Traefik Proxy | Support by cloudimg

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Overview Traefik Proxy is a modern, cloud-native reverse proxy and load balancer that makes publishing services simple. It discovers your services through file, Docker, Kubernetes and other providers, routes traffic with expressive rule matchers, terminates TLS and obtains certificates automatically from Let's Encrypt. This image delivers Traefik Proxy fully installed and configured as a system service, with a secured dashboard, the file provider watching a dynamic config directory and an ACME certificate resolver ready, so a production-grade edge router is running within minutes of launch.

Application Stack The Traefik static binary installed under /usr/local/bin and run by a dedicated unprivileged service account that is granted only the capability to bind privileged ports. A systemd service that starts Traefik on boot and restarts it on failure. The static configuration, the dynamic configuration directory and the Let's Encrypt certificate store on a dedicated data disk so configuration and certificates are independently resizable and survive instance replacement.

Reverse Proxy And Load Balancer The web entrypoint listens on port 80 and the websecure entrypoint on port 443. Drop router and middleware definitions into the watched dynamic config directory and Traefik hot-reloads them with no restart. Define backends, weighted load balancing, health checks, sticky sessions, rate limiting, headers, redirects, circuit breakers and more. An automatic Let's Encrypt certificate resolver is pre-configured so HTTPS is one DNS record and one router rule away.

Secure First Boot The Traefik dashboard ships with no authentication, so it is never exposed unprotected. The dashboard and API are published only through a router protected by an HTTP Basic authentication middleware. On the first boot of your instance a one-shot service generates a fresh dashboard password, unique to that instance, writes the bcrypt-hashed credential into the dynamic config and writes the password to a root-only file. No shared or default credentials ship in the image.

Ready To Use The dashboard is served on port 80 under the /dashboard path. Sign in with the generated administrator credentials to inspect routers, services, middlewares, entrypoints and TLS certificates in real time. Point a DNS record at the instance, add a router for your backend in the dynamic config directory and Traefik routes and secures it.

cloudimg Support 24/7 technical support by email and chat. Help with deployment, router and middleware configuration, provider setup, automatic TLS and Let's Encrypt, load balancing strategies, and edge hardening.

Use Cases An edge router and reverse proxy in front of web applications and APIs. Automatic HTTPS with Let's Encrypt. A load balancer across multiple backend instances. A single ingress point for microservices. TLS termination and HTTP to HTTPS redirection.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.