Hi Team, can you help us here. We have been stuck on this. We are running FleetDM (v4.84.2) behind Traefik (v3.7.0) in a clustered Docker Swarm environment. The FleetDM UI and standard HTTP API requests load successfully over HTTPS on the standard websecure entrypoint (:443). However, Live Queries fail immediately. The persistent WebSocket (wss://) handshake cannot establish a clean connection, forcing immediate drops or continuous reconnection failure loops. Interesting Finding: When isolating an independent entrypoint explicitly for Fleet (e.g., fleetport on :8085) without generic web middlewares or stream limits, the WebSocket connection for Live Queries works perfectly. The failure occurs only when routing through the shared production websecure entrypoint on port 443. 1. Environment Architecture & Stack Details Orchestrator: Docker Swarm (Global mode deployment for Traefik on managers) Ingress/Proxy Engine: Traefik v3.7.0 Application Server: FleetDM v4.84.2 (using Redis 7.2.4 state store) Host Interface Configuration: Traefik ports are bound utilizing mode: host to skip standard swarm routing constraints where possible. Network Drivers: Overlay network (traefik-net) configured as external/attachable.

Hi @Teel! I'm not extremely familiar with Traefik, but did a little research and it sounds like the most common issue is that headers may not be forwarding as expected. I'd reccomend reching out in the traefik community forum for additional assistance: https://traefik.io/community