Tools · SPBoucher
Menu

Traefik Proxy

by Traefik Labs · Application · also known as Traefik, Træfik

Cloud-native reverse proxy and ingress controller that discovers routes from Docker, Kubernetes and other providers and automates TLS through ACME

MIT licenseOpen sourceFreeEnterpriseSelf-hostedSelf-hostable
Visit official site Compare

Link verified Nov 2, 2026

Overview

Traefik Proxy is an open-source reverse proxy and load balancer from Traefik Labs, released under the MIT license. Instead of a static route table, it watches providers, such as Docker labels, Kubernetes Ingress and Gateway API objects, Consul or a file, and builds its routing configuration dynamically as services appear and disappear. Certificates are obtained through ACME, with HTTP, TLS-ALPN and DNS challenges, and middlewares add authentication, rate limiting, redirects and header manipulation per route.

It is most at home in containerized environments: a Compose stack can publish a new service by adding a few labels, and Kubernetes clusters use it as an ingress controller supporting the Gateway API. A built-in dashboard shows routers, services and middlewares. Traefik Labs sells Traefik Hub, an API gateway and management layer built on the proxy, which is where enterprise features and support live.

For servers without an orchestrator, the label-driven model offers less than Caddy's simple text file, and static file serving is not a focus. Configuration is split between static (entrypoints, providers) and dynamic (routes) parts, which newcomers find confusing.

Capabilities

  • Dynamic route discovery from Docker, Kubernetes, Consul, file and other providers
  • Automatic ACME certificates with HTTP, TLS-ALPN and DNS challenges
  • Middlewares for auth, rate limiting, redirects, headers and circuit breaking
  • Kubernetes Ingress and Gateway API support
  • TCP and UDP routing in addition to HTTP
  • Web dashboard and metrics export (Prometheus, OpenTelemetry)

Typical workflows

  1. Expose Compose services by adding labels
  2. Act as ingress controller for a Kubernetes cluster
  3. Terminate TLS and apply per-route middleware

Strengths

  • Configuration follows containers automatically
  • MIT license with a sizable community
  • First-class Kubernetes Gateway API support

Limitations

  • Static versus dynamic configuration split is a learning hurdle
  • Less suited to plain file serving or non-container hosts
  • Enterprise features are in the commercial Traefik Hub

Prerequisites

  • A provider to watch (Docker socket, Kubernetes API or a file)

Who it is for

  • Teams running Docker Compose or Kubernetes
  • Platform engineers building an ingress layer

Alternatives & comparison

Caddy also automates certificates but is configured by hand and excels at simple hosts; NGINX offers deep tuning without discovery or ACME. Traefik is the choice when routes should follow container labels or Kubernetes objects without manual edits.

  • Caddy

    Go web server and reverse proxy that obtains and renews TLS certificates automatically and is configured with a short Caddyfile or a JSON API

    Open sourceOpen source
  • Kubernetes

    Open-source system for scheduling, scaling and operating containerized workloads across a cluster of machines

    Open sourceOpen source
  • NGINX

    Event-driven HTTP server, reverse proxy, load balancer and mail proxy, distributed as open source under the 2-clause BSD license with a commercial Plus edition

    MixedOpen source
Compare Traefik Proxy with its alternatives →

Sources & verification

Primary sources consulted for this record. Claims are tied to the fields each source supports; the automated link checker re-verifies every URL on a schedule.

  • License
    Traefik LICENSE (MIT)

    https://github.com/traefik/traefik/blob/master/LICENSE.md

    Supports: license_spdx

    checked Nov 1, 2026
  • Official documentation
    Traefik Proxy Documentation

    https://doc.traefik.io/traefik

    Supports: capabilities, data_formats

    checked Nov 1, 2026
  • Official site
    Traefik Proxy

    https://traefik.io/traefik

    Supports: name, summary, vendor

    checked Nov 1, 2026
  • Pricing page
    Traefik Labs pricing

    https://traefik.io/pricing

    Supports: pricing_model

    checked Nov 1, 2026
Confidence
High
Reviewed
Nov 1, 2026
Links
Verified · Nov 2, 2026

Spotted an error?

Broken link, outdated license, wrong category, or a tool that no longer exists? Tell us; reports are reviewed by the editor.

Let's Encrypt

Internet Security Research Group (ISRG) · DNS & domains

In-depth entry

Nonprofit certificate authority that issues free, automatically renewable TLS certificates through the ACME protocol

MPL-2.0FreeNov 2, 2026