Traefik, Now With Native Go Plugins

Re:Traefik, Now With Native Go Plugins by kayson on Wednesday September 23, 2020 @01:47PM (#24569814)

This is very easily solved by using a proxy for the docker socket:

https://github.com/Tecnativa/docker-socket-proxy

https://github.com/traefik/traefik/issues/4174#issuecomment-

Create a private network that only connects Traefik and the proxy, and limit Traefik's access to only the GET requests it needs to operate. Now the socket is only exposed to a local container.

[ Parent | on HN ]

Re:Traefik, Now With Native Go Plugins by imtringued on Thursday September 24, 2020 @04:56AM (#24576669)

This is such an obvious solution. I am seriously wondering why this isn't integrated into docker directly.

[ Parent | on HN ]

Re:Traefik, Now With Native Go Plugins by codethief on Friday September 25, 2020 @05:06AM (#24587985)

This just adds another layer of indirection. While it improves security, it is not the same as fixing the issue in the first place and making sure that no network-facing part of the system runs as root.

[ Parent | on HN ]