{"slug": "traefik", "name": "Traefik", "category": "networking", "category_name": "Networking and VPN", "description": "", "recommenders": 3, "commenters": 13, "warners": 1, "score": 4.467, "rising": 3.0, "first": "2025-11-13", "latest": "2026-10-27", "why": "I use traefik so with docker compose/labels it's real easy to give things a reverse proxy with an auth gate and other middleware", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 9, "compare": 0, "warn": 1}, "spark": [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 3], "listed": true, "loved": [], "caveat": "", "short_quote": "I use traefik so with docker compose/labels it's real easy to give things a reverse proxy with an auth gate and other middleware", "icon": true, "domain": "traefik.io", "github_repo": null, "official_url": "https://traefik.io", "pricing": "", "aliases": ["Traefik"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 804078145, "item_id": 50254884, "url": "https://news.ycombinator.com/item?id=50254884", "by": "photios", "date": "2026-10-27", "stance": "recommend", "quote": "I moved to Traefik and never looked back.", "excerpt": "> Nginx / envoy should be your default choice for most use cases. Nginx was there like 15 years ago and it feels it has been stuck there with no progress ever since. No metrics, no ACME certs... I moved to Traefik and never looked back.", "context": "", "use_case": "reverse proxy", "switched_from": "Nginx", "story": "Native Prometheus Integration with Nginx"}, {"id": 801839041, "item_id": 50114940, "url": "https://news.ycombinator.com/item?id=50114940", "by": "Balinares", "date": "2026-10-16", "stance": "recommend", "quote": "Traefik handles the routing and Let's Encrypt cert creation and renewal.", "excerpt": "I use Docker Compose so that I don't have to care if the daemon is a single binary or a whole stack: I can use the same setup for everything, and deploying an entire new thing in a maintainable way is quick and easy. Each app's startup/shutdown is managed using the same templated systemd unit, and Traefik handles the routing and Let's Encrypt cert creation and renewal. Basically I want things reliable and low-mainten", "context": "", "use_case": "reverse proxy and certificates", "switched_from": "", "story": "What I self-host"}, {"id": 801791472, "item_id": 50111967, "url": "https://news.ycombinator.com/item?id=50111967", "by": "c-hendricks", "date": "2026-10-15", "stance": "recommend", "quote": "I use traefik so with docker compose/labels it's real easy to give things a reverse proxy with an auth gate and other middleware", "excerpt": "I use traefik so with docker compose/labels it's real easy to give things a reverse proxy with an auth gate and other middleware There's lots of solutions, I also find compose hits the sweet spot for integration into my homelab", "context": "homelab", "use_case": "reverse proxy with auth", "switched_from": "", "story": "What I self-host"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 787382944, "item_id": 49211434, "url": "https://news.ycombinator.com/item?id=49211434", "by": "SlavikCA", "date": "2026-08-07", "stance": "warn", "quote": "I tried to enable cache on Traefik. It went OOM in 2 minutes", "excerpt": "I have 5Gbps fiber at home. LAN is mostly 10Gbps. I'm hosting few hobbyist public websites. One is the library of hymns, songs, ... - mostly PDF, MP3, MIDI. OpnSense router -> Traefik -> Docker container. That Docker container runs on NAS, which is connected via 1Gbps port. Suddenly, last week I started to get over 1000 RPS. Was it scanner, parser, crawler, DDOS? I can't tell, as user agent was default Mac OS. It was", "context": "hosts hobbyist public websites at home", "use_case": "reverse proxy", "switched_from": "", "story": "The web server deployment model breaks at hobby scale"}]}], "who": [{"by": "c-hendricks", "context": "homelab", "url": "https://news.ycombinator.com/item?id=50111967", "date": "2026-10-15"}, {"by": "fak3r", "context": "self-hosts at home", "url": "https://news.ycombinator.com/item?id=50010479", "date": "2026-10-08"}, {"by": "weightedreply", "context": "smart home self-hoster", "url": "https://news.ycombinator.com/item?id=49944342", "date": "2026-10-03"}, {"by": "tawman", "context": "Linux user for 30 years", "url": "https://news.ycombinator.com/item?id=46595490", "date": "2026-01-12"}, {"by": "nullify88", "context": "runs a home lab", "url": "https://news.ycombinator.com/item?id=45913852", "date": "2025-11-13"}], "tags": [], "use_cases": ["reverse proxy", "reverse proxy and certificates", "reverse proxy with auth", "reverse proxy for home services", "ingress for servers", "reverse proxy on vps"], "compared": [{"slug": "nginx", "name": "nginx", "co": 2, "switched_from": 1, "switched_to": 0}, {"slug": "let-s-encrypt", "name": "Let's Encrypt", "co": 3, "switched_from": 0, "switched_to": 0}, {"slug": "docker-compose", "name": "Docker Compose", "co": 2, "switched_from": 0, "switched_to": 0}, {"slug": "cloudflare", "name": "Cloudflare", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [{"id": 734817856, "item_id": 45926116, "url": "https://news.ycombinator.com/item?id=45926116", "by": "emilevauge", "date": "2025-11-14", "stance": "recommend", "quote": "it makes Traefik a drop-in replacement to ingress Nginx, without touching your existing ingress resources", "excerpt": "We have been building an ingress Nginx compatibility layer in Traefik that supports the most used ingress Nginx annotations. You should definitely give it a try as it makes Traefik a drop-in replacement to ingress Nginx, without touching your existing ingress resources. Your feedback will be super useful to make it better https://traefik.io/blog/transition-from-ingress-nginx-to-traefik", "context": "works on Traefik", "use_case": "replace ingress-nginx", "switched_from": "ingress-nginx", "story": "Kubernetes Ingress Nginx is retiring"}, {"id": 734538080, "item_id": 45908630, "url": "https://news.ycombinator.com/item?id=45908630", "by": "emilevauge", "date": "2025-11-12", "stance": "recommend", "quote": "it makes Traefik a drop-in replacement to ingress Nginx, without touching your existing ingress resources", "excerpt": "We have been building an ingress Nginx compatibility layer in Traefik that supports the most used ingress Nginx annotations. You should definitely give it a try as it makes Traefik a drop-in replacement to ingress Nginx, without touching your existing ingress resources. Your feedback will be super useful to make it better https://doc.traefik.io/traefik/master/reference/routing-configuration/kubernetes/ingress-nginx/", "context": "works on Traefik", "use_case": "replace ingress-nginx", "switched_from": "ingress-nginx", "story": "Ingress Nginx Retirement: What You Need to Know"}], "threads": [{"url": "https://news.ycombinator.com/item?id=50109715", "title": "What I self-host", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=49985548", "title": "Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=50213502", "title": "Native Prometheus Integration with Nginx", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49940152", "title": "Cloudflare opens more Enterprise-only features to all customers", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49800114", "title": "Bwbach, My Guardian Goblin", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49209921", "title": "The web server deployment model breaks at hobby scale", "mentions": 1}], "sentiment_by_month": {"2025-11": {"neutral": 2}, "2025-12": {"neutral": 1}, "2026-01": {"neutral": 1}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {"neutral": 1, "warn": 1}, "2026-09": {"neutral": 1}, "2026-10": {"neutral": 3, "recommend": 3}}, "quotes": [{"id": 804078145, "item_id": 50254884, "url": "https://news.ycombinator.com/item?id=50254884", "by": "photios", "date": "2026-10-27", "stance": "recommend", "quote": "I moved to Traefik and never looked back.", "excerpt": "> Nginx / envoy should be your default choice for most use cases. Nginx was there like 15 years ago and it feels it has been stuck there with no progress ever since. No metrics, no ACME certs... I moved to Traefik and never looked back.", "context": "", "use_case": "reverse proxy", "switched_from": "Nginx", "story": "Native Prometheus Integration with Nginx"}, {"id": 801839041, "item_id": 50114940, "url": "https://news.ycombinator.com/item?id=50114940", "by": "Balinares", "date": "2026-10-16", "stance": "recommend", "quote": "Traefik handles the routing and Let's Encrypt cert creation and renewal.", "excerpt": "I use Docker Compose so that I don't have to care if the daemon is a single binary or a whole stack: I can use the same setup for everything, and deploying an entire new thing in a maintainable way is quick and easy. Each app's startup/shutdown is managed using the same templated systemd unit, and Traefik handles the routing and Let's Encrypt cert creation and renewal. Basically I want things reliable and low-mainten", "context": "", "use_case": "reverse proxy and certificates", "switched_from": "", "story": "What I self-host"}, {"id": 801791472, "item_id": 50111967, "url": "https://news.ycombinator.com/item?id=50111967", "by": "c-hendricks", "date": "2026-10-15", "stance": "recommend", "quote": "I use traefik so with docker compose/labels it's real easy to give things a reverse proxy with an auth gate and other middleware", "excerpt": "I use traefik so with docker compose/labels it's real easy to give things a reverse proxy with an auth gate and other middleware There's lots of solutions, I also find compose hits the sweet spot for integration into my homelab", "context": "homelab", "use_case": "reverse proxy with auth", "switched_from": "", "story": "What I self-host"}, {"id": 800391059, "item_id": 50024441, "url": "https://news.ycombinator.com/item?id=50024441", "by": "K0IN", "date": "2026-10-09", "stance": "neutral", "quote": "everything behind traefik (with let's e encrypt)", "excerpt": "TeamSpeak, git backup(I use gittea) to backup public repos, backups in general, my website/blog, game servers, ssh(obv) for local app port forward, litellm as ai bridge to monitor usage, some of my own apps: (notification broker to send messages to my devices using a simple http push), everything behind traefik (with let's e encrypt)", "context": "", "use_case": "reverse proxy", "switched_from": "", "story": "Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?"}, {"id": 800167666, "item_id": 50010479, "url": "https://news.ycombinator.com/item?id=50010479", "by": "fak3r", "date": "2026-10-08", "stance": "neutral", "quote": "that's available to others via the NAT/firewall/Traefik", "excerpt": "Things I use from home and away, two main things: Vikunja https://vikunja.io/ - todo list manager, I use it on all my computers, and phone // Websites - various personal, and work websites that I need up 24/7. I self-host plenty at home, but most are things that are mainly needed at home like Jellyfin, however that's available to others via the NAT/firewall/Traefik, but other things stay inside the FW since I don't n", "context": "self-hosts at home", "use_case": "reverse proxy", "switched_from": "", "story": "Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?"}, {"id": 799109473, "item_id": 49944342, "url": "https://news.ycombinator.com/item?id=49944342", "by": "weightedreply", "date": "2026-10-03", "stance": "neutral", "quote": "This works pretty easily in a docker host with traefik handling domains, paths, and certificates.", "excerpt": "The feature I don't want to pay for but would be nice to have: deeper level proxied wildcards. > If you want to proxy a wildcard DNS record on a deeper level like .www.mycoolwebpage.xyz you can subscribe to Cloudflare Advanced Certificate Manager and get a certificate that is covering that wildcard \u00b9 \u00b2 When building out services in my smart home, I started with something like 'home.domain.com'. I used Let's Encrypt f", "context": "smart home self-hoster", "use_case": "reverse proxy for home services", "switched_from": "", "story": "Cloudflare opens more Enterprise-only features to all customers"}, {"id": 796809249, "item_id": 49800578, "url": "https://news.ycombinator.com/item?id=49800578", "by": "Algernoon", "date": "2026-09-22", "stance": "neutral", "quote": "I\u2019ve not had trouble with the default traefik proxy so far.", "excerpt": "It seems to be used by many large companies but with less open source projects of size. I would be interested in trying this proxy in the future if you do opensource it. I use coolify myself but I\u2019ve not had trouble with the default traefik proxy so far.", "context": "", "use_case": "reverse proxy", "switched_from": "", "story": "Bwbach, My Guardian Goblin"}, {"id": 787382944, "item_id": 49211434, "url": "https://news.ycombinator.com/item?id=49211434", "by": "SlavikCA", "date": "2026-08-07", "stance": "warn", "quote": "I tried to enable cache on Traefik. It went OOM in 2 minutes", "excerpt": "I have 5Gbps fiber at home. LAN is mostly 10Gbps. I'm hosting few hobbyist public websites. One is the library of hymns, songs, ... - mostly PDF, MP3, MIDI. OpnSense router -> Traefik -> Docker container. That Docker container runs on NAS, which is connected via 1Gbps port. Suddenly, last week I started to get over 1000 RPS. Was it scanner, parser, crawler, DDOS? I can't tell, as user agent was default Mac OS. It was", "context": "hosts hobbyist public websites at home", "use_case": "reverse proxy", "switched_from": "", "story": "The web server deployment model breaks at hobby scale"}, {"id": 786396545, "item_id": 49149784, "url": "https://news.ycombinator.com/item?id=49149784", "by": "pseudocomposer", "date": "2026-08-02", "stance": "neutral", "quote": "unify all my servers behind one Traefik ingress", "excerpt": "I\u2019ve been working on an Elm rewrite of the React FE of my federated social media service, Jonline (https://github.com/JonLatane/jonline). It\u2019s up at https://jonline.io (and https://bullcity.social and http://oakcity.social). Agents have been huge for me. In addition to the Elm app, I used them to: - build out ffmpeg/imagemagick image/video resizing - unify all my servers behind one Traefik ingress - build proper cros", "context": "", "use_case": "ingress for servers", "switched_from": "", "story": "Ask HN: What are you working on? (August 2026)"}, {"id": 745527841, "item_id": 46595490, "url": "https://news.ycombinator.com/item?id=46595490", "by": "tawman", "date": "2026-01-12", "stance": "neutral", "quote": "", "excerpt": "I do the same thing on my Hostinger VPS with Claude even though I have been using Linux 30 years. Just removes the friction and time. I version control the DevOps with git, and even had Claude setup automated backups to my Google Drive via cron. workdir/ \u251c\u2500\u2500 README.md \u251c\u2500\u2500 CLAUDE.md # Claude Code instructions \u251c\u2500\u2500 BACKUP.md # Backup documentation \u251c\u2500\u2500 .gitignore \u251c\u2500\u2500 traefik/ \u2502 \u251c\u2500\u2500 docker-compose.yml \u2502 \u2514\u2500\u2500 config/ \u2502 \u2514\u2500\u2500 ", "context": "Linux user for 30 years", "use_case": "reverse proxy on VPS", "switched_from": "", "story": "2026 is the Year of Self-hosting"}, {"id": 738356769, "item_id": 46147298, "url": "https://news.ycombinator.com/item?id=46147298", "by": "woile", "date": "2025-12-04", "stance": "neutral", "quote": "I use traefik as reverse proxy", "excerpt": "I'm no expert, so I'm not sure if I'll explain it correctly. But I've been using docker swarm in a server, I use traefik as reverse proxy, and it just doesn't seem to work (I've tried a lot) with ipv6 (issue that might be related https://github.com/moby/moby/issues/24379)", "context": "", "use_case": "reverse proxy", "switched_from": "", "story": "Uncloud - Tool for deploying containerised apps across servers without k8s"}, {"id": 735872593, "item_id": 45992037, "url": "https://news.ycombinator.com/item?id=45992037", "by": "wwwpatdelcom", "date": "2025-11-20", "stance": "neutral", "quote": "We included automatic SSL establishment via Traefik.", "excerpt": "Basically, this is software that allows you to deploy your own prediction market platform from scratch that you own and control. You can invite friends and add users, anyone can add questions and make bets toward those contracts. Most importantly, anyone can host this completely for free either on a local machine or a VPS. The setup process includes a command line interface which allows you to enter a few options and", "context": "", "use_case": "automatic SSL", "switched_from": "", "story": "Show HN: SocialPredict v2.1.0 \u2013 Easy to Deploy Prediction Markets"}, {"id": 734621634, "item_id": 45913852, "url": "https://news.ycombinator.com/item?id=45913852", "by": "nullify88", "date": "2025-11-13", "stance": "neutral", "quote": "Traefik and Cilium are the only helm charts I use", "excerpt": "Running my home lab at home, I've grown sick of constant Renovate PRs against the helm charts in use. I recall one \"minor\" update not long ago recently in CoreDNS was messing with the exposed ports in the service and installs broke for a lot of folks. If I need to run some software now, I `helm template` the resources and commit those to git. I'm so tired of some random \"Extended helm chart to customise labels / anno", "context": "runs a home lab", "use_case": "home lab ingress", "switched_from": "", "story": "Helm 4.0"}]}