Middleware Catalog

http:
  middlewares:
    auth:
      basicAuth:
        users:
          - "admin:$2y$05$xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
        realm: "Restricted"
        removeHeader: true
        headerField: "X-User"

http:
  middlewares:
    digest-auth:
      digestAuth:
        users:
          - "admin:realm:hash"
        removeHeader: false

http:
  middlewares:
    fwd-auth:
      forwardAuth:
        address: "http://auth:9000/verify"
        trustForwardHeader: true
        authResponseHeaders:
          - X-User
        tls:
          ca: /certs/ca.pem

http:
  middlewares:
    allow-ip:
      ipAllowList:
        sourceRange:
          - "10.0.0.0/8"

http:
  middlewares:
    deny-ip:
      ipDenyList:
        sourceRange:
          - "203.0.113.0/24"

http:
  middlewares:
    sec-headers:
      headers:
        frameDeny: true
        sslRedirect: true
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        stsSeconds: 31536000
        customRequestHeaders:
          X-Custom: "value"
        customResponseHeaders:
          X-Powered-By: "Traefik"
        accessControlAllowOriginList:
          - "https://example.com"

http:
  middlewares:
    ratelimit:
      rateLimit:
        average: 100
        burst: 50
        period: 1m
        sourceCriterion:
          ipStrategy:
            depth: 1

http:
  middlewares:
    cb:
      circuitBreaker:
        expression: "NetworkErrorRatio() > 0.5"

http:
  middlewares:
    maxconn:
      maxConnections:
        amount: 10
        extractorFunc: "request.host"

http:
  middlewares:
    buffer:
      buffering:
        maxRequestBodyBytes: 10485760
        retryExpression: "IsNetworkError()"

http:
  middlewares:
    inflight:
      inFlightReq:
        amount: 100
        sourceCriterion:
          requestHost: true

http:
  middlewares:
    add-prefix:
      addPrefix:
        prefix: "/api"

http:
  middlewares:
    strip-prefix:
      stripPrefix:
        prefixes:
          - "/api"
          - "/v2"
        forceSlash: true

http:
  middlewares:
    replace-path:
      replacePath:
        path: "/app"

http:
  middlewares:
    replace-path-regex:
      replacePathRegex:
        regex: "^/api/v1/(.*)"
        replacement: "/$1"

http:
  middlewares:
    redirect:
      redirectScheme:
        scheme: https
        port: "443"
        permanent: true

http:
  middlewares:
    redirect-regex:
      redirectRegex:
        regex: "^http://"
        replacement: "https://"
        permanent: true

http:
  middlewares:
    url-rewrite:
      urlRewrite:
        regex: "^/old/(.*)"
        replacement: "/new/$1"

http:
  middlewares:
    compress:
      compress:
        excludedContentTypes:
          - "text/event-stream"

http:
  middlewares:
    errors:
      errors:
        status:
          - "404"
          - "500-599"
        service: error-service
        query: "/{status}.html"

http:
  middlewares:
    retry:
      retry:
        attempts: 3
        initialInterval: 100ms

http:
  middlewares:
    geo-block:
      plugin:
        geoblock:
          allowLocal: true
          blockedCountries:
            - "XX"