---

name: traefik description: Traefik v3 reverse proxy and load balancer for Kubernetes and Docker. Use when configuring Traefik entrypoints, HTTP/TCP/UDP routing, IngressRoute CRDs, middlewares (auth, rate limiting, headers, redirects), load balancing, TLS/ACME certificates, or Kubernetes Ingress annotations.

Traefik v3

Cloud-native reverse proxy and load balancer with automatic service discovery. Traefik connects incoming requests to backend services using dynamic configuration from providers (Kubernetes, Docker, etc.).

Quick Start (Kubernetes Helm)

Copyhelm repo add traefik https://traefik.github.io/charts
helm install traefik traefik/traefik

Install CRDs manually (if needed):

Copykubectl apply -f https://raw.githubusercontent.com/traefik/traefik/v3.6/docs/content/reference/dynamic-configuration/kubernetes-crd-definition-v1.yml
kubectl apply -f https://raw.githubusercontent.com/traefik/traefik/v3.6/docs/content/reference/dynamic-configuration/kubernetes-crd-rbac.yml

Core Concepts

Task Reference

Routing Configuration

• HTTP routing rules, matchers, priority → references/routing.md
• Rule syntax (Host, Path, Headers, Query) → references/routing.md

Kubernetes CRDs

• IngressRoute, Middleware, TraefikService → references/kubernetes-crd.md
• Full IngressRoute examples → references/kubernetes-crd.md

Middlewares

• All available middlewares → references/middlewares.md
• Auth, rate limiting, headers, redirects → references/middlewares.md

Load Balancing & Services

• Strategies, health checks, sticky sessions → references/services.md
• Mirroring, failover, weighted routing → references/services.md

TLS & Certificates

• ACME/Let's Encrypt, TLS options → references/tls.md
• Certificate resolvers, challenges → references/tls.md

EntryPoints

• Configuration, HTTP/HTTPS setup → references/entrypoints.md
• Redirections, proxy protocol → references/entrypoints.md

Minimal IngressRoute Example

CopyapiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: myapp
  namespace: default
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`myapp.example.com`)
      kind: Rule
      services:
        - name: myapp-svc
          port: 80
      middlewares:
        - name: myapp-headers
  tls:
    certResolver: letsencrypt

Common CLI/Static Config

Copy# traefik.yml (static configuration)
entryPoints:
  web:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
  websecure:
    address: ":443"

providers:
  kubernetesCRD: {}
  kubernetesIngress: {}

certificateResolvers:
  letsencrypt:
    acme:
      email: admin@example.com
      storage: /data/acme.json
      httpChallenge:
        entryPoint: web

Official Documentation

• Traefik Docs
• Kubernetes CRD Reference
• Middleware Reference