mipo

Reverse Proxy Status

Health metrics for the Traefik reverse proxy that terminates TLS and routes all traffic. Scanner API requests (/scanner/*) are load balanced across ingest nodes; all other traffic goes to the manager. Shows router, service, and middleware counts along with any warnings or errors.

Fields & columns

NameDescription
RoutersTotal Traefik route rules that match incoming requests to backend services
Router WarningsConfiguration issues in routes that may affect routing but are not critical
Router ErrorsMisconfigurations preventing routes from working correctly
ServicesTotal backend targets that handle matched requests (e.g., manager, ingest nodes)
Service WarningsIssues with backend service definitions
Service ErrorsBackend services that are misconfigured or unreachable
MiddlewaresTotal request/response transformations (headers, rate limiting, path stripping)
Middleware WarningsNon-critical middleware configuration issues
Middleware ErrorsMiddleware misconfigurations blocking request processing

Gotchas

  • If Traefik is unavailable, both the GUI and scanner API are unreachable since all traffic routes through it.
  • Warnings are non-critical but may cause subtle routing issues — review them before they escalate to errors.
  • The environment badge (Development/Production) reflects the NODE_ENV of the manager, not Traefik itself.
  • Traefik runs on the external network only. It cannot directly access databases on the internal network. Backend routing uses the Docker-prefixed network name mipo_external in traefik.yml.

API calls (1)

MethodPathDescription
GET /api/health/infra/proxy-status Fetch Traefik availability, environment, and component counts

Related

  • Overview — Architecture diagram showing Traefik as the gateway node
  • Ingest — Traefik load balances scanner traffic across ingest nodes
  • HTTPS — TLS certificates used by Traefik for HTTPS termination