Traefik on Teddy Ferdinand

OpenSource Traefik ratings with Matomo

Mon, 15 Feb 2021 07:34:00 +0000

Some time ago, I talked to you about tracking and why I care about my privacy. In my conclusion, I indicated that user tracking was still a useful tool for a company, as long as it was ethical and respectful of users.

However, very often, I see that Google Analytics is used by the sites I browse on. It is far (even very far) from being respectful of your users’ data. Even worse! You allow Google to know the activity of your site from end to end and to know how to better target its ads (among others).

Create Vagrant boxes easily using Packer

Mon, 11 Jan 2021 06:42:00 +0000

A few months ago, I wrote a post to explain how to easily create a local Kubernetes cluster leveraging Vagrant and Traefik. You can find it here:

Create a local Kubernetes cluster with Vagrant

Testing Kubernetes is quite easy thanks to solutions such as Minikube. However, when you want to test cluster-specific features, such as load balancing or failover, it is not necessarily suitable anymore. It is possible to build your Kubernetes infrastructure on servers, or by using managed services…

Teddy FERDINAND

Today, I suggest to see how we can accelerate this creation by building ourselves the box used by Vagrant, preconfigured with our tools. This post is the continuation of the one above. Some notions will not be discussed again.

Create a local Kubernetes cluster with Vagrant

Tue, 15 Sep 2020 07:00:57 +0000

Testing Kubernetes is quite easy thanks to solutions such as Minikube.

However, when you want to test cluster-specific features, such as load balancing or failover, it is not necessarily suitable anymore.

It is possible to build your Kubernetes infrastructure on servers, or by using managed services from a cloud provider (Kapsule at Scaleway, AKS at Azure, GKE at GCP or EKS at AWS for example).

Nevertheless, these solutions cost money. When you just want to test functionalities or self-training, it’s not necessarily appropriate.

Traefik 2.3 + ECS + Fargate : Reverse proxy serverless in AWS

Wed, 29 Jul 2020 15:45:30 +0000

Traefik is a reverse proxy that we have already mentioned on this blog in the past. Very powerful coupled with containers, it allows a fine and light management of traffic.

A few days ago, Containous, the editor of Traefik, announced the release of Traefik 2.3.0-rc2. This new version brings some changes, including :

The addition of a new service: Traefik Pilot.
The ability to add plugins to Traefik
The addition of the ECS provider

I have already covered the first two points on this blog and I will focus here on the support of the ECS (Elastic Container Service) backend on AWS via a new Traefik provider.

Traefik 2.3 : Towards plugins and beyond!

Thu, 23 Jul 2020 06:38:07 +0000

Traefik 2.3 (codename: Picodon - picodon is a cheese, which you can see in the banner of this article) is available as a release candidate since a few days. More than a simple version increment, it brings a lot of new features.

Two big new features caught my attention:

The new service of Traefik : Traefik Pilot
Adding plugin management

Another new feature, compatibility with ECS will be covered in a future article.

Why and how I got rid of Disqus

Mon, 20 Jul 2020 08:00:00 +0000

Lately, I’ve made some changes to this blog, discreetly. One of the main changes is the management of comments, goodbye Disqus, hello Commento. I’ll explain why…

A bit of history of this blog

At the beginning (I’m talking about February 2019, not old times) of this blog, my goal was rather simplistic: I wanted to share my knowledge, my vision on certain subjects and talk about anecdotes of all kinds. A year and a half and forty posts later, goal achieved!

Traefik 2 - Reverse proxy in Kubernetes

Wed, 01 Apr 2020 20:01:29 +0000

Today, we deploy more and more applications and micro-services in Kubernetes. Managing all the entry points of these applications can be problematic. To facilitate this management, there are ingress controllers, Traefik is one of them.

Disclaimer : This post is a translated version of the blog post I made for my company, you can find the french version here, on WeScale blog.

Traefik 2 - One ingress controller to control them all

Pourquoi utiliser Traefik ?

Traefik 2 - TLS Configuration (Rank A+ on SSLLabs)

Mon, 03 Feb 2020 06:50:00 +0000

Disclaimer: Due to the descriptions I give below, this post will be longer than my usual posts.

Security is everyone’s business. As a security architect, I’m quite sensitive to these subjects.

As I talked about it recently, I migrated the reverse proxy of this blog from Traefik 1 to Traefik 2 recently. So I decided to configure the TLS part afterwards, my goal being to have a secure site (and therefore safe for my users) by letting Traefik manage all this part.

Extraction of Traefik accesslogs and dashboard creation

Thu, 16 Jan 2020 20:21:00 +0000

A few weeks ago, I wrote an article explaining the migration from Traefik 1 to Traefik 2, but this time I propose to address a crucial point in the implementation of an application, its monitoring.

This article explains how I set up my dashboarding, it doesn’t explain in any case the “enterprise” dashboarding that should be more reliable and complete on some points.

During this article, I will explain how to create this type of dashboard in a very basic way.

Small migration guide from Traefik 1 to Traefik 2

Mon, 06 Jan 2020 06:03:56 +0000

I recently moved the front of this blog from Traefik 1 to Traefik 2, and to say the least, it’s no picnic.

My Traefik use case

I use Traefik as a load balancer/reverse proxy front in a Kubernetes infrastructure. My use is very basic. Depending on certain path and/or domain, I redirect to separate pods. In the case below, I will consider that I have only one pod, this blog. I also manage my certificates with Traefik via Let’s Encrypt.