启用firewalld时K8s Traefik Ingress返回Bad gateway问题求助

各位好，我最近配置K8s集群时碰到了一个棘手的问题，折腾半天没找到头绪，来请大家帮忙排查下：

我在Vagrant创建的Fedora Cloud 40虚拟机上部署了单节点kubeadm Kubernetes集群，为了安全启用了firewalld，当前的防火墙配置如下：

kubernetes
  sources: 10.0.0.0/8 172.16.0.0/12 192.168.100.0/24
public (default)
  interfaces: eth1 eth0
---
public (default, active)
  target: default
  ingress-priority: 0
  egress-priority: 0
  icmp-block-inversion: no
  interfaces: eth0 eth1
  sources: 
  services: dhcpv6-client mdns ssh
  ports: 
  protocols: 
  forward: yes
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules:
---
kubernetes (active)
  target: default
  ingress-priority: 0
  egress-priority: 0
  icmp-block-inversion: no
  interfaces: 
  sources: 10.0.0.0/8 172.16.0.0/12 192.168.100.0/24
  services: dhcpv6-client mdns ssh
  ports: 179/tcp 5473/tcp 10250/tcp 6443/tcp 2379-2380/tcp 10251-10252/tcp
  protocols:
  forward: no
  masquerade: yes
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:

目前集群里已经部署了Metallb（提供负载均衡能力）和Tigera Calico作为CNI插件，但现在通过Traefik Ingress访问后端服务时，一直返回Bad Gateway错误。我怀疑是firewalld的规则限制了流量，但反复检查配置也没发现遗漏的端口或规则，有没有大佬能帮我分析下可能的原因，或者告诉我还需要补充哪些必要的防火墙规则？

备注：内容来源于stack exchange，提问作者Manuel L.