Traefik 没有路由到适当的容器

Question

我正在尝试将 traefik 与我的 docker 容器一起用于路由。

文件结构为：

docker
├── docker-compose.yml
├── shared
│   └── .htpasswd
└── traefik
    ├── acme
    │   └── acme.json
    ├── rules.toml
    └── traefik.toml

这里是 traefik.toml:

logLevel = "ERROR"
InsecureSkipVerify = true
defaultEntryPoints = ["https", "http"]

[web]
address = ":8080"
  [web.auth.basic]
  usersFile = "/shared/.htpasswd"

# Force HTTPS
[entryPoints]
  [entryPoints.http]
  address = ":80"
    [entryPoints.http.redirect]
    entryPoint = "https"
  [entryPoints.https]
  address = ":443"
  [entryPoints.https.tls]

[retry]

[file]
  watch = true
  filename = "/etc/traefik/rules.toml"

[acme]
email = "test@test.com"
storage="/etc/traefik/acme/acme.json"
entryPoint = "https"
acmeLogging=true
onDemand = false #create certificate when container is created
[acme.dnsChallenge]
  provider = "digitalocean"
  delayBeforeCheck = 0
[[acme.domains]]
   main = "test.com"
[[acme.domains]]
   main = "*.test.com"

[docker]
endpoint = "unix:///var/run/docker.sock"
domain = "test.com"
watch = true
exposedbydefault = false

docker-compose.yml:

version: "3.5"
services:
  traefik:
    hostname: traefik
    image: traefik:latest
    container_name: traefik
    restart: always
    domainname: ${DOMAINNAME}
    networks:
      - default
      - traefik_proxy
    ports:
      - "80:80"
      - "443:443"
      #- "8080:8080"
    environment:
      #- digitalocean=${DO_AUTH_TOKEN}
      - DO_AUTH_TOKEN=${DO_AUTH_TOKEN}
    labels:
      - "traefik.enable=true"
      - "traefik.backend=traefik"
      - "traefik.frontend.rule=Host:traefik.${DOMAINNAME}"
#      - "traefik.frontend.rule=Host:${DOMAINNAME}; PathPrefixStrip: /traefik"
      - "traefik.port=8080"
      - "traefik.docker.network=traefik_proxy"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ${USERDIR}/docker/traefik:/etc/traefik
      - ${USERDIR}/docker/shared:/shared
networks:
  traefik_proxy:
    external:
      name: traefik_proxy
  default:
    driver: bridge

运行 traefik 容器后，我尝试从存储库创建另一个容器：

docker run -d \
  -v /var/run/docker.sock:/var/run/docker.sock \
  --label traefik.backend=hello-hapi \
  --label traefik.frontend.rule=Host:hello-hapi.test.com \
  --label traefik.docker.network=traefik_proxy \
  --label traefik.port=80 \
  --name hello_hapi \
  gitlab.test.com:5555/myuser/hello_hapi:latest

问题是我无法通过浏览器访问容器。它打印：hello-hapi.test.com’s server IP address could not be found (ERR_NAME_NOT_RESOLVED)。 但是可以在 traefik 仪表板中看到图像，并且 docker run -it -p 3000:3000 --rm gitlab.test.com:5555/myuser/hello_hapi:latest 在test.com:3000 上按预期运行

可能是什么问题？

Answer 1

您的浏览器正在检查“test.com”的 DNS 区域，然后在该区域中没有“hello-hapi.test.com”条目。

您需要拥有该域才能为其添加 DNS 条目。如果不是这样，我可以将我的域设置为“neekoy.google.com”，Google 不会对此感到特别高兴。

如果您想在浏览器中访问它，您可以在您的计算机上添加一个本地 DNS 条目并将“test.com”指向 localhost(127.0.0.1)。如果你不知道怎么做，你可以用谷歌搜索你的操作系统的“主机文件”并在其中添加以下行：

127.0.0.1 hello-hapi.test.com test.com www.test.com