Is there some sort of whitelist that only allows traefik to directly communicate with that service?