformgoogle-kubernetes-enginetraefik

Stop traefik ingress from replying to IP requests


We have a GCP GKE setup with traefik as our ingress.

The problem is that when we hit (http GET) the IP of our LB, traefik responds with the TRAEFIK DEFAULT CERT (Self signed root certificate).

Can we configure traefik so that it doesn't respond at all, or at least it responds without an invalid certificate?


Solution

  • Strict SNI checking solves this partially by dropping the connection in the case of invalid certificate: https://docs.traefik.io/configuration/entrypoints/#strict-sni-checking