Proxy

Checking your phone’s network traffic is often very interesting. I usually use mitmproxy for that. You can simply install it as a docker container and just need to change your phone’s proxy settings. docker run --rm -it -p 8080:8080 -p 127.0.0.1:8081:8081 mitmproxy/mitmproxy mitmweb --web-iface 0.0.0.0 There is a super handy webinterface running under http://localhost:8081 to check the transmitted data. As SSL wont be correctly signed / working then using a Man-in-the-middle proxy you have to install a CA certificate on your phone by visiting: http://mitm....

I was recently introduced to a new software called Traefik. A reverse proxy / load balancer that’s easy, dynamic, automatic, fast, full-featured, open source, production proven, provides metrics, and integrates with every major cluster technology… No wonder it’s so popular! What else to say? Sounds exactly like a tool I would love. As my setup is already based on a great diversity of docker containers it sounded interesting to me to have a reverse proxy that is handling routing and load balancing automatically to them and can even manage the necessary Let’s encrypt certificates for me....

There are diffrent ways to support IPv6 in Docker. The easiest is to enable ipv6 on the docker host and simply use the docker proxy to forward ipv6 via ipv4 to the containers. But one disadvantage of this method is, that your container is unable to see the clients remote address. Each request seems to be send from the docker host. Especially nginx and php or a spam filter for your mailserver are depending on a correct client ip....