- Home
- Kubernetes Ingress Controllers
- Traefik Proxy
Traefik Proxy
Lyon, France and San Francisco, USA
What it is
Traefik Proxy is a free, open-source reverse proxy and ingress controller for deploying services and APIs. It discovers services and adjusts routing dynamically. Protocol support includes HTTP, HTTP/2, HTTP/3, TCP, UDP, WebSockets, and gRPC, with Layer 4 and Layer 7 routing, mirroring, blue-green and canary deployments, stickiness, and active health checks. Security features include automatic HTTPS, Let’s Encrypt support, custom certificates, authentication, and Web Application Firewall support. Integrations include Kubernetes, Docker, Docker Swarm, Red Hat OpenShift, Rancher, Amazon ECS, Consul, and key-value stores. Traefik can run in environments such as virtual machines and bare metal, and supports WebAssembly plugins through a public catalog. Observability options include a built-in dashboard, OpenTelemetry, distributed tracing, and metrics integrations for Datadog, Grafana, InfluxDB, Prometheus, and StatsD. The self-hosted software is listed for Linux, macOS, and Windows. Traefik Labs offers commercial support with expert assistance available 24/7/365.
For and against
For
- Free and open source.
- Supports HTTP, TCP, UDP, WebSockets, and gRPC.
- Includes automatic HTTPS and custom certificate support.
- Offers Layer 4 and Layer 7 routing.
- Has a public WebAssembly plugin catalog.
Against
- Deployment model is self-hosted.
- Commercial support is offered separately.
- The listed platform set is Linux, macOS, and Windows.
The verdict
Traefik Proxy covers routing, traffic management, security, and observability for self-hosted service deployments. Teams seeking commercial assistance can also consider the support Traefik Labs offers.
Who it suits
It suits teams deploying services or APIs who need a self-hosted proxy with dynamic routing. Its listed integrations and deployment environments are relevant to teams using container platforms, Kubernetes, virtual machines, or bare metal.
Plans and prices
Traefik Proxy Open Source
Reverse proxy, ingress controller, load balancer, service discovery; commercial support and enterprise features excluded
Read 15 Oct 2026 · traefik.io
Traefik Proxy
Open source · Ingress controller · Reverse proxy · Load balancer
Read 1 Oct 2026 · traefik.io
Traefik Hub API Gateway
Adds WAF, LDAP/JWT/OAuth/OIDC, Vault, distributed rate limiting, caching, multi-cluster management and FIPS options
Read 15 Oct 2026 · traefik.io
Traefik Hub API Management
Adds API discovery, versioning, subscriptions, granular access control, developer portal, monitoring and mocking
Read 15 Oct 2026 · traefik.io
On the record
- API security warning
- Official documentation warns that enabling the API or dashboard in production can expose sensitive configuration and recommends authentication plus network restriction.doc.traefik.io · read 15 Oct 2026
- Canary deployments
- Canary deployment capability is listed for Traefik Proxy.doc.traefik.io · read 15 Oct 2026
- Company
- Traefik Labs was founded in 2016.traefik.io · read 1 Oct 2026
- Company facts
- LinkedIn lists Traefik Labs as privately held, founded in 2016, headquartered in San Francisco with 11–50 employees and an additional Lyon location.linkedin.com · read 15 Oct 2026
- Core operation
- It uses service discovery to dynamically configure routing.traefik.io · read 1 Oct 2026
- Dashboard
- The built-in dashboard displays active routes and obtains its data from Traefik's API.doc.traefik.io · read 15 Oct 2026
- Deployment environments
- Traefik Proxy supports Docker Swarm, HashiCorp Nomad, Azure Service Fabric, Kubernetes distributions, virtual machines, and bare metal.traefik.io · read 1 Oct 2026
- Docker support
- The Docker quick start requires Docker and optionally Docker Compose, and uses the Docker provider to discover containers.doc.traefik.io · read 15 Oct 2026
- Documentation depth
- Documentation includes personas, core concepts, getting-started guides, provider configuration, API/dashboard reference and product comparison material.doc.traefik.io · read 15 Oct 2026
- Extensibility
- Traefik supports WebAssembly plugins and provides a public plugin catalog.traefik.io · read 1 Oct 2026
- Integrations
- The project identifies Docker, Docker Swarm, Kubernetes, Consul, Etcd, Rancher and Amazon ECS among its supported infrastructure integrations.github.com · read 15 Oct 2026
- Investors
- Traefik Labs' About page names Balderton, Elaia, 360 Capital Partners, Kima Ventures and OSS Capital among its investors.traefik.io · read 15 Oct 2026
- Kubernetes support
- The Kubernetes quick start supports Helm installation, IngressRoute CRDs, standard Ingress resources and Gateway API routing.doc.traefik.io · read 15 Oct 2026
- Latest release
- GitHub lists Traefik v3.7.15 as released on October 15, 2026, with CVE fixes and a fix rejecting CONNECT requests regardless of HTTP version.github.com · read 15 Oct 2026
- Licence
- The Traefik source repository is distributed under the MIT License.github.com · read 15 Oct 2026
- Limit: documentation navigation
- A G2 reviewer reports that finding environment-specific examples in the documentation can be challenging.g2.com · read 15 Oct 2026
- Limit: learning curve
- G2 and Capterra reviewers say the flexibility creates a learning curve and makes initial configuration difficult.g2.com · read 15 Oct 2026
- Limit: premium features
- A Capterra reviewer says caching was available only in the paid Pro version at the time of review.capterra.com · read 15 Oct 2026
