Response Time seems high when Traefik is used - docker

Question

I have an application who run inside a docker, just behind a traefik proxy. I made some benchmarks. First form the server, I got a response time of 12ms if I use the IP of the docker. But when I used the ndd my response time escalated to 90ms!
Why I have so much difference ?
I made the same test from my machine and I got 198ms in response time !!!.
Test from the server, with the docker IP :
> time curl -w "#curl-format.txt" -o /dev/null -s "172.23XXXXX"
time namelookup: 0.0000425
time connect: 0.0000005
time_appconnect: 0.0000005
time pretransfer: 0.0000005
time redirect: 0.0000005
time starttransfer: 0.0000005
time total: 0.0002795
real 0m0.0125
user 0m0.0085
sys 0m0.004s
Test from the server, with the NDD :
>time curl -w "#cur1-format.txt" -0 /dev/null-s "https://api.XXXXXX"
time namelookup: 0.0012755
time connect: 0.0014405
time_appconnect: 0.0494675
time pretransfer: 0.0497685
time redirect: 0.0000005
time starttransfer: 0.0754535
time total: 0.0756765
real 0m0.0905
user 0m0.0145
sys 0m0.014s
Test from my machine, with the NDD :
❯ time curl -w "#curl-format.txt" -o /dev/null -s "https://api.XXXXXXX"
time_namelookup: 0.010114s
time_connect: 0.040455s
time_appconnect: 0.125563s
time_pretransfer: 0.125802s
time_redirect: 0.000000s
time_starttransfer: 0.183123s
----------
time_total: 0.183554s
________________________________________________________
Executed in 198.84 millis fish external
usr time 26.63 millis 57.00 micros 26.57 millis
sys time 13.68 millis 834.00 micros 12.85 millis
My traefik config :
services:
traefik:
image: "traefik:v2.9"
container_name: "traefik"
restart: "always"
networks:
- "traefik"
command:
- "--api.dashboard=true"
- "--api.insecure=true"
- "--entryPoints.web.address=:80"
- "--entryPoints.websecure.address=:443"
- "--providers.docker=true"
- "--providers.docker.endpoint=unix:///var/run/docker.sock"
- "--certificatesresolvers.myresolver.acme.tlschallenge=true"
- "--certificatesresolvers.myresolver.acme.email=XXXXXXXXX"
- "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
ports:
- "80:80"
- "443:443"
volumes:
- "./letsencrypt:/letsencrypt"
- "/var/run/docker.sock:/var/run/docker.sock"
- "/root/shared:/root/shared"
labels:
- "traefik.http.services.dashboard.loadbalancer.server.port=80"
- "traefik.http.middlewares.httpsonly.redirectscheme.scheme=https"
- "traefik.http.middlewares.httpsonly.redirectscheme.permanent=true"
- "traefik.http.routers.httpsonly.rule=HostRegexp(`{any:.*}`)"
- "traefik.http.routers.httpsonly.middlewares=httpsonly"
- "traefik.http.routers.dashboard.rule=Host(`tra.XXXXXXX`)"
- "traefik.http.routers.dashboard.entrypoints=websecure"
- "traefik.http.routers.dashboard.tls.certresolver=myresolver"
- "traefik.http.routers.dashboard.service=dashboard#internal"
- "traefik.http.routers.api.rule=Host(`tra.XXXXXXX`) && PathPrefix(`/api`)"
- "traefik.http.routers.api.service=api#internal"
- "traefik.http.routers.api.entrypoints=websecure"
- "traefik.http.routers.api.tls.certresolver=myresolver"
- "traefik.http.routers.dashboard.middlewares=traefik-auth"
- "traefik.http.routers.api.middlewares=traefik-auth"
- "traefik.http.middlewares.traefik-auth.basicauth.usersfile=/root/shared/users"
- "traefik.http.middlewares.traefik-auth.basicauth.removeheader=true"
- "com.centurylinklabs.watchtower.enable=false"
The traefik config of my application :
services:
geodude:
image: "XXXXXXXX/geodude:main"
container_name: "geodude"
restart: "always"
networks:
- "traefik"
environment:
[...]
volumes:
- "/root/geodude/data:/data"
labels:
- "traefik.enable=true"
- "traefik.http.routers.geodude.rule=Host(`api.XXXXXX`)"
- "traefik.http.routers.geodude.entrypoints=websecure"
- "traefik.http.routers.geodude.tls.certresolver=myresolver"
networks:
traefik:
external: true