traefik.service.connections.open

Open connections to service

Dimensions:None

Technical Annotations (19)

Configuration Parameters (9)

serversTransport.maxIdleConnsPerHostrecommended: default (not -1)

Value of -1 disables keep-alive and causes connection exhaustion

serversTransport.forwardingTimeouts.idleConnTimeoutrecommended: default 90 seconds

Becomes ineffective when maxIdleConnsPerHost is -1

respondingTimeouts.readTimeoutrecommended: p90 request duration

Timeout for reading request body from client

respondingTimeouts.writeTimeoutrecommended: p90 request duration

Timeout for writing response to client

respondingTimeouts.idleTimeoutrecommended: p90 request duration

Maximum time an idle keepalive connection remains open

backends.[name].loadbalancer.maxConnections

Limits maximum concurrent connections to backend; use cautiously as root cause often client-side

entryPoints.*.transport.respondingTimeouts.readTimeout

Higher values increase DDoS risk by allowing longer connection hold times

entryPoints.*.transport.respondingTimeouts.idleTimeout

Higher values allow attackers to exhaust connection pools with idle connections

entryPoints.*.transport.respondingTimeouts.writeTimeout

Higher values increase resource exhaustion potential during slow responses

CLI Commands (1)

lsof -p $(pgrep traefik)diagnostic

Technical References (9)

apache 32bitcomponentactivemqcomponentdeadlockconceptsynchronizationconceptrequest durationconcepterror ratiosconceptTIME_WAITconceptmaxIdleConnsPerHostcomponententrypointcomponent

Related Insights (8)

Timeouts occur when proxying to Apache backend despite backend capacitywarning

▸

Code deadlocks from excessive synchronization cause service outagescritical

▸

Monitoring raw traffic totals delays detection of production health issuesinfo

▸

Disabling keep-alive causes excessive TIME_WAIT connectionswarning

▸

Open connections accumulate to 5k threshold causing traffic routing failurecritical

▸

Backend maximum connections limit prevents connection pile-upwarning

▸

Entrypoint open connections metric reports non-existent connectionswarning

▸

Globally increased timeouts enable easier DDoS attackswarning

▸