Real IP from Cloudflare/AWS Cloudfront Proxy/Tunnel

If Traefik is behind a Cloudflare/AWS Cloudfront Proxy/Tunnel, it won't be able to get the real IP from the external client as well as other information.

Processed Headers:

• Cloudflare: CF-Connecting-IP
• Cloudfront: Cloudfront-Viewer-Address

Configuration

Configuration documentation

Supported configurations per body

Setting	Allowed values	Required	Description
provider	string	yes	auto, cloudfront, cloudflare
trustip->{provider}	[]string	No	IP or IP range to trust
disableDefault	bool	Yes	Disable the built in list of CloudFlare IPs/Servers

Enable the plugin

Copy
experimental:
  plugins:
    traefikdisolver:
      modulename: github.com/kyaxcorp/traefikdisolver
      version: v1.0.9

Plugin configuration

Copy
http:
  middlewares:
    traefikdisolver-auto:
      plugin:
        traefikdisolver:
          provider: auto
          disableDefault: true
          trustip: # Trust IPS not required if disableDefault is false - we will allocate Cloud Flare IPs automatically
            cloudflare:
              - "0.0.0.0/0"
              - "::/0"
            cloudfront:
              - "0.0.0.0/0"
              - "::/0"
    traefikdisolver-cloudfront:
      plugin:
        traefikdisolver:
          provider: cloudfront
          disableDefault: true
          trustip: # Trust IPS not required if disableDefault is false - we will allocate Cloud Flare IPs automatically
            cloudfront:
              - "0.0.0.0/0"
              - "::/0"
    traefikdisolver-cloudflare:
      plugin:
        traefikdisolver:
          provider: cloudflare
          disableDefault: true
          trustip: # Trust IPS not required if disableDefault is false - we will allocate Cloud Flare IPs automatically
            cloudflare:
              - "0.0.0.0/0"
              - "::/0"
  routers:
    my-router-auto:
      rule: PathPrefix(`/`) && (Host(`cloudfront.example.com`) || Host(`cloudflare.example.com`))
      service: service-whoami
      entryPoints:
        - http
      middlewares:
        - traefikdisolver-cloudfront
    my-router-cloudfront:
      rule: PathPrefix(`/`) && Host(`cloudfront.example.com`)
      service: service-whoami
      entryPoints:
        - http
      middlewares:
        - traefikdisolver-cloudfront
    my-router-cloudflare:
      rule: PathPrefix(`/`) && Host(`cloudflare.example.com`)
      service: service-whoami
      entryPoints:
        - http
      middlewares:
        - traefikdisolver-cloudflare

  services:
    service-whoami:
      loadBalancer:
        servers:
          - url: http://127.0.0.1:5000