65,506
stars
+7+64+362
6,312
forks
671
watchers
7,145
prs
6,951
issues
566
releases
0
discussions
README
Traefik (pronounced _traffic_) is a modern HTTP reverse proxy and load balancer that makes deploying microservices easy. Traefik integrates with your existing infrastructure components (Docker, Swarm mode, Kubernetes, Consul, Etcd, Rancher v2, Amazon ECS, ...) and configures itself automatically and dynamically. Pointing Traefik at your orchestrator should be the _only_ configuration step you need. --- . Overview . Features . Supported backends . Quickstart . Web UI . Documentation . . Support . Release cycle . Contributing . Maintainers . Credits . --- :warning: When migrating to a new major version of Traefik, please refer to the migration guide to ensure a smooth transition and to be aware of any breaking changes. Overview Imagine that you have deployed a bunch of microservices with the help of an orchestrator (like Swarm or Kubernetes) or a service registry (like etcd or consul). Now you want users to access these microservices, and you need a reverse proxy. Traditional reverse-proxies require that you configure _each_ route that will connect paths and subdomains to _each_ microservice. In an environment where you add, remove, kill, upgrade, or scale your services _many_ times a day, the task of keeping the routes up to date becomes tedious. This is when Traefik can help you! Traefik listens to your service registry/orchestrator API and instantly generates the routes so your microservices are connected to the outside world -- without further intervention from your part. Run Traefik and let it do the work for you! _(But if you'd rather configure some of your routes manually, Traefik supports that too!)_ !Architecture Features - Continuously updates its configuration (No restarts!) - Supports multiple load balancing algorithms - Provides HTTPS to your microservices by leveraging Let's Encrypt (wildcard certificates support) - Circuit breakers, retry - See the magic through its clean web UI - WebSocket, HTTP/2, gRPC ready - Provides metrics (Rest, Prometheus, Datadog, Statsd, InfluxDB 2.X) - Keeps access logs (JSON, CLF) - Fast - Exposes a Rest API - Packaged as a single binary file (made with :heart: with go) and available as an official docker image Supported Backends - Docker / Swarm mode - Kubernetes - ECS - File Quickstart To get your hands on Traefik, you can use the 5-Minute Quickstart in our documentation (you will need Docker). Web UI You can access the simple HTML frontend of Traefik. !Web UI Providers Documentation You can find the complete documentation of Traefik v3 at https://doc.traefik.io/traefik/. Support To get community support, you can: - join the Traefik community forum: If you need commercial support, please contact Traefik.io by mail: . Download - Grab the latest binary from the releases page and run it with the sample configuration file: shell ./traefik --configFile=traefik.toml - Or use the official tiny Docker image and run it with the sample configuration file: shell docke
Top issues
#5732Docker swarm configuration ignored with "port is missing"71 comments · 2019-10-27#5495Manually reload tls certificates64 comments · 2019-09-25#766Docker swarm mode, Traefik on manager node only ?60 comments · 2016-10-23#5507TLS parameters from more dynamic providers and a default path for a no-config setup53 comments · 2019-09-26#878Feature Request - Caching45 comments · 2016-11-22#4655Ensure KubernetesCRD provider works with external-dns41 comments · 2019-03-22#12631Implement more NGINX Ingress Annotations37 comments · 2026-02-06#6117Service status successful even if one or all servers/services failed37 comments · 2019-12-31
Latest release
v3.7.17 v3.7.17 2026-10-30Important: Please read the migration guide. CVE fixed: - Advisory GHSA-xv5x-242w-7hf7 Bug fixes: - [acme] Bump github.com/go-acme/lego/v5 to v5.6.0 (14166 @ldez) - [acme] Bump github.com/go-jose/go-jose/v4 to v4.1.6 (14165 @Mheaus) - [http3] Bump github.com/quic-go/quic-go to v0.64.1 (14132 @janpachol) - [k8s/gatewayapi] Preserve Gateway status conditions owned by other controllers (14128 @Neffi42) - [k8s/ingress-nginx] Avoid generated name collisions across namespaces in the ingress-nginx provider (14140 @Neffi42) - [logs, k8s/gatewayapi] Lower user configuration error logs to debug (14159