traefik: disable global CrowdSec enforcement (caused v6 ingress outage) #80

Merged

k.renner merged 1 commits from traefik-disable-crowdsec-enforcement into master

2026-06-27 14:27:19 +00:00

Author	SHA1	Message	Date
k.rennerandClaude Opus 4.8	5073eed8e5	traefik: disable global CrowdSec enforcement (caused v6 ingress outage) The global bouncer middleware banned all IPv6 ingress: Traefik sees one shared/SNAT'd v6 source, so a single http-admin-interface-probing hit (the e2e scan) 403'd every v6 client. Remove the global entrypoint-middleware attachment; keep the plugin + Middleware CRD inert so re-enabling is one line after fixing client-IP visibility + adding an internal whitelist. Detection (agents) stays on. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-27 16:10:59 +02:00

Author

SHA1

Message

Date

k.rennerandClaude Opus 4.8

5073eed8e5

traefik: disable global CrowdSec enforcement (caused v6 ingress outage)

The global bouncer middleware banned all IPv6 ingress: Traefik sees one shared/SNAT'd v6 source, so a single http-admin-interface-probing hit (the e2e scan) 403'd every v6 client. Remove the global entrypoint-middleware attachment; keep the plugin + Middleware CRD inert so re-enabling is one line after fixing client-IP visibility + adding an internal whitelist. Detection (agents) stays on.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-27 16:10:59 +02:00