Traefik on Teddy Ferdinand

Traefik 2.3 + ECS + Fargate : Reverse proxy serverless in AWS

Wed, 29 Jul 2020 15:45:30 +0000

Traefik is a reverse proxy that we have already mentioned on this blog in the past. Very powerful coupled with containers, it allows a fine and light management of traffic.

A few days ago, Containous, the editor of Traefik, announced the release of Traefik 2.3.0-rc2. This new version brings some changes, including :

The addition of a new service: Traefik Pilot.
The ability to add plugins to Traefik
The addition of the ECS provider

I have already covered the first two points on this blog and I will focus here on the support of the ECS (Elastic Container Service) backend on AWS via a new Traefik provider.

Traefik 2.3 : Towards plugins and beyond!

Thu, 23 Jul 2020 06:38:07 +0000

Traefik 2.3 (codename: Picodon - picodon is a cheese, which you can see in the banner of this article) is available as a release candidate since a few days. More than a simple version increment, it brings a lot of new features.

Two big new features caught my attention:

The new service of Traefik : Traefik Pilot
Adding plugin management

Another new feature, compatibility with ECS will be covered in a future article.

Traefik 2 - Reverse proxy in Kubernetes

Wed, 01 Apr 2020 20:01:29 +0000

Today, we deploy more and more applications and micro-services in Kubernetes. Managing all the entry points of these applications can be problematic. To facilitate this management, there are ingress controllers, Traefik is one of them.

Disclaimer : This post is a translated version of the blog post I made for my company, you can find the french version here, on WeScale blog.

Traefik 2 - One ingress controller to control them all

Pourquoi utiliser Traefik ?

Traefik 2 - TLS Configuration (Rank A+ on SSLLabs)

Mon, 03 Feb 2020 06:50:00 +0000

Disclaimer: Due to the descriptions I give below, this post will be longer than my usual posts.

Security is everyone’s business. As a security architect, I’m quite sensitive to these subjects.

As I talked about it recently, I migrated the reverse proxy of this blog from Traefik 1 to Traefik 2 recently. So I decided to configure the TLS part afterwards, my goal being to have a secure site (and therefore safe for my users) by letting Traefik manage all this part.

Extraction of Traefik accesslogs and dashboard creation

Thu, 16 Jan 2020 20:21:00 +0000

A few weeks ago, I wrote an article explaining the migration from Traefik 1 to Traefik 2, but this time I propose to address a crucial point in the implementation of an application, its monitoring.

This article explains how I set up my dashboarding, it doesn’t explain in any case the “enterprise” dashboarding that should be more reliable and complete on some points.

During this article, I will explain how to create this type of dashboard in a very basic way.

Small migration guide from Traefik 1 to Traefik 2

Mon, 06 Jan 2020 06:03:56 +0000

I recently moved the front of this blog from Traefik 1 to Traefik 2, and to say the least, it’s no picnic.

My Traefik use case

I use Traefik as a load balancer/reverse proxy front in a Kubernetes infrastructure. My use is very basic. Depending on certain path and/or domain, I redirect to separate pods. In the case below, I will consider that I have only one pod, this blog. I also manage my certificates with Traefik via Let’s Encrypt.