Traefik

Traefik v3

Cloud-native reverse proxy and load balancer with automatic service discovery. Traefik connects incoming requests to backend services using dynamic configuration from providers (Kubernetes, Docker, etc.).

Quick Start (Kubernetes Helm)

helm repo add traefik https://traefik.github.io/charts
helm install traefik traefik/traefik

Install CRDs manually (if needed):

kubectl apply -f https://raw.githubusercontent.com/traefik/traefik/v3.6/docs/content/reference/dynamic-configuration/kubernetes-crd-definition-v1.yml
kubectl apply -f https://raw.githubusercontent.com/traefik/traefik/v3.6/docs/content/reference/dynamic-configuration/kubernetes-crd-rbac.yml

Core Concepts

Task Reference

Routing Configuration

• HTTP routing rules, matchers, priority → references/routing.md
• Rule syntax (Host, Path, Headers, Query) → references/routing.md

Kubernetes CRDs

• IngressRoute, Middleware, TraefikService → references/kubernetes-crd.md
• Full IngressRoute examples → references/kubernetes-crd.md

Middlewares

• All available middlewares → references/middlewares.md
• Auth, rate limiting, headers, redirects → references/middlewares.md

Load Balancing & Services

• Strategies, health checks, sticky sessions → references/services.md
• Mirroring, failover, weighted routing → references/services.md

TLS & Certificates

• ACME/Let's Encrypt, TLS options → references/tls.md
• Certificate resolvers, challenges → references/tls.md

EntryPoints

• Configuration, HTTP/HTTPS setup → references/entrypoints.md
• Redirections, proxy protocol → references/entrypoints.md

Minimal IngressRoute Example

apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: myapp
  namespace: default
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`myapp.example.com`)
      kind: Rule
      services:
        - name: myapp-svc
          port: 80
      middlewares:
        - name: myapp-headers
  tls:
    certResolver: letsencrypt

Common CLI/Static Config

# traefik.yml (static configuration)
entryPoints:
  web:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
  websecure:
    address: ":443"

providers:
  kubernetesCRD: {}
  kubernetesIngress: {}

certificateResolvers:
  letsencrypt:
    acme:
      email: admin@example.com
      storage: /data/acme.json
      httpChallenge:
        entryPoint: web

Official Documentation

• Traefik Docs
• Kubernetes CRD Reference
• Middleware Reference