Set Traefik externalTrafficPolicy=Local to preserve client IP

ส่งแล้ว

18 เมษายน 2569 เวลา 01:59 UTC

ผู้เขียน

Kamo

ตั้งค่า

11dd645

With the default "Cluster" policy, kube-proxy SNATs external traffic to the node IP before forwarding to Traefik. That caused Traefik to see the node IP as the source and put it in X-Forwarded-For, which broke IP-based geo lookup in kamo-analytics (visitor locations on world map stayed empty). "Local" policy skips SNAT and passes the original client IP through, which is what IP-based analytics needs.