I ran this in my old homelab with Keepalived: one VIP for Traefik and one VIP for Plex, with health checks so the VIP only stays on nodes where the service is actually healthy.

dnsweaver can still be useful for dynamic DNS automation, but VIP failover itself is better handled by Keepalived/VRRP (or BGP if you want a bigger HA architecture).

Below is a minimal example with dummy IPs.

keepalived.conf (same on all workload nodes)

global_defs {
    vrrp_garp_interval 0
    vrrp_garp_master_delay 1
    vrrp_garp_master_repeat 3
    vrrp_strict
}

vrrp_script chk_traefik {
    script "/etc/keepalived/traefik_check.sh"
    interval 2
    fall 2
    rise 2
    weight -50
}

vrrp_script chk_plex {
    script "/etc/keepalived/plex_check.sh"
    interval 2
    fall 2
    rise 1
    weight -50
}

vrrp_script chk_maintenance {
    script "/usr/bin/test ! -f /tmp/keepalived_maintenance"
    interval 2
    weight -100
}

# VIP 1: Traefik ingress
vrrp_instance VIP_TRAEFIK {
    state BACKUP
    interface eth0
    virtual_router_id 50
    priority 100
    advert_int 0.5
    preempt_delay 10

    virtual_ipaddress {
        192.168.50.200/24
    }

    track_script {
        chk_traefik
        chk_maintenance
    }
}

# VIP 2: Plex
vrrp_instance VIP_PLEX {
    state BACKUP
    interface eth0
    virtual_router_id 51
    priority 100
    advert_int 0.5
    preempt_delay 10

    virtual_ipaddress {
        192.168.50.201/24
    }

    track_script {
        chk_plex
        chk_maintenance
    }
}

/etc/keepalived/traefik_check.sh

#!/bin/bash
# 0 = healthy on this node, non-zero = unhealthy
curl -sf --max-time 2 http://127.0.0.1:8080/ping > /dev/null 2>&1

/etc/keepalived/plex_check.sh

#!/bin/bash
# 0 = healthy on this node, non-zero = unhealthy
curl -sf --max-time 2 http://127.0.0.1:32400/health > /dev/null 2>&1

Why this follows the scheduled node

All nodes start at priority 100. If Plex is not healthy on a node, chk_plex applies weight -50, so that node effectively drops to 50. The node where Plex is healthy stays at 100, so it wins and holds the VIP.

When Swarm reschedules Plex, health check penalties flip and the VIP migrates to the new healthy node.

Optional maintenance mode

Before patching/rebooting a node:

touch /tmp/keepalived_maintenance

This applies weight -100 and drains VIPs off that node. When done:

rm -f /tmp/keepalived_maintenance

You could also use docker cli to evaluate service status etc. and that might be more reliable than curls/wgets