Traefik provides a self‑hosted, cloud‑native application proxy, API gateway, and API management platform that automatically discovers services and generates routing rules without manual configuration. Its fully declarative, GitOps‑compatible stack supports dynamic updates, TLS automation, built‑in middleware, and a native Web Application Firewall, delivering enterprise‑grade security and observability for Kubernetes, Docker Swarm, and hybrid cloud environments.
Funding
$10M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
1OFounders
Product
Problem
Enterprises often rely on legacy API gateways and reverse proxies that require manual configuration, are not fully cloud‑native, and lack declarative, GitOps‑compatible workflows. This creates operational overhead, configuration drift, and limits scalability across hybrid and multi‑cloud environments.
Solution
Traefik offers a self‑hosted, cloud‑native platform that combines an application proxy, API gateway, and API management solution into a single, fully declarative stack. By automatically discovering services and generating routing rules, it eliminates manual configuration and supports dynamic updates without downtime. The platform is built for GitOps, allowing teams to store all routing, security, and policy definitions as code in version‑controlled repositories. Integrated middleware, distributed rate limiting, TLS automation (including Let’s Encrypt and SPIFFE), and a native Web Application Firewall provide enterprise‑grade security and traffic management. Observability is delivered through OpenTelemetry, distributed tracing, and real‑time dashboards, giving operators clear insight into API health and performance.
Target Audience
Primary users are DevOps, platform engineering, and site‑reliability teams that manage microservice traffic in Kubernetes, Docker Swarm, or hybrid cloud environments, as well as enterprises needing a unified, GitOps‑driven API gateway and management layer.
Features
- Automatic service discovery and dynamic routing for HTTP, HTTP/2, HTTP/3, TCP, UDP, gRPC, and WebSockets
- Fully declarative configuration via Kubernetes CRDs and GitOps pipelines, supporting any GitOps tool (e.g., Flux, Argo)
- Built‑in middleware suite (circuit breakers, retries, buffering, rate limiting, authentication, response compression)
- Integrated TLS management with Let’s Encrypt, SPIFFE, and custom certificates, plus distributed certificate provisioning
- Native Web Application Firewall powered by OWASP Coraza, delivered as a WASM plugin
- OpenTelemetry and built‑in dashboards for real‑time metrics, tracing (Jaeger, Zipkin) and alerts
- Multi‑protocol support for API Gateway features such as OIDC, JWT, OAuth2, LDAP, and HMAC access control
- Extensible plugin architecture with Go and WebAssembly plugins for custom functionality