traefik/docs/content/routing/providers/consul-catalog.md

507 lines
16 KiB
Markdown
Raw Normal View History

---
title: "Traefik Consul Catalog Routing"
description: "Learn how to use Consul Catalog as a provider for routing configurations in Traefik Proxy. Read the technical documentation."
---
2019-10-15 15:34:08 +00:00
# Traefik & Consul Catalog
2019-11-29 16:16:05 +00:00
A Story of Tags, Services & Instances
2019-10-15 15:34:08 +00:00
{: .subtitle }
![Consul Catalog](../../assets/img/providers/consul.png)
2019-10-15 15:34:08 +00:00
2019-11-29 16:16:05 +00:00
Attach tags to your services and let Traefik do the rest!
2019-10-15 15:34:08 +00:00
One of the best feature of Traefik is to delegate the routing configuration to the application level.
With Consul Catalog, Traefik can leverage tags attached to a service to generate routing rules.
!!! warning "Tags & sensitive data"
We recommend to *not* use tags to store sensitive data (certificates, credentials, etc).
Instead, we recommend to store sensitive data in a safer storage (secrets, file, etc).
2019-10-15 15:34:08 +00:00
## Routing Configuration
2019-11-29 16:16:05 +00:00
!!! info "tags"
2019-10-15 15:34:08 +00:00
2019-11-29 16:16:05 +00:00
- tags are case insensitive.
- The complete list of tags can be found [the reference page](../../reference/dynamic-configuration/consul-catalog.md)
2019-10-15 15:34:08 +00:00
### General
Traefik creates, for each consul Catalog service, a corresponding [service](../services/index.md) and [router](../routers/index.md).
2019-11-29 16:16:05 +00:00
The Service automatically gets a server per instance in this consul Catalog service, and the router gets a default rule attached to it, based on the service name.
2019-10-15 15:34:08 +00:00
### Routers
2019-11-29 16:16:05 +00:00
To update the configuration of the Router automatically attached to the service, add tags starting with `traefik.routers.{name-of-your-choice}.` and followed by the option you want to change.
2019-10-15 15:34:08 +00:00
2020-03-13 21:50:05 +00:00
For example, to change the rule, you could add the tag ```traefik.http.routers.my-service.rule=Host(`example.com`)```.
2019-10-15 15:34:08 +00:00
??? info "`traefik.http.routers.<router_name>.rule`"
2019-11-29 16:16:05 +00:00
See [rule](../routers/index.md#rule) for more information.
2019-10-15 15:34:08 +00:00
```yaml
2020-03-13 21:50:05 +00:00
traefik.http.routers.myrouter.rule=Host(`example.com`)
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.routers.<router_name>.entrypoints`"
2019-11-29 16:16:05 +00:00
See [entry points](../routers/index.md#entrypoints) for more information.
2019-10-15 15:34:08 +00:00
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.routers.myrouter.entrypoints=web,websecure
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.routers.<router_name>.middlewares`"
2019-11-29 16:16:05 +00:00
See [middlewares](../routers/index.md#middlewares) and [middlewares overview](../../middlewares/overview.md) for more information.
2019-10-15 15:34:08 +00:00
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.routers.myrouter.middlewares=auth,prefix,cb
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.routers.<router_name>.service`"
2019-11-29 16:16:05 +00:00
See [rule](../routers/index.md#service) for more information.
2019-10-15 15:34:08 +00:00
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.routers.myrouter.service=myservice
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.routers.<router_name>.tls`"
See [tls](../routers/index.md#tls) for more information.
```yaml
traefik.http.routers.myrouter.tls=true
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.routers.<router_name>.tls.certresolver`"
See [certResolver](../routers/index.md#certresolver) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.routers.myrouter.tls.certresolver=myresolver
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.routers.<router_name>.tls.domains[n].main`"
See [domains](../routers/index.md#domains) for more information.
```yaml
2020-03-13 21:50:05 +00:00
traefik.http.routers.myrouter.tls.domains[0].main=example.org
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.routers.<router_name>.tls.domains[n].sans`"
See [domains](../routers/index.md#domains) for more information.
```yaml
2020-03-13 21:50:05 +00:00
traefik.http.routers.myrouter.tls.domains[0].sans=test.example.org,dev.example.org
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.routers.<router_name>.tls.options`"
See [options](../routers/index.md#options) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.routers.myrouter.tls.options=foobar
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.routers.<router_name>.priority`"
2022-03-17 17:02:08 +00:00
See [priority](../routers/index.md#priority) for more information.
2019-10-15 15:34:08 +00:00
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.routers.myrouter.priority=42
2019-10-15 15:34:08 +00:00
```
### Services
2019-11-29 16:16:05 +00:00
To update the configuration of the Service automatically attached to the service,
add tags starting with `traefik.http.services.{name-of-your-choice}.`, followed by the option you want to change.
2019-10-15 15:34:08 +00:00
For example, to change the `passHostHeader` behavior,
2019-11-29 16:16:05 +00:00
you'd add the tag `traefik.http.services.{name-of-your-choice}.loadbalancer.passhostheader=false`.
2019-10-15 15:34:08 +00:00
??? info "`traefik.http.services.<service_name>.loadbalancer.server.port`"
Registers a port.
2019-11-29 16:16:05 +00:00
Useful when the service exposes multiples ports.
2019-10-15 15:34:08 +00:00
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.services.myservice.loadbalancer.server.port=8080
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.services.<service_name>.loadbalancer.server.scheme`"
Overrides the default scheme.
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.services.myservice.loadbalancer.server.scheme=http
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.services.<service_name>.loadbalancer.serverstransport`"
Allows to reference a ServersTransport resource that is defined either with the File provider or the Kubernetes CRD one.
See [serverstransport](../services/index.md#serverstransport) for more information.
```yaml
traefik.http.services.myservice.loadbalancer.serverstransport=foobar@file
```
2019-10-15 15:34:08 +00:00
??? info "`traefik.http.services.<service_name>.loadbalancer.passhostheader`"
See [pass Host header](../services/index.md#pass-host-header) for more information.
2019-10-15 15:34:08 +00:00
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.services.myservice.loadbalancer.passhostheader=true
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.services.<service_name>.loadbalancer.healthcheck.headers.<header_name>`"
See [health check](../services/index.md#health-check) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.services.myservice.loadbalancer.healthcheck.headers.X-Foo=foobar
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.services.<service_name>.loadbalancer.healthcheck.hostname`"
See [health check](../services/index.md#health-check) for more information.
```yaml
2020-03-13 21:50:05 +00:00
traefik.http.services.myservice.loadbalancer.healthcheck.hostname=example.org
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.services.<service_name>.loadbalancer.healthcheck.interval`"
See [health check](../services/index.md#health-check) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.services.myservice.loadbalancer.healthcheck.interval=10
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.services.<service_name>.loadbalancer.healthcheck.path`"
See [health check](../services/index.md#health-check) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.services.myservice.loadbalancer.healthcheck.path=/foo
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.services.<service_name>.loadbalancer.healthcheck.method`"
See [health check](../services/index.md#health-check) for more information.
```yaml
traefik.http.services.myservice.loadbalancer.healthcheck.method=foobar
```
2019-10-15 15:34:08 +00:00
??? info "`traefik.http.services.<service_name>.loadbalancer.healthcheck.port`"
See [health check](../services/index.md#health-check) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.services.myservice.loadbalancer.healthcheck.port=42
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.services.<service_name>.loadbalancer.healthcheck.scheme`"
See [health check](../services/index.md#health-check) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.services.myservice.loadbalancer.healthcheck.scheme=http
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.services.<service_name>.loadbalancer.healthcheck.timeout`"
See [health check](../services/index.md#health-check) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.services.myservice.loadbalancer.healthcheck.timeout=10
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.services.<service_name>.loadbalancer.healthcheck.followredirects`"
See [health check](../services/index.md#health-check) for more information.
```yaml
traefik.http.services.myservice.loadbalancer.healthcheck.followredirects=true
```
??? info "`traefik.http.services.<service_name>.loadbalancer.sticky.cookie`"
2019-10-15 15:34:08 +00:00
See [sticky sessions](../services/index.md#sticky-sessions) for more information.
```yaml
traefik.http.services.myservice.loadbalancer.sticky.cookie=true
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.services.<service_name>.loadbalancer.sticky.cookie.httponly`"
See [sticky sessions](../services/index.md#sticky-sessions) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.services.myservice.loadbalancer.sticky.cookie.httponly=true
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.services.<service_name>.loadbalancer.sticky.cookie.name`"
See [sticky sessions](../services/index.md#sticky-sessions) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.services.myservice.loadbalancer.sticky.cookie.name=foobar
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.http.services.<service_name>.loadbalancer.sticky.cookie.secure`"
See [sticky sessions](../services/index.md#sticky-sessions) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.services.myservice.loadbalancer.sticky.cookie.secure=true
2019-10-15 15:34:08 +00:00
```
2020-03-23 10:24:05 +00:00
??? info "`traefik.http.services.<service_name>.loadbalancer.sticky.cookie.samesite`"
See [sticky sessions](../services/index.md#sticky-sessions) for more information.
```yaml
traefik.http.services.myservice.loadbalancer.sticky.cookie.samesite=none
```
2019-10-15 15:34:08 +00:00
??? info "`traefik.http.services.<service_name>.loadbalancer.responseforwarding.flushinterval`"
See [response forwarding](../services/index.md#response-forwarding) for more information.
2019-10-15 15:34:08 +00:00
```yaml
2019-11-29 16:16:05 +00:00
traefik.http.services.myservice.loadbalancer.responseforwarding.flushinterval=10
2019-10-15 15:34:08 +00:00
```
### Middleware
2019-11-29 16:16:05 +00:00
You can declare pieces of middleware using tags starting with `traefik.http.middlewares.{name-of-your-choice}.`, followed by the middleware type/options.
2019-10-15 15:34:08 +00:00
2021-06-11 13:30:05 +00:00
For example, to declare a middleware [`redirectscheme`](../../middlewares/http/redirectscheme.md) named `my-redirect`, you'd write `traefik.http.middlewares.my-redirect.redirectscheme.scheme: https`.
2019-10-15 15:34:08 +00:00
More information about available middlewares in the dedicated [middlewares section](../../middlewares/overview.md).
??? example "Declaring and Referencing a Middleware"
```yaml
# ...
2019-11-29 16:16:05 +00:00
# Declaring a middleware
traefik.http.middlewares.my-redirect.redirectscheme.scheme=https
# Referencing a middleware
traefik.http.routers.my-service.middlewares=my-redirect
2019-10-15 15:34:08 +00:00
```
!!! warning "Conflicts in Declaration"
If you declare multiple middleware with the same name but with different parameters, the middleware fails to be declared.
### TCP
2019-11-29 16:16:05 +00:00
You can declare TCP Routers and/or Services using tags.
2019-10-15 15:34:08 +00:00
??? example "Declaring TCP Routers and Services"
```yaml
2020-03-13 21:50:05 +00:00
traefik.tcp.routers.my-router.rule=HostSNI(`example.com`)
2019-11-29 16:16:05 +00:00
traefik.tcp.routers.my-router.tls=true
traefik.tcp.services.my-service.loadbalancer.server.port=4123
2019-10-15 15:34:08 +00:00
```
!!! warning "TCP and HTTP"
If you declare a TCP Router/Service, it will prevent Traefik from automatically creating an HTTP Router/Service (like it does by default if no TCP Router/Service is defined).
2019-11-29 16:16:05 +00:00
You can declare both a TCP Router/Service and an HTTP Router/Service for the same consul service (but you have to do so manually).
2019-10-15 15:34:08 +00:00
#### TCP Routers
??? info "`traefik.tcp.routers.<router_name>.entrypoints`"
See [entry points](../routers/index.md#entrypoints_1) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.tcp.routers.mytcprouter.entrypoints=ep1,ep2
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.tcp.routers.<router_name>.rule`"
See [rule](../routers/index.md#rule_1) for more information.
```yaml
2020-03-13 21:50:05 +00:00
traefik.tcp.routers.mytcprouter.rule=HostSNI(`example.com`)
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.tcp.routers.<router_name>.service`"
See [service](../routers/index.md#services) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.tcp.routers.mytcprouter.service=myservice
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.tcp.routers.<router_name>.tls`"
See [TLS](../routers/index.md#tls_1) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.tcp.routers.mytcprouter.tls=true
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.tcp.routers.<router_name>.tls.certresolver`"
See [certResolver](../routers/index.md#certresolver_1) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.tcp.routers.mytcprouter.tls.certresolver=myresolver
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.tcp.routers.<router_name>.tls.domains[n].main`"
See [domains](../routers/index.md#domains_1) for more information.
```yaml
2020-03-13 21:50:05 +00:00
traefik.tcp.routers.mytcprouter.tls.domains[0].main=example.org
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.tcp.routers.<router_name>.tls.domains[n].sans`"
See [domains](../routers/index.md#domains_1) for more information.
```yaml
2020-03-13 21:50:05 +00:00
traefik.tcp.routers.mytcprouter.tls.domains[0].sans=test.example.org,dev.example.org
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.tcp.routers.<router_name>.tls.options`"
See [options](../routers/index.md#options_1) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.tcp.routers.mytcprouter.tls.options=mysoptions
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.tcp.routers.<router_name>.tls.passthrough`"
See [TLS](../routers/index.md#tls_1) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.tcp.routers.mytcprouter.tls.passthrough=true
2019-10-15 15:34:08 +00:00
```
#### TCP Services
??? info "`traefik.tcp.services.<service_name>.loadbalancer.server.port`"
Registers a port of the application.
```yaml
2019-11-29 16:16:05 +00:00
traefik.tcp.services.mytcpservice.loadbalancer.server.port=423
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.tcp.services.<service_name>.loadbalancer.terminationdelay`"
See [termination delay](../services/index.md#termination-delay) for more information.
```yaml
2019-11-29 16:16:05 +00:00
traefik.tcp.services.mytcpservice.loadbalancer.terminationdelay=100
2019-10-15 15:34:08 +00:00
```
??? info "`traefik.tcp.services.<service_name>.loadbalancer.proxyprotocol.version`"
See [PROXY protocol](../services/index.md#proxy-protocol) for more information.
```yaml
traefik.tcp.services.mytcpservice.loadbalancer.proxyprotocol.version=1
```
2020-02-20 21:24:05 +00:00
### UDP
You can declare UDP Routers and/or Services using tags.
??? example "Declaring UDP Routers and Services"
```yaml
traefik.udp.routers.my-router.entrypoints=udp
traefik.udp.services.my-service.loadbalancer.server.port=4123
```
!!! warning "UDP and HTTP"
If you declare a UDP Router/Service, it will prevent Traefik from automatically creating an HTTP Router/Service (like it does by default if no UDP Router/Service is defined).
You can declare both a UDP Router/Service and an HTTP Router/Service for the same consul service (but you have to do so manually).
#### UDP Routers
??? info "`traefik.udp.routers.<router_name>.entrypoints`"
See [entry points](../routers/index.md#entrypoints_2) for more information.
```yaml
traefik.udp.routers.myudprouter.entrypoints=ep1,ep2
```
??? info "`traefik.udp.routers.<router_name>.service`"
See [service](../routers/index.md#services_1) for more information.
```yaml
traefik.udp.routers.myudprouter.service=myservice
```
#### UDP Services
??? info "`traefik.udp.services.<service_name>.loadbalancer.server.port`"
Registers a port of the application.
```yaml
traefik.udp.services.myudpservice.loadbalancer.server.port=423
```
2019-10-15 15:34:08 +00:00
### Specific Provider Options
#### `traefik.enable`
```yaml
2019-11-29 16:16:05 +00:00
traefik.enable=true
2019-10-15 15:34:08 +00:00
```
2019-11-29 16:16:05 +00:00
You can tell Traefik to consider (or not) the service by setting `traefik.enable` to true or false.
2019-10-15 15:34:08 +00:00
This option overrides the value of `exposedByDefault`.
#### `traefik.consulcatalog.connect`
```yaml
traefik.consulcatalog.connect=true
```
You can tell Traefik to consider (or not) the service as a Connect capable one by setting `traefik.consulcatalog.connect` to true or false.
This option overrides the value of `connectByDefault`.
#### `traefik.consulcatalog.canary`
```yaml
traefik.consulcatalog.canary=true
```
When ConsulCatalog, in the context of a Nomad orchestrator,
is a provider (of service registration) for Traefik,
one might have the need to distinguish within Traefik between a [Canary](https://learn.hashicorp.com/tutorials/nomad/job-blue-green-and-canary-deployments#deploy-with-canaries) instance of a service, or a production one.
For example if one does not want them to be part of the same load-balancer.
Therefore, this option, which is meant to be provided as one of the values of the `canary_tags` field in the Nomad [service stanza](https://www.nomadproject.io/docs/job-specification/service#canary_tags),
allows Traefik to identify that the associated instance is a canary one.
2019-10-15 15:34:08 +00:00
#### Port Lookup
Traefik is capable of detecting the port to use, by following the default consul Catalog flow.
That means, if you just expose lets say port `:1337` on the consul Catalog ui, traefik will pick up this port and use it.