Traefik Hub
Automated SSL and DNS management has streamlined deployments and enabled faster product launches
What is our primary use case?
My main use case for Traefik Enterprise is to help route traffic from internal services to other services, and it also helps handle a lot of DNS resolution so that we do not have to worry about it.
A specific example of how I use Traefik Enterprise in my workflow is that we use it with a tool called Dokploy, which is built into the platform where it routes all DNS traffic and records through Traefik. We also use it for proxying; for example, if a website is not fully ready to launch, we use a temporary domain that Traefik or Dokploy can generate for us, allowing us to expose that publicly so we can use it either internally or show demo versions without having to configure DNS ourselves until we are ready.
What is most valuable?
The best features Traefik Enterprise offers, assuming that the temporary domain names are a feature of Traefik, would be that, as it has been really helpful to our workflow. Assuming that is not an actual feature of Traefik but of Dokploy instead, I also value the automatic Let's Encrypt validations and SSL certificates. We were trying to set it up manually ourselves or using automatic scripts with Let's Encrypt, and it was too much of a hassle. Traefik really automates a lot of the difficulties for us.
Traefik Enterprise has positively impacted my organization by making DNS and SSL management incredibly easy.
My experience with the automated SSL certificate management is that it has saved us a lot of time because typically, we run things through Docker containers with exposed ports, and the Let's Encrypt automatic certificate renewal has to be run on these HTTPS ports. Trying to run it and put it in a place where it expects to be has been more annoying and difficult, whereas Traefik just knows to automatically section and divide them.
Regarding the impact, it has definitely saved us time. I do not necessarily know if it has reduced errors, but not having to worry about renewing SSL certificates or setting up the automatic certificate renewal in our own time has definitely been very important to us being able to perform efficiently.
What needs improvement?
Traefik Enterprise can be improved because the documentation is not very easy to read and comb through. Luckily, a lot of it has been abstracted away from us through the various implementations we have used, but anytime I have had to read the Traefik logs or documentation itself, it has been a little more overwhelming and convoluted compared to other documentation out there.
If I had to mention any improvements needed for Traefik Enterprise, my biggest concern is that I wish the documentation was clearer. Documentation is really the biggest pitfall we have had.
For how long have I used the solution?
I have been using Traefik Enterprise for about two or three years.
What do I think about the stability of the solution?
In my experience, Traefik Enterprise is stable.
What do I think about the scalability of the solution?
Regarding Traefik Enterprise's scalability, I think it is fine, but I do not really know.
Which solution did I use previously and why did I switch?
Previously, we were using cPanel and a couple of other solutions like CloudPanel, and the reason we switched was that they were very limited in what we wanted them to do aside from the DNS additional features. The current implementation we have right now is a lot more suitable for our workflow.
What was our ROI?
I have not seen a specific return on investment, but it has definitely been easier for us to get products out the door. The implementation we have is straightforward regarding how to connect everything, with dropdowns. This is a very specific implementation, but for people I used to work with, it was a lot easier for them to understand than configuring things through a firewall or command line, making it a lot more straightforward.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing has been fine since we usually go through a third-party implementation of Traefik. I have had no issues with it; it seems to be open source and has been pretty good for us.
Which other solutions did I evaluate?
Before choosing Traefik Enterprise, I did not evaluate other options much. If I had to go back, knowing what I know now, and if I was still working at this company or my previous employer, I might consider using a Caddy file instead. I do not know if I would choose Traefik Enterprise again unless it was through an implementation of another platform because I do not feel having to deal with the headache of learning it from scratch.
What other advice do I have?
I do not have anything specifically towards Traefik to add. The Dokploy implementation of it has really been the main driving point. I have found Traefik itself a little hard to use, at least regarding their documentation, but I have no problems with the service itself.
Once it has been implemented, especially in a tool where I do not have to think about it too much, I have really had no issues with it. One of the minor annoyances is whenever we add a DNS record on Dokploy with Traefik, the entire container has to restart so that those updates are there. I do not know if that is Traefik specific; I am assuming it is because of the Docker implementation, but aside from that, I have really had no issues with it.
My advice to others looking into using Traefik Enterprise is that if you are doing it through a third party, it is definitely worth understanding a little about it. However, if you are going to be setting it up from scratch and managing it through some other implementation, it might be easier to use something such as a Caddy file, unless you have people with networking experience on your team.
Traefik Enterprise is a fine platform, but I do not really have too much experience with actually using it directly. The third-party implementations we have been able to use at our job have been very straightforward and have had everything we needed and more. I cannot validate if that is a direct feature of Traefik that enables all of this or if it is something more nuanced to the platform we are using for deployments.
Regarding Traefik Enterprise's AI capabilities, I have never used any of it, so I cannot comment on its accuracy and reliability of output.
I would rate this product eight out of ten.
Reverse proxy isolation has strengthened security and now simplifies dynamic routing and deployments
What is our primary use case?
I can go deeper into how I configured the isolation in Traefik Enterprise. Isolation is normally achieved by separating traffic through entry points, routers, middlewares, and namespaces. I did it in Kubernetes or sometimes in Docker. The advantages of the isolation were greater security, as one application cannot directly access another application's traffic, less impact from failures if an application has issues or there is a failover. It does round-robin directly so that it continues working on another server, there was better administration, and there was also better control compliance.
All of the documentation is available on the internet and it is very good.
What is most valuable?
A function of Traefik Enterprise that pleasantly surprised me in my experience could be the integration with Kubernetes, which is probably the strongest integration because it automatically discovers new services, updates the route without restarting, integrates with Ingress and CRDs, it works very well in microservices environments, and also with Docker, it automatically detects new containers.
Traefik Enterprise has positively impacted my organization because it automates the integration of new services, especially the ones I already mentioned. It reduces manual configuration since it automatically detects services, centralizes routing, makes deployments easier without affecting users, and it has resulted in a lot of cost reduction because the licenses, for example, compared to other technologies such as F5 proxy, are more expensive.
What needs improvement?
For how long have I used the solution?
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
How are customer service and support?
Which solution did I use previously and why did I switch?
How was the initial setup?
What about the implementation team?
What was our ROI?
What's my experience with pricing, setup cost, and licensing?
Which other solutions did I evaluate?
What other advice do I have?
The factors that influenced my decision to give it that rating of eight include that the learning curve and the initial complexity can be an obstacle for some teams, and in practice, it is sometimes a bit complex to understand in the documentation.
Everything works well with Traefik Enterprise.
Proxy management has become distributed and secure while cluster-wide rate limiting protects services
What is our primary use case?
My main use case for Traefik Enterprise is that there are multiple use cases. A specific example of one of those use cases is that we use it as a proxy in multiple places, for instance, in our UCD.
What is most valuable?
Traefik Enterprise offers distributed high availability; for instance, the Raft consensus mechanism eliminates the need for an external key-value store. The advanced middleware now supports JWT, SAML, or LDAP authentication, and it also has great distributed rate limiting.
The distributed rate limiting has helped my team because we use the advanced middleware as confidential, but the rate limiting is cluster-wide rate limiting that prevents service overloads across multiple replicas, making it much smarter than just regular rate limiting.
Traefik Enterprise has positively impacted my organization because it is easy to use and it is really great software. It is difficult to compare to others, but it is really good.
What needs improvement?
Traefik Enterprise can be improved because the learning curve is quite difficult; the basic setups are quick, but the advanced ones are very difficult to learn. The UI dashboard has really great usability, but it remains mostly read-only. Having more interactive troubleshooting or configuration capabilities directly in the UI would be a major plus, and although the documentation is okay, it could be better.
For how long have I used the solution?
I have been working in my current field for five years.
How are customer service and support?
The customer support for Traefik Enterprise is good, but we did not use it.
Which solution did I use previously and why did I switch?
I did not use a different solution before Traefik Enterprise.
What was our ROI?
I have seen a return on investment, but this is confidential.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing for Traefik Enterprise is that it is really good.
What other advice do I have?
My advice to others looking into using Traefik Enterprise is that I would just try it; it is a good product. I would give Traefik Enterprise a rating of 9.
Improved developer productivity and simplifies secure deployment for Docker-based services
What is our primary use case?
I have been using Traefik Enterprise for three years, initially in my previous organization where I used it for hosting internal projects.
My main use case for Traefik Enterprise currently is to host an internal application in my organization where the applications are built as Docker services, and traffic labels are added to these Docker Compose files to allow the application to be hosted.
This setup helps my team day-to-day by making development very reliable and much more abstracted by Traefik Enterprise. The usual configuration setup that goes into these services is very tedious, so the traffic labels abstract these complexities and allow the developers to be much faster in development.
How has it helped my organization?
Traefik Enterprise has positively impacted my organization by definitely improving productivity in development and reducing the time to go to production, as it abstracts a lot of configuration-related complexities. It has brought benefits to the organization in terms of speed, quality, and maintainability, and it can be modularized and tested.
What is most valuable?
In my opinion, one of the best features that Traefik Enterprise offers is the Docker integration, where I do not have to maintain a large centralized configuration every time I deploy a new service. Whenever I spin up a new container, I simply add a few traffic labels to the existing Docker Compose, and the service is automatically available through reverse proxy, keeping everything modular and much easier to maintain as the number of services grows.
Docker integration with Traefik Enterprise has made scaling or troubleshooting much easier by abstracting many aspects in my development, especially the TLS certificate management. Setting up HTTPS usually involves multiple steps where things can go wrong easily, but Traefik Enterprise abstracts it in a much better way, saving significant time and reducing configuration mistakes. This has helped the team focus on the actual application development rather than worrying about certificate renewals and web service configuration.
The unique feature of Traefik Enterprise that I appreciate the most is the integration with Docker and the level of abstraction it gives for TLS and service discovery, as all these configuration-related tasks have been abstracted in Traefik Enterprise, making it much more helpful for developers.
For the TLS feature in any web application, it used to take us a lot of time, around two weeks for setting up TLS certificates and getting it approved, but things have become much easier with Traefik Enterprise. Now, the development team takes only probably two to three days to configure the TLS, allowing them to focus on the actual application development.
What needs improvement?
If I have one suggestion for the Traefik team to improve Traefik Enterprise, it would be to make the documentation even more interactive, perhaps by integrating an AI-powered assistant. The documentation is already excellent, but as it continues to grow, an AI-assisted tool specifically trained on the official document could help answer configuration-related questions much more instantly.
For how long have I used the solution?
I have been working in my current field for seven years.
What do I think about the stability of the solution?
In my experience, Traefik Enterprise is stable for my use cases.
How are customer service and support?
The customer support for Traefik Enterprise is very responsive, and I have used it a couple of times with a good experience, as they supported me and I found the solution pretty quickly after contacting them.
Which solution did I use previously and why did I switch?
I have not used any different solution before Traefik Enterprise; I started in my previous organization with Traefik Enterprise.
Which other solutions did I evaluate?
Before choosing Traefik Enterprise, the team considered Nginx as one of the options, but the level of abstraction that Traefik Enterprise provides, along with its ease of use, great documentation, and less steep learning curve, made the team choose Traefik Enterprise over other solutions available in the market.
What other advice do I have?
My advice to others looking into using Traefik Enterprise is to proceed with it, especially if the team is deploying applications using Docker, Docker Compose, or anything that deals with Docker or Kubernetes, as it has good integration and support from the Traefik team.
I suggest any fellow developers use Traefik Enterprise if their projects deal with Kubernetes or Docker, as most of the configuration complexities are easily abstracted, it has good documentation, and the learning curve is not steep. I would rate my overall experience with Traefik Enterprise as an eight.
Hot reloading and dynamic routing have simplified secure microservice traffic management
What is our primary use case?
I use Traefik Enterprise as an API Gateway, which has TLS termination, and then it forwards the request to multiple microservices. I basically use it as an API Gateway with TLS termination.
I used Traefik Enterprise as an API Gateway to forward my request to the microservices, and I used a file-based provider so it can be dynamically changed whenever we have new services. Basically, we don't need to restart the service. It has a hot-reload feature, so I mainly use it for that primary purpose.
What is most valuable?
Traefik Enterprise supports hot reloading of TLS certificates and hot reload of SSL certificates. With NGINX, we need to manually restart the service if we're using file-based SSL. Even without using the ACME protocol, just for file-based SSL certificates, you can implement hot reloading of certificates without restarting the API Gateway service. That was the main helpful feature in Traefik Enterprise.
The best feature of Traefik Enterprise is service discovery, which is excellent because it supports the modern API Gateway feature of service discovery.
Dynamic configuration is one of the most useful features I have used in Traefik Enterprise.
Traefik Enterprise also provides a web-based API for viewing the current status of the Traefik Enterprise instance, and that is a best feature. The YAML-based configuration is so simple to use.
Traefik Enterprise has made it so easy to set up, and I have noticed a positive impact on my organization with its ease of configuration. The easy setup and lack of network-specific requirements have benefited my organization, which has resulted in time saved and reduced complexity.
What needs improvement?
The certificate feature I previously mentioned is about hot reloading of the certificate, and if the file-based SSL certificate is changed, it works only if the certificate is inside the directory we have mentioned in our dynamic YAML. If the dynamic YAML needs to be separated from the certificate directory, the hot reloading part will not be working. I need something that works even if you have separate files and a separate path for the certificate and for the dynamic YAML configuration file. The hot reloading part should work even if they are both in different directories.
That is the main thing on my mind regarding improvements needed in Traefik Enterprise.
For how long have I used the solution?
I have been using Traefik Enterprise for one year.
What other advice do I have?
I would like to continue with the review of the features of Traefik Enterprise. We saved a lot of time because Traefik Enterprise is so easy to configure. I gave this review a rating of ten.
Migration has reduced latency and now manages complex ingress routes and domains efficiently
What is our primary use case?
My main use case for Traefik Enterprise is that we initially used AWS Network Load Balancer for our application with our Nginx Ingress controller, which provided IP whitelisting and an additional layer of security. Since it got deprecated, we preferred Traefik over Nginx Network Load Balancer because the Network Load Balancer works well with fast latency compared to the application. We thought we would migrate to Traefik to have the same latency performance as Application Load Balancers. We migrated successfully across all our production environments, and it is working smoothly with very smooth handling of ingresses and traffic.
A specific example of how I'm using Traefik Enterprise in my environment is that we replaced the Network Load Balancer with Nginx Load Balancer Controller with Traefik Load Balancer and Application Load Balancer. We introduced Traefik to address latency issues, so the main use case for latency is what we are using Traefik for.
I currently have nothing else to add about my main use case or how Traefik Enterprise fits in my workflow. As of now, there are no additional needs from Traefik. I would have suggested improvements if I had encountered any known issues, but currently we do not have anything.
What is most valuable?
The best features Traefik Enterprise offers in my opinion regarding latency is that it has the same performance as AWS Load Balancer, whereas the Application Load Balancer and AWS Load Balancer Controller do not have the same latency. With replacing the Traefik Load Balancer Controller with the same Application Load Balancer in AWS, you have less latency. I am not sure how this is happening because I have not gone through the deep level where some of our seniors have done the POC and implemented this to achieve it with our use case. I would need to do a more in-depth deep dive to provide a more comprehensive review.
I find additional features particularly valuable in Traefik Enterprise, such as ease of configuration, security capabilities, and integration with our existing tools. It is easy to use, though it is somewhat complex compared to Application Load Balancer because you have Ingress routes and entry points and some other things. It is easy to handle management, and the Ingress rules are easy to manage. We have separate Ingress rules rather than having lengthy configurations. We can write Ingress routes separately for each domain, and it is also cost-efficient. We can use a single load balancer for multiple domains with multiple routes, and it handles cross-namespace. It also adds more value in terms of security by managing WAF integrations.
What needs improvement?
In terms of how Traefik Enterprise can be improved, I have not explored in more depth. I have only used it for our specific use case. If I had explored everything, I would have found something that needs to be improved. Since I have not explored in-depth, I cannot judge what could be improved or what could be given more focus in the future.
For how long have I used the solution?
I have previously used Traefik Enterprise in my past experience, and currently I have been using it for around six to eight months.
What do I think about the stability of the solution?
Traefik Enterprise has been stable in my experience with no downtime or issues.
What do I think about the scalability of the solution?
Traefik Enterprise's scalability has been effective as it is handling traffic smoothly and the latency is also good.
Which solution did I use previously and why did I switch?
I do not have any knowledge on whether we previously used a different solution or any comments on that. I am not sure if anything was used or not.
What was our ROI?
I have not seen a return on investment and I am not handling this, so I do not have access to relevant metrics like fewer employees needed or money saved.
What's my experience with pricing, setup cost, and licensing?
I am not sure about the experience with pricing, setup cost, and licensing as the management might be handling that.
Which other solutions did I evaluate?
Before choosing Traefik Enterprise, we did not evaluate other options and directly used Traefik. We explored which tools could replace our use case, and Traefik was the first one we found. We did the POC and achieved our goals, so we have not gone through other solutions.
What other advice do I have?
A specific example of how I'm using Traefik Enterprise in my environment is that we replaced the Network Load Balancer with Nginx Load Balancer Controller with Traefik Load Balancer and Application Load Balancer. We introduced Traefik for the latency issues, so the main use case for the latency is what we are using Traefik for.
I am not sure how much of a difference it made in latency as this is handled by the SRE team of our company, so I do not have any idea on that.
I would rate Traefik Enterprise overall as a nine out of ten. I chose nine out of ten because I have not explored all other things, but it is easy to configure and it handles cross-namespace and manages optimization like cost optimization seamlessly. It is easier to configure multiple Ingress routes and entry points. It simplifies things compared to the application or network load balancer, which is quite messy. That is why I chose nine, and I have not explored the remaining parts like the whole traffic level. If I would have explored, I would have given ten out of ten.
My advice to others looking into using Traefik Enterprise is that it depends on their requirements. I cannot say they can migrate easily, but they can achieve migration and have a smoother experience. If they have a larger team handling hundreds of domains, it is smooth to manage with Traefik Enterprise. I would recommend them to use Traefik Enterprise.
I do not have any additional thoughts about Traefik Enterprise before we wrap up.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Ingress control has streamlined secure exposure of microservices and has reduced manual work
What is our primary use case?
My main use case for Traefik Enterprise is using it as an Ingress Controller with Kubernetes. A quick and specific example of how we use Traefik Enterprise together with Kubernetes is that we are using it inside our clusters to expose our .NET APIs and microservices externally in a secure way.
What is most valuable?
One of the best features that Traefik Enterprise offers, without a doubt, is the advanced control; we are able to have native protection directly at the entry point, with the OWASP Top 10 and the WAF. We can apply advanced centralized authentication, and we also have multi-cluster SSL and traffic splitting.
Traefik Enterprise has had a positive impact on our organization because we did the migration and even tried using other tools for Ingress, but at the time, Traefik performed better because we could have greater control, and it also had dashboards; the way of managing it ended up pleasing the infrastructure people and the developers as well. The team here moved away from a more manual mindset of constantly monitoring to a more strategic view. Traefik Enterprise gave us that with the dashboards. In terms of the tools, it practically never caused problems. Our infrastructure team had been doing load balancing manually, and Traefik Enterprise solved and eliminated that. We gained more time; the team can focus more on complex tasks and more functionality.
What needs improvement?
I do not see many points for improvement in Traefik Enterprise at the moment; the only point might be the documentation—making it available in more languages and a bit more friendly for those who are just starting out, because we had some difficulty at the beginning and had to look for some information and courses elsewhere. Documentation in Portuguese and much more friendly, more comprehensible content would be interesting.
For how long have I used the solution?
I have been using Traefik Enterprise for two years.
What do I think about the stability of the solution?
Traefik Enterprise is stable.
What do I think about the scalability of the solution?
In terms of scalability, one of the best things is that we can separate the control plane from the data plane.
How are customer service and support?
We have never needed to contact customer support for Traefik Enterprise.
Which solution did I use previously and why did I switch?
We were not previously using a different solution because it was the first time we made this migration from an on-premises system to microservices, so we were not using anything at that point because the application and other things were legacy, so it was not possible to use one.
How was the initial setup?
After we acquired and started using Traefik Enterprise, we saw an improvement in terms of time, a reduction in people doing more basic tasks; Traefik Enterprise manages that well. There was time saving; developers or the infrastructure team worry less about those tasks.
What about the implementation team?
I did not have that experience with pricing, setup costs, and licensing because governance handled that part more; I basically studied, understood the tool, and recommended that it would be the best purchase or the best decision to be made for the company.
Which other solutions did I evaluate?
Before choosing Traefik Enterprise, we evaluated other options. When we started the project idea, some people told us about Nginx. We were even already using Nginx on WordPress; it was totally separate, and it was actually a third party that managed it. They told us about Envoy as well, but we were between Nginx and Traefik Enterprise. In the end, we ended up using Traefik Enterprise because it is more dynamic and better; it has route discovery and is a bit easier to deal with and requires less work.
What other advice do I have?
My advice to others who are considering using Traefik Enterprise is to focus on the basics, on understanding the infrastructure and how it works, so you can always get the best out of the tool. I have no other comments about Traefik Enterprise before we finish. I give this review a rating of ten out of ten.
Managing containerized services has become smoother and now simplifies routing and HTTPS setup
What is our primary use case?
My main use case for Traefik Enterprise was as a reverse proxy and load balancer for Docker-based applications. I used it to manage routing between multiple services, handle HTTPS with Let's Encrypt, and simplify access to containerized applications during development.
What is most valuable?
Using Traefik Enterprise for reverse proxy and load balancing made managing containerized applications much easier instead of configuring each service manually. I could define routing rules through Docker labels, and Traefik Enterprise automatically detected new services. Automatic HTTPS with Let's Encrypt also saved time and reduced configuration errors.
Automatic service discovery and dynamic configuration specifically benefited my projects by saving me considerable time when working with Docker containers. Whenever I deployed a new service or updated an existing one, Traefik Enterprise could detect the changes automatically without requiring manual updates to proxy configuration. This reduced setup complexity and minimized configuration errors.
Traefik Enterprise had a positive impact by simplifying the management of containerized applications. It reduced the time spent configuring reverse proxy rules, automated HTTPS with Let's Encrypt, and made it easier to expose multiple services through a single entry point. It helped me collaborate better with my team, reduce downtime, and improve security.
What needs improvement?
Overall, my experience with Traefik Enterprise was positive, but I think the learning curve could be improved, especially for new users. The configuration options are very powerful, but understanding routing rules, middleware, and providers can be challenging at first. More beginner-friendly documentation and practical examples for common deployment scenarios would make adoption easier.
I would also like to see even better debugging and troubleshooting tools with clearer error messages and more detailed diagnostics when a route or service is misconfigured.
For how long have I used the solution?
I have been using Traefik Enterprise for two or three years.
What was our ROI?
I do not have specific metrics to share because I mainly used Traefik Enterprise in university and personal projects rather than in a production environment. However, I did notice that setting up new services became much faster since I did not have to manually update reverse proxy configurations. It also reduced configuration errors and made deployment more consistent, especially when working with multiple Docker containers.
What other advice do I have?
My advice to others looking into using Traefik Enterprise would be to start in a small project and take the time to understand the core concepts, especially routing, middleware, and service discovery. Once you become familiar with those, it is much easier to take advantage of Traefik Enterprise's flexibility. If you are using Docker or a microservices architecture, Traefik Enterprise integrates very well and can simplify services management significantly. I would also recommend following the official documentation and experimenting in a development environment before deploying to production. Overall, it is a powerful solution, but investing a little time in learning it pays off. I would rate this product nine out of ten.
Centralized certificates and detailed metrics have improved our internal application visibility
What is our primary use case?
Our main use case for Traefik Enterprise involves our IT team being lean, so the rework of certificate configuration, especially in the case of Let's Encrypt, leaves something to be desired. What we needed was a solution that centralized certificate control and also made it easier to maintain services and access. That is basically our main use case.
Besides that, we also needed a way to expose application metrics, looking at it from the HTTP side, specifically how many requests were successful, and how many had issues. The access log solution also met this need very effectively.
I would add that the metrics part of Traefik Enterprise, which I found very interesting, helps us know how much we are really serving the internal customer. We currently use it for the company's internal applications.
How has it helped my organization?
This visibility has impacted the IT team's routine mainly by improving certificate management, helping us avoid having to configure the certificate on each server. We are doing TLS termination at the edge, and the rest of the traffic is all private with the applications we have internally, making it much more secure and centralized.
What is most valuable?
Traefik Enterprise offers excellent features mainly including the exposure of metrics, which I have already mentioned. The fact that the tracing part can also be enabled is a very positive point, especially because when you have distributed systems or when you have a proxy itself, you need to understand where the bottleneck is. Traefik Enterprise makes these small modules very clear for you to enable: the access part, which is the access log; the metrics part; and the distributed tracing part.
Traefik Enterprise has a positive impact on my organization mainly by providing visibility and data governance. Knowing whether something is being accessed or not and whether the service is healthy or not is much more straightforward when you have a proxy in the same format as Traefik Enterprise.
What needs improvement?
Traefik Enterprise could be improved in some ways. For example, dynamic.conf is a way for you not to have to keep restarting the service. It would also be interesting to have another option for us to add entry ports to the service. Today we are using it with Docker, so we need to be careful with service maintenance to avoid any type of downtime. Something along those lines would be interesting, or perhaps some way to validate a rule before it could cause any issues.
The middlewares are very good, but I would like to mention one point. The problem I see today with the middlewares is that they do not add rules. If I configure, for example, one that will ensure access is only allowed from three IPs, and then I create another one where I would like to add more IPs to this rule, when I attach both to some router, what it does today is reach the last router, see that it does not have any of the other IPs that were added in the other middleware, and it drops the connection, returning a 403. It would be interesting if it were able to understand that these are additions of IPs to an allowlist instead of performing explicit denial based on the last middleware.
For how long have I used the solution?
I have been using Traefik Enterprise for a short time, actually, as we have been using it for about two weeks.
What do I think about the stability of the solution?
Traefik Enterprise is very stable. The memory consumption is not lower than HAProxy, but it is stable and low in our opinion. It works well.
What do I think about the scalability of the solution?
Traefik Enterprise scales effectively as I barely noticed any peak in memory and CPU, so I think it is handling the load very effectively.
How are customer service and support?
I have not needed to contact Traefik Enterprise support yet.
Which solution did I use previously and why did I switch?
I did not previously use a different solution.
How was the initial setup?
Since this is a proof of concept, I do not have a return on investment yet. We have been using it for too short a time to say that it has paid back everything that was invested. In fact, we are in the process of implementing it on some services. However, I would say that improving the security of application access is already something positive because there were at least two or three applications that were previously accessed via IP that we moved to DNS, and the certificate is now managed by Traefik Enterprise.
What about the implementation team?
On a scale of one to ten, I would rate Traefik Enterprise a nine.
What was our ROI?
Since this is a proof of concept, I do not have a return on investment yet. We have been using it for too short a time to say that it has paid back everything that was invested.
What's my experience with pricing, setup cost, and licensing?
I have to leave out the pricing part because since I am in a proof of concept, I still do not have complete information on that. However, I saw that there is the Traefik Hub option, and we are evaluating it to see if it makes sense.
Which other solutions did I evaluate?
Before choosing Traefik Enterprise, I evaluated another option, which was HAProxy.
What other advice do I have?
My advice for others considering using Traefik Enterprise is to proceed without fear and run a proof of concept while taking advantage of the benefits of a metrics exporter such as Prometheus, which is also integrated, and the access log, which helps considerably with environment visibility. I would rate this product a nine overall.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Self-hosted media streaming has become secure and automated, and certificate management is simplified
What is our primary use case?
My main use case for Traefik Enterprise involves self-hosted infrastructure setup in my home lab, where I was searching for the best tool to manage a proxy manager for our services. I was planning to host media servers, such as the open-source Jellyfin project. The problem I encountered was the need to manage a reverse proxy manager and certificates, as I was planning to expose the media server to the internet, making security a concern. When searching for a solution, I discovered Traefik Enterprise as the best option. I used Jellyfin as a cloud application within a Docker container. In that Docker container, I integrated Traefik and SSL Let's Encrypt SSL certificate, which is also open source. I then set up Traefik and Let's Encrypt in a Docker container with a Docker Compose file, and subsequently deployed the Docker application on my Raspberry Pi machine. I then began using and streaming the media through Jellyfin.
Additionally, in my use case with a self-hosted media server, there were some issues. Initially, I was using Cloudflare DDNS and Cloudflare Tunnel. The problem with that existing setup was when using the media server on my local network, I had to always remember the IP address, port, and everything. It was always going through the Cloudflare Tunnel DDNS. That would consume most of the bandwidth because it would encrypt and decrypt, and then the media would buffer during streaming, which was unnecessary. When I use Traefik Enterprise on my local network, it can use a local port or a local fully qualified domain name. Externally, on the internet, it can expose it on a different domain. Traefik Enterprise helps me stream our media on my local network without any encryption or decryption. I can also use the proxy manager when exposing it to the internet. It balances both needs and will automatically manage the certificates and security. I can also see the dashboard. There are many good advantages to this approach. I am also aware I can accomplish many other things using Traefik Enterprise.
What is most valuable?
What made Traefik Enterprise the best option for my use case is that it is both user-friendly and open-source. It can integrate with many other tools, such as Let's Encrypt and Docker. In a Docker Compose file, I can easily add Traefik Enterprise configuration and Let's Encrypt. When I make changes, I can directly modify the Docker Compose file, and Traefik Enterprise will pick up the new configuration. It will even connect with Let's Encrypt and obtain the new certificate. I would say it has more features compared to other proxy managers, which is why I chose Traefik Enterprise.
The best features Traefik Enterprise offers in my experience include the fact that it does not have static config files like Nginx. Instead, I can manage the central configuration and restart it at any time. Traefik Enterprise natively watches my infrastructure and will spin up using a Docker daemon and socket. I can also configure Traefik Enterprise using labels, which are useful. I believe I can manage zero downtime, such as hot reloads, and many other things. Those are the main advantages when I spin up the open-source media server project.
Traefik Enterprise has positively impacted my organization by reducing a lot of time, especially when I configured Traefik Enterprise, Let's Encrypt, and Docker. Whenever I expose a website to the internet, I always have to ensure the SSL certificate is handled, which takes time. Regarding ports, whenever I use any of my services on the internet, I have to manage my ports. Traefik Enterprise always ensures port overlap does not happen; it will eliminate port overlap. Using Traefik Enterprise and Let's Encrypt provides dynamic certificate provisioning. Traefik Enterprise integrates directly with Let's Encrypt via a DNS provider, such as Cloudflare or AWS Route53. It can fulfill the ACME challenges, provide SSL certificates, and manage auto-renewals natively. It also manages automatic TLS upgrades. For example, if I want to upgrade from HTTP to HTTPS, it will do it immediately. Those are the significant advantages. I can even share my open-source GitHub links that demonstrate how I use Traefik Enterprise in my Docker Compose files.
I can quantify improvements while using Traefik Enterprise. For example, I was using 20 or more Docker applications. If I wanted to set up SSL certificates for each application, it might take three to four hours. Instead, I set up Traefik Enterprise one time, and it saved approximately 20 to 30 hours of maintenance per week. Additionally, any changes to one setup also saved more than 10 hours. Overall, it saved 20 to 30 hours per week.
What needs improvement?
I think Traefik Enterprise can be improved with native multi-cluster control plane syncing. For example, when using syncing similar to Kubernetes, Traefik Enterprise could also utilize multi-cluster control plane syncing. I believe it could improve some documentation context. Sometimes it supports many dynamic provider environments, but the documentation for each dynamic provider is not comprehensive. I think that can be improved. The dashboard could also be enhanced, such as managing any network operation or providing a toggle for a maintenance page. Those things can be improved in the UI dashboard.
Traefik Enterprise can be improved with things such as hard controller defenses for distributed rate limiting, high-capacity log streaming buffering, and implementing some asynchronous configurable non-blocking internal ring buffer mechanisms in log shipping. Additional improvements could include native blue-green canary automation, fragmented CLI engine management, such as using the control plane operation in Kubernetes, open API driver REST endpoints, removing unnecessary maintenance, and separating the operational libraries such as TCTL. Those kinds of small improvements could be made.
For how long have I used the solution?
I have been using Traefik Enterprise for the last one and a half years.
What do I think about the stability of the solution?
Traefik Enterprise is stable in my experience and more stable than competitors such as Kong Enterprise or Apache Enterprise.
What do I think about the scalability of the solution?
Traefik Enterprise's scalability is very good. I can use Traefik Enterprise for any number of applications. It is horizontally scalable and has high availability, which is very good for scalability.
Which solution did I use previously and why did I switch?
I initially used Cloudflare Tunnel and Nginx Proxy Manager before Traefik Enterprise. Both had problems. Nginx Proxy Manager is not comparable to Traefik Enterprise. Traefik Enterprise can be integrated with Let's Encrypt and can be managed very easily. Cloudflare Tunnel was also not useful because when accessing a website, it uses an encryption-decryption method, which is not good for speed or internet traffic. That is why I switched to Traefik Enterprise. It does not have manual configuration like Nginx Proxy Manager. I think certificate management is easy in Traefik Enterprise, so that is why I chose it.
How was the initial setup?
I have not used Traefik Enterprise; I use the free setup. I only use the free setup, so it does not cost much. The setup required some of my time, and for the infrastructure setup, I spent approximately 20,000 to 30,000 Indian Rupees for setup costs. However, there is no licensing because I am using Traefik Enterprise, not the enterprise version, just the open-source version.
What about the implementation team?
In our setup, fewer employees are needed because I am the only person managing all these things. No additional employees are required for this setup. I am using this for open source and my local setup. Money is not saved much, but time is saved, and one person is sufficient to manage our self-hosted machine.
Which other solutions did I evaluate?
Before choosing Traefik Enterprise, I tried Nginx Proxy Manager. I used that one. Other than that, I did not try anything else.
What other advice do I have?
My advice for others looking into using Traefik Enterprise is to first check other alternatives and compare Traefik Enterprise with other applications and look at your requirements first. If the requirements are a better suit for Traefik Enterprise, I recommend proceeding. Alternatively, you can try out other tools as well. Before using Traefik Enterprise for all applications, I think you first need to master the configuration setup skill and design your configuration. Then you can proceed with Traefik Enterprise if you find it to be a better fit for your requirements. I rate this product an eight out of ten.