traefik /traefik

The Cloud Native Application Proxy

★ 65,506⑂ 6,312👁 671⑃ 7,145● 6,951▤ 566◈ 0
GoMITCreated 2015-09-13traefik.io
65,506
stars
+7+64+362
6,312
forks
671
watchers
7,145
prs
6,951
issues
566
releases
0
discussions

README

Traefik (pronounced _traffic_) is a modern HTTP reverse proxy and load balancer that makes deploying microservices easy.
Traefik integrates with your existing infrastructure components (Docker, Swarm mode, Kubernetes, Consul, Etcd, Rancher v2, Amazon ECS, ...) and configures itself automatically and dynamically.
Pointing Traefik at your orchestrator should be the _only_ configuration step you need.

---

. Overview .
Features .
Supported backends .
Quickstart .
Web UI .
Documentation .

. Support .
Release cycle .
Contributing .
Maintainers .
Credits .

---

:warning: When migrating to a new major version of Traefik, please refer to the migration guide to ensure a smooth transition and to be aware of any breaking changes.


 Overview

Imagine that you have deployed a bunch of microservices with the help of an orchestrator (like Swarm or Kubernetes) or a service registry (like etcd or consul).
Now you want users to access these microservices, and you need a reverse proxy.

Traditional reverse-proxies require that you configure _each_ route that will connect paths and subdomains to _each_ microservice. 
In an environment where you add, remove, kill, upgrade, or scale your services _many_ times a day, the task of keeping the routes up to date becomes tedious. 

This is when Traefik can help you!

Traefik listens to your service registry/orchestrator API and instantly generates the routes so your microservices are connected to the outside world -- without further intervention from your part. 

Run Traefik and let it do the work for you! 
_(But if you'd rather configure some of your routes manually, Traefik supports that too!)_

!Architecture

 Features

- Continuously updates its configuration (No restarts!)
- Supports multiple load balancing algorithms
- Provides HTTPS to your microservices by leveraging Let's Encrypt (wildcard certificates support)
- Circuit breakers, retry
- See the magic through its clean web UI
- WebSocket, HTTP/2, gRPC ready
- Provides metrics (Rest, Prometheus, Datadog, Statsd, InfluxDB 2.X)
- Keeps access logs (JSON, CLF)
- Fast
- Exposes a Rest API
- Packaged as a single binary file (made with :heart: with go) and available as an official docker image

 Supported Backends

- Docker / Swarm mode
- Kubernetes
- ECS
- File

 Quickstart

To get your hands on Traefik, you can use the 5-Minute Quickstart in our documentation (you will need Docker).

 Web UI

You can access the simple HTML frontend of Traefik.

!Web UI Providers

 Documentation

You can find the complete documentation of Traefik v3 at https://doc.traefik.io/traefik/.

 Support

To get community support, you can:

- join the Traefik community forum: 

If you need commercial support, please contact Traefik.io by mail: .

 Download

- Grab the latest binary from the releases page and run it with the sample configuration file:

shell
./traefik --configFile=traefik.toml


- Or use the official tiny Docker image and run it with the sample configuration file:

shell
docke

Top issues

Latest release

v3.7.17 v3.7.17 2026-10-30
Important: Please read the migration guide.

CVE fixed:
- Advisory GHSA-xv5x-242w-7hf7

Bug fixes:
- [acme] Bump github.com/go-acme/lego/v5 to v5.6.0 (14166 @ldez)
- [acme] Bump github.com/go-jose/go-jose/v4 to v4.1.6 (14165 @Mheaus)
- [http3] Bump github.com/quic-go/quic-go to v0.64.1 (14132 @janpachol)
- [k8s/gatewayapi] Preserve Gateway status conditions owned by other controllers (14128 @Neffi42)
- [k8s/ingress-nginx] Avoid generated name collisions across namespaces in the ingress-nginx provider (14140 @Neffi42)
- [logs, k8s/gatewayapi] Lower user configuration error logs to debug (14159 

Snapshot: 2026-11-10T09:35:25Z · Data license Apache-2.0 · JSON