traefik & octavia, proxy protocol ?

[mhazan01]

Hello again,
I got the cluster to work, i have deployed traefik as my ingress controller, i can successfully deploy app and connect to them (been testing with bitnami wordpress). However, trying to secure it against brute force attacks i have an issue with the fact that the requests IP are the gateway ip or the octavia load balancer ip. i can tell traefik to use proxyprotocol but not the load balancer that is created by the traefik helm chart, it create the octavia load balancer and the pool with TCP protocol where i think it should be proxy. i found this https://github.com/traefik/traefik-helm-chart/blob/master/EXAMPLES.md but it's doc for digital ocean, especially the service.beta.kubernetes.io/do-loadbalancer-enable-proxy-protocol: "true". would there be an option for this ? or any other suggestions on how to guard the app deployed on the cluster ? Thanks!

[mhazan01]

found loadbalancer.openstack.org/proxy-protocol: true from here https://github.com/kubernetes/cloud-provider-openstack/blob/master/docs/openstack-cloud-controller-manager/expose-applications-using-loadbalancer-type-service.md and that does create the loadbalancer with PROXY protocol, now traefik sees the original ip. the wordpress pod doesn't.