aid: traefik
name: Traefik Labs
description: >-
  Traefik Labs builds cloud-native traffic and API infrastructure - the open-source Traefik Proxy (an ingress
  controller, reverse proxy, and load balancer for Kubernetes, Docker, Nomad, ECS, Consul, and bare metal), plus the
  commercial Traefik Hub product line covering API Gateway, API Management, AI Gateway, and MCP Gateway. The data plane
  is the same Traefik binary across every tier; the Hub control plane adds GitOps-driven CRDs, a developer portal,
  multi-cluster dashboards, WAF, advanced auth, and AI safety / agent-governance capabilities.
type: Index
accessModel:
  pricing: freemium
  onboarding: unknown
  trial: true
  try_now: false
  public: false
  label: Freemium (free trial)
  confidence: medium
  source:
  - plans
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/traefik.png
tags:
  - AI Gateway
  - API Gateway
  - API Management
  - Developer Portal
  - GitOps
  - Kubernetes
  - Load Balancer
  - MCP Gateway
  - Open Source
  - Reverse Proxy
  - WAF
url: https://raw.githubusercontent.com/api-evangelist/traefik/refs/heads/main/apis.yml
created: '2026-03-18'
modified: '2026-05-19'
specificationVersion: '0.19'
apis:
- aid: traefik:traefik-proxy
  name: Traefik Proxy
  description: >-
    Traefik Proxy is the flagship open-source (MIT) cloud-native reverse proxy, ingress controller, and
    load balancer. It auto-discovers services from Kubernetes (Ingress, Gateway API, CRD), Docker, Docker
    Swarm, Nomad, Amazon ECS, Consul, file, and HTTP providers, and ships with native ACME (Let's Encrypt)
    certificate provisioning, HTTP/2, HTTP/3, gRPC, WebSockets, TCP, UDP, an extensible middleware chain,
    and a built-in dashboard.
  humanURL: https://traefik.io/traefik/
  baseURL: ''
  tags:
  - API Gateway
  - Ingress Controller
  - Kubernetes
  - Load Balancer
  - Open Source
  - Reverse Proxy
  properties:
  - type: Documentation
    url: https://doc.traefik.io/traefik/
  - type: GettingStarted
    url: https://doc.traefik.io/traefik/getting-started/quick-start/
  - type: Reference
    url: https://doc.traefik.io/traefik/reference/static-configuration/cli/
  - type: ChangeLog
    url: https://github.com/traefik/traefik/blob/master/CHANGELOG.md
  - type: GitHubRepository
    url: https://github.com/traefik/traefik
  - type: License
    url: https://github.com/traefik/traefik/blob/master/LICENSE.md
  - type: Helm Chart
    url: https://github.com/traefik/traefik-helm-chart
  - type: Docker Image
    url: https://hub.docker.com/_/traefik
  - type: Plugin Catalog
    url: https://plugins.traefik.io/
  - type: KubernetesCRD
    url: crd/traefik-ingressroute.yaml
  - type: KubernetesCRD
    url: crd/traefik-ingressroutetcp.yaml
  - type: KubernetesCRD
    url: crd/traefik-ingressrouteudp.yaml
  - type: KubernetesCRD
    url: crd/traefik-middleware.yaml
  - type: KubernetesCRD
    url: crd/traefik-middlewaretcp.yaml
  - type: KubernetesCRD
    url: crd/traefik-tlsoption.yaml
  - type: KubernetesCRD
    url: crd/traefik-tlsstore.yaml
  - type: KubernetesCRD
    url: crd/traefik-traefikservice.yaml
  - type: KubernetesCRD
    url: crd/traefik-serverstransport.yaml
  - type: KubernetesCRD
    url: crd/traefik-serverstransporttcp.yaml
  features:
  - name: Auto Service Discovery
    description: Discovers backends dynamically from Kubernetes
    Docker: null
    Swarm: null
    Nomad: null
    ECS: null
    Consul: null
    Etcd: null
    and file.: null
  - name: Let's Encrypt / ACME
    description: >-
      Automatic TLS certificate provisioning including wildcard and DNS-01 challenges across 70+ DNS providers.
  - name: Multi-Protocol
    description: HTTP/1.1
    HTTP/2: null
    HTTP/3 (QUIC): null
    TCP: null
    UDP: null
    gRPC: null
    WebSocket: null
    gRPC-Web.: null
  - name: Middleware Catalog
    description: 25+ built-in HTTP middlewares including BasicAuth
    ForwardAuth: null
    RateLimit: null
    Headers: null
    CircuitBreaker: null
    Retry: null
    Compress: null
    Buffering: null
    IPAllowList: null
    RedirectScheme: null
    ReplacePath.: null
  - name: Kubernetes-Native
    description: Custom Resource Definitions for HTTP/TCP/UDP routing - IngressRoute
    IngressRouteTCP: null
    IngressRouteUDP: null
    Middleware: null
    TraefikService: null
    TLSOption: null
    TLSStore: null
    ServersTransport.: null
  - name: Gateway API Support
    description: Implements the upstream Kubernetes Gateway API.
  - name: Dynamic Configuration
    description: Reload routing rules at runtime with no restart.
  - name: Observability
    description: Prometheus
    Datadog: null
    InfluxDB 2.x: null
    StatsD metrics: null
    OpenTelemetry tracing: null
    JSON and CLF access logs.: null
  - name: Plugin System
    description: >-
      Load community plugins as Yaegi-interpreted Go or WebAssembly without rebuilding Traefik.
  - name: Built-in Dashboard
    description: Web UI rendering the live router/service/middleware topology.
  useCases:
  - name: Kubernetes Ingress Controller
  - name: Multi-Cloud Reverse Proxy
  - name: Microservices API Gateway
  - name: Edge Load Balancer
  - name: Service Mesh Edge
  - name: Ingress NGINX Migration Target
  - name: AI Workload Ingress
  integrations:
  - name: Kubernetes
  - name: Kubernetes Gateway API
  - name: Docker
  - name: Docker Swarm
  - name: HashiCorp Nomad
  - name: HashiCorp Consul
  - name: HashiCorp Vault
  - name: Amazon ECS
  - name: Etcd
  - name: Let's Encrypt
  - name: Prometheus
  - name: Datadog
  - name: InfluxDB
  - name: StatsD
  - name: Grafana
  - name: OpenTelemetry
  - name: Jaeger
  - name: Zipkin
  - name: Elastic
  - name: Splunk
  - name: Sysdig
  - name: Instana
  - name: AWS
  - name: Microsoft Azure
  - name: Google Cloud
  - name: Oracle Cloud Infrastructure
  - name: DigitalOcean
  - name: Exoscale
  - name: Equinix Metal
  - name: Rancher
  - name: Platform9
  - name: Nutanix
- aid: traefik:traefik-ping
  name: Traefik Ping API
  description: >-
    Lightweight liveness probe at `/ping` that returns HTTP 200 with body "OK" when the Traefik process
    is alive. Usually mounted on a dedicated entry point for container-orchestrator liveness checks.
  humanURL: https://doc.traefik.io/traefik/operations/ping/
  tags:
  - Health Check
  - Liveness
  - Monitoring
  - Operations
  properties:
  - type: Documentation
    url: https://doc.traefik.io/traefik/operations/ping/
- aid: traefik:traefik-dashboard
  name: Traefik Dashboard
  description: >-
    Built-in single-page web UI rendering routers, services, middlewares, entry points, providers, version,
    and TLS configuration in real time. Shares the API handler; exposed at `/dashboard/` (trailing slash
    required).
  humanURL: https://doc.traefik.io/traefik/operations/dashboard/
  tags:
  - Dashboard
  - Management
  - Observability
  - UI
  properties:
  - type: Documentation
    url: https://doc.traefik.io/traefik/operations/dashboard/
- aid: traefik:traefik-hub-api-gateway
  name: Traefik Hub API Gateway
  description: >-
    Commercial Kubernetes-native API gateway built on Traefik Proxy. Adds a native WAF (claimed 23x faster
    than alternatives), advanced authentication (LDAP, JWT, HMAC, OAuth2, OIDC, OPA), HashiCorp Vault
    integration, distributed Let's Encrypt, multi-cluster management, and FIPS 140-2 compliance. Pricing
    is contract-based; a 30-day free trial is offered.
  humanURL: https://traefik.io/traefik-hub-api-gateway/
  tags:
  - API Gateway
  - Enterprise
  - Kubernetes
  - WAF
  properties:
  - type: Documentation
    url: https://doc.traefik.io/traefik-hub/
  - type: Pricing
    url: https://traefik.io/pricing/
  - type: Plans
    url: plans/traefik-plans-pricing.yml
- aid: traefik:traefik-hub-api-management
  name: Traefik Hub API Management
  description: >-
    Kubernetes-native API management on top of the Hub API Gateway. Surfaces a declarative CRD set - API,
    APIVersion, APIBundle, APIPlan, APIPortal, APICatalogItem, ManagedSubscription - plus a multi-cluster
    developer portal, OpenAPI rendering, GitOps configuration linter, and built-in identity provider integration.
  humanURL: https://traefik.io/traefik-hub/
  tags:
  - API Management
  - Developer Portal
  - GitOps
  - Kubernetes
  properties:
  - type: Documentation
    url: https://doc.traefik.io/traefik-hub/
  - type: Reference
    url: https://doc.traefik.io/traefik-hub/api-management/api-plans
  - type: Pricing
    url: https://traefik.io/pricing/
  - type: KubernetesCRD
    url: crd/hub-api.yaml
  - type: KubernetesCRD
    url: crd/hub-apiversion.yaml
  - type: KubernetesCRD
    url: crd/hub-apibundle.yaml
  - type: KubernetesCRD
    url: crd/hub-apiplan.yaml
  - type: KubernetesCRD
    url: crd/hub-apiportal.yaml
  - type: KubernetesCRD
    url: crd/hub-apicatalogitem.yaml
  - type: KubernetesCRD
    url: crd/hub-managedsubscription.yaml
- aid: traefik:traefik-ai-gateway
  name: Traefik AI Gateway
  description: >-
    Self-hosted Kubernetes-native gateway for LLM traffic. OpenAI-compatible unified API in front of OpenAI,
    Anthropic, Azure OpenAI, AWS Bedrock, Cohere, Gemini, Mistral, Ollama, and self-hosted models. Built-in
    jailbreak detection (NVIDIA Safety NIMs), PII redaction (Presidio, 35+ recognizers), 22+ content-filter
    categories, semantic caching (vendor-claimed 40-70% cost reduction), identity-based routing, and OpenTelemetry
    token/cost metrics.
  humanURL: https://traefik.io/solutions/ai-gateway/
  tags:
  - AI Gateway
  - LLM
  - Guardrails
  - Observability
  - Enterprise
  properties:
  - type: Solution Page
    url: https://traefik.io/solutions/ai-gateway/
  - type: KubernetesCRD
    url: crd/hub-aiservice.yaml
- aid: traefik:traefik-mcp-gateway
  name: Traefik MCP Gateway
  description: >-
    Gateway add-on that governs how AI agents access Model Context Protocol (MCP) servers. Provides identity-aware
    routing, capability scoping, and audit logging for agent-to-MCP traffic.
  humanURL: https://traefik.io/solutions/mcp-gateway/
  tags:
  - MCP
  - Agent Governance
  - Enterprise
  properties:
  - type: Solution Page
    url: https://traefik.io/solutions/mcp-gateway/
- aid: traefik:traefik-plugin-catalog
  name: Traefik Plugin Catalog
  description: >-
    Public registry of community-built Traefik middlewares. Plugins are authored in Go (loaded at runtime
    through Yaegi without recompiling Traefik) or in WebAssembly. Surfaces categories such as auth, observability,
    request transformation, security, and providers.
  humanURL: https://plugins.traefik.io/
  tags:
  - Plugins
  - Extensibility
  - Community
  properties:
  - type: Catalog Site
    url: https://plugins.traefik.io/
  - type: GitHub Topic
    url: https://github.com/topics/traefik-plugin
- aid: traefik:yaegi
  name: Yaegi (Go Interpreter)
  description: >-
    Embeddable Go interpreter maintained by Traefik Labs. Powers the Traefik plugin system - plugins are
    uploaded as Go source and executed at runtime without recompiling Traefik. Also usable standalone
    as an embeddable scripting layer.
  humanURL: https://github.com/traefik/yaegi
  tags:
  - Go
  - Interpreter
  - Plugin Runtime
  - Open Source
  properties:
  - type: GitHubRepository
    url: https://github.com/traefik/yaegi
  - type: License
    url: https://github.com/traefik/yaegi/blob/master/LICENSE
- aid: traefik:traefik-mesh
  name: Traefik Mesh
  description: >-
    Lightweight service mesh built on Traefik Proxy. Offers traffic management and observability for service-to-service
    communication inside a Kubernetes cluster.
  humanURL: https://traefik.io/traefik-mesh/
  tags:
  - Service Mesh
  - Kubernetes
  - Open Source
  properties:
  - type: GitHubRepository
    url: https://github.com/traefik/mesh
- aid: traefik:traefik-entrypoints-api
  name: Traefik Labs Entrypoints API
  description: Endpoints for listing configured entry points.
  humanURL: https://traefik.io/traefik/
  baseURL: http://localhost:8080/api
  tags:
  - Entrypoints
  properties:
  - type: OpenAPI
    url: openapi/traefik-entrypoints-api-openapi.yml
  - type: Documentation
    url: https://doc.traefik.io/traefik/reference/install-configuration/api-dashboard/
  - type: Spectral
    url: rules/traefik-proxy-rules.yml
- aid: traefik:traefik-health-api
  name: Traefik Labs Health API
  description: Health check and ping endpoints for liveness probes.
  humanURL: https://traefik.io/traefik/
  baseURL: http://localhost:8080/api
  tags:
  - Health
  properties:
  - type: OpenAPI
    url: openapi/traefik-health-api-openapi.yml
  - type: Documentation
    url: https://doc.traefik.io/traefik/reference/install-configuration/api-dashboard/
  - type: Spectral
    url: rules/traefik-proxy-rules.yml
- aid: traefik:traefik-http-api
  name: Traefik Labs HTTP API
  description: Endpoints for inspecting HTTP routers, services, and middlewares.
  humanURL: https://traefik.io/traefik/
  baseURL: http://localhost:8080/api
  tags:
  - HTTP
  properties:
  - type: OpenAPI
    url: openapi/traefik-http-api-openapi.yml
  - type: Documentation
    url: https://doc.traefik.io/traefik/reference/install-configuration/api-dashboard/
  - type: Spectral
    url: rules/traefik-proxy-rules.yml
- aid: traefik:traefik-overview-api
  name: Traefik Labs Overview API
  description: Overview and version information for the running Traefik instance.
  humanURL: https://traefik.io/traefik/
  baseURL: http://localhost:8080/api
  tags:
  - Overview
  properties:
  - type: OpenAPI
    url: openapi/traefik-overview-api-openapi.yml
  - type: Documentation
    url: https://doc.traefik.io/traefik/reference/install-configuration/api-dashboard/
  - type: Spectral
    url: rules/traefik-proxy-rules.yml
- aid: traefik:traefik-tcp-api
  name: Traefik Labs TCP API
  description: Endpoints for inspecting TCP routers, services, and middlewares.
  humanURL: https://traefik.io/traefik/
  baseURL: http://localhost:8080/api
  tags:
  - TCP
  properties:
  - type: OpenAPI
    url: openapi/traefik-tcp-api-openapi.yml
  - type: Documentation
    url: https://doc.traefik.io/traefik/reference/install-configuration/api-dashboard/
  - type: Spectral
    url: rules/traefik-proxy-rules.yml
- aid: traefik:traefik-udp-api
  name: Traefik Labs UDP API
  description: Endpoints for inspecting UDP routers and services.
  humanURL: https://traefik.io/traefik/
  baseURL: http://localhost:8080/api
  tags:
  - UDP
  properties:
  - type: OpenAPI
    url: openapi/traefik-udp-api-openapi.yml
  - type: Documentation
    url: https://doc.traefik.io/traefik/reference/install-configuration/api-dashboard/
  - type: Spectral
    url: rules/traefik-proxy-rules.yml
common:
  - type: Deprecation
    url: https://doc.traefik.io/traefik/deprecation/releases/
  - type: PrivacyPolicy
    url: https://traefik.io/legal/privacy-and-cookie-policy
  - type: AgenticAccess
    url: agentic-access/traefik-agentic-access.yml
  - type: DomainSecurity
    url: security/traefik-domain-security.yml
  - type: LinkedIn
    url: https://www.linkedin.com/company/traefik
  - type: Website
    url: https://traefik.io/
  - type: Documentation
    url: https://doc.traefik.io/traefik/
  - type: GettingStarted
    url: https://doc.traefik.io/traefik/getting-started/quick-start/
  - type: Pricing
    url: https://traefik.io/pricing/
  - type: Blog
    url: https://traefik.io/blog/
  - type: ChangeLog
    url: https://github.com/traefik/traefik/blob/master/CHANGELOG.md
  - type: GitHubOrganization
    url: https://github.com/traefik
  - type: GitHubRepository
    url: https://github.com/traefik/traefik
  - type: Issue Tracker
    url: https://github.com/traefik/traefik/issues
  - type: Community
    url: https://community.traefik.io/
  - type: StackOverflow
    url: https://stackoverflow.com/questions/tagged/traefik
  - type: Plugin Catalog
    url: https://plugins.traefik.io/
  - type: Helm Chart
    url: https://github.com/traefik/traefik-helm-chart
  - type: Integrations
    url: https://traefik.io/partners
  - type: JSONLD
    url: json-ld/traefik-context.jsonld
  - type: JSONSchema
    url: json-schema/traefik-router-schema.json
  - type: JSONSchema
    url: json-schema/traefik-service-schema.json
  - type: JSONSchema
    url: json-schema/traefik-middleware-schema.json
  - type: JSONSchema
    url: json-schema/traefik-entrypoint-schema.json
  - type: JSONStructure
    url: json-structure/traefik-router-structure.json
  - type: JSONStructure
    url: json-structure/traefik-middleware-structure.json
  - type: Vocabulary
    url: vocabulary/traefik-vocabulary.yml
  - type: Spectral
    url: rules/traefik-proxy-rules.yml
  - type: Plans
    url: plans/traefik-plans-pricing.yml
  - type: RateLimits
    url: rate-limits/traefik-rate-limits.yml
  - type: FinOps
    url: finops/traefik-finops.yml
  - type: LlmsText
    url: https://traefik.io/llms.txt
solutions:
  - name: API Gateway
    description: Modern declarative API gateway with first-class Kubernetes integration.
  - name: AI Gateway
    description: Govern LLM traffic with safety guardrails and semantic caching.
  - name: MCP Gateway
    description: Govern AI agent access to Model Context Protocol servers.
  - name: Web Application Firewall
    description: Native WAF integrated into the Hub API Gateway data plane.
  - name: API Mocking
    description: Create and publish mock APIs with production-grade UX.
  - name: Ingress NGINX Migration
    description: Replace deprecated ingress-nginx with Traefik Proxy 3.7+.
  - name: GitOps API Management
    description: Declarative
    CRD-driven API management workflows.: null
  - name: Air-Gapped API Management
    description: Run the full Hub stack in disconnected environments.
  - name: Multi-Cluster API Inventory
    description: Single pane of glass across federated Kubernetes clusters.
integrations:
  - name: Kubernetes
  - name: Kubernetes Gateway API
  - name: Knative Serving
  - name: Docker
  - name: Docker Swarm
  - name: HashiCorp Nomad
  - name: HashiCorp Consul
  - name: HashiCorp Vault
  - name: Amazon ECS
  - name: Etcd
  - name: Rancher
  - name: D2iQ
  - name: Platform9
  - name: Nutanix
  - name: AWS
  - name: Microsoft Azure
  - name: Google Cloud
  - name: Oracle OCI
  - name: DigitalOcean
  - name: Exoscale
  - name: Equinix Metal
  - name: Let's Encrypt
  - name: Prometheus
  - name: Datadog
  - name: Grafana
  - name: InfluxDB
  - name: StatsD
  - name: OpenTelemetry
  - name: Jaeger
  - name: Zipkin
  - name: Elastic
  - name: Splunk
  - name: Sysdig
  - name: Instana
  - name: OpenAI
  - name: Anthropic
  - name: Azure OpenAI
  - name: AWS Bedrock
  - name: Cohere
  - name: Google Gemini
  - name: Mistral
  - name: Ollama
  - name: NVIDIA Safety NIM
  - name: Microsoft Presidio
  - name: Treblle
  - name: Palo Alto Networks
  - name: Ahead
  - name: codecentric
  - name: Data Essential
  - name: Factor Group
  - name: KPN
  - name: linkbynet
  - name: neoria
  - name: nuaware
  - name: smartwave
  - name: SWNetwork
  - name: treeptik
  - name: zenika
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com