# Linkerd , traefik and opaque ports

**URL:** <https://linkerd.buoyant.io/t/linkerd-traefik-and-opaque-ports/395>\
**Category:** Linkerd General Discussion\
**Tags:** proxy, configuration, ingress\
**Created:** [February 21, 2024, 4:11pm UTC](https://linkerd.buoyant.io/t/linkerd-traefik-and-opaque-ports/395 "2024-02-21T16:11:23Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![navpreetsingh](https://avatars.discourse-cdn.com/v4/letter/n/8491ac/32.png) [@navpreetsingh](https://linkerd.buoyant.io/u/navpreetsingh)\
**Post date:** [February 21, 2024, 4:11pm UTC](https://linkerd.buoyant.io/t/linkerd-traefik-and-opaque-ports/395/1 "2024-02-21T16:11:23Z")

</div>

We are using linkerd stable-2.14.8 along with Traefik ingressroutes using ingress mode.([linkerd.io/inject](http://linkerd.io/inject): ingress)  
we had to use Traefik middleware to add `l5d-dst-override` header previously when on 2.13.4 version otherwise it was breaking requests.  
Now we were getting “Protocol detection timeouts” even for http requests going towards port 80. so we decided to try marking port 80 as opaque.  
when we did so via annotation in destination service/globally via linkerd helm chart, and restarted proxies . we started to get 502 bad gateway  
It started to work again in following scenarios :

1. Either on reverting opaque port changes.(removing port 80 from opaque port list).
2. or removing linkerd proxy injection from traefik ingress controller pods.
3. or removing `l5d-dst-override` header added via middleware.

my questions are :

- is `l5d-dst-override` really required after upgrading to stable-2.14.8 and traefik controller pods injected with ingress mode ?We don’t want to use routing functionality from Linkerd but would like to get request metrics and mtls.

> _Documentation on website seems bit confusing to me_  
> _(_ _ **Warning** _ _When an ingress is meshed in ingress mode, you must configure it to remove the_ `l5d-dst-override` _header to avoid creating an open relay to cluster-local and external endpoints._  
> _ **Note** _ _Linkerd versions 2.13.0 through 2.13.4 had a bug whereby the_ `l5d-dst-override` _header was required in ingress mode, or the request would fail. This bug was fixed in 2.13.5, and was not present prior to 2.13.0.)_

- any hints why it broke on marking port 80 as opaque ?
- is it normal to get “Protocol detection timeouts” even for http requests going towards port 80 ?

any suggestions/hints would be much appreciated

---

<div class="post-metadata">

**Author:** ![pt](https://avatars.discourse-cdn.com/v4/letter/p/ccd318/32.png) [@pt](https://linkerd.buoyant.io/u/pt)\
**Post date:** [March 21, 2024, 6:25pm UTC](https://linkerd.buoyant.io/t/linkerd-traefik-and-opaque-ports/395/2 "2024-03-21T18:25:03Z")

</div>

I’m also getting the same error running on stable-2.14.2. It’s been a challenge trying to resolve this issue. Hopefully someone from Linkerd can shine some light on this.