bogus greeting in traefik -> traefik communication about traefik

[dodgex]

I got a repro setup working. In the attached zip is a docker-compose.yml (starting two traefik and one nginx) and config files for each container.

Ideally you only need to unzip and run docker compose up. Then you should be able to open https://app-127-0-0-1.nip.io (depending on your dns setup this SOULD not work). If not either add it to etc/hosts or change the traefik yaml configs to something that works for you.

When I started the stack and open the url, the first time it shows the nginx welcome page, and as soon as you F5 the error happens in traefik-sub.

traefik_10522.zip

[bozzo]

I have the same issue with 2.11 on Kerberos authentication with 2 Keycloak instances behind Traefik (3 instances load balanced with round robin algorithm).
All requests work fine except Kerberos authentication. In private browsing this also works correctly (Firefox does not send a Kerberos ticket in private browsing, so authentication uses the Keycloak login/password form).
With 2.10.7, no issues.
I guess it's related to PR #10405, would a configuration option to enable sticky sessions for NTLM and Kerberos be an acceptable solution?

[juliens]

Thanks for reporting this issue.

I guess it's related to PR #10405, would a configuration option to enable sticky sessions for NTLM and Kerberos be an acceptable solution?

I agree that it seems linked to this PR, however, instead of relying on manual configuration, I'm wondering if there's a way to fix this automatically. To check, could you provide a reproducible case, like a docker-compose setup, to help me understand and debug the issue?

[42wim]

Got the same issue here with 2.11.0 and traefik going directly to a golang app with echo framework.
No kerberos enabled/used.
Only seem to happen with around 0.01% of the hits.