Alternatives to Traefik
Reverse proxy that discovers services automatically from Docker, Kubernetes and more. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
Traefik
Reverse proxy that discovers services automatically from Docker, Kubernetes and more.
Replacements
Listings that take over the same core job as Traefik.
Nginx
Web server, reverse proxy, cache and load balancer.
Nginx is a BSD-licensed web server, reverse proxy and load balancer, but routes are written by hand instead of discovered from Docker labels, and certificates need separate tooling.
Caddy
A web server that obtains and renews HTTPS certificates automatically, with a config file short enough to fit on a postcard.
Caddy is an Apache-2.0 reverse proxy with automatic HTTPS and very short configuration, but it lacks Traefik's automatic route discovery, and adding modules means rebuilding the binary.
Nginx Proxy Manager
Browser interface for Nginx reverse proxy hosts with automatic Let's Encrypt certificates.
Nginx Proxy Manager manages Nginx proxy hosts and Let's Encrypt certificates from a browser interface instead of labels, ships only as a Docker image, and puts advanced settings in snippets.
HAProxy
High-performance TCP and HTTP load balancer and proxy.
HAProxy is a GPL-2.0 TCP and HTTP load balancer that handles very high connection rates, but it has its own configuration language and no native automatic certificate issuance.
Apache HTTP Server
The long-running modular web server behind a large share of the web.
Apache HTTP Server is a modular Apache-2.0 web server that can reverse proxy, with a huge module ecosystem, but it uses more memory per connection and needs manual configuration.
Pomerium
An identity-aware reverse proxy that gives secure access to internal applications without a VPN.
Pomerium is an identity-aware reverse proxy that adds per-request authorization through any OIDC provider, but it requires an existing identity provider and is self-hosted only.
Similar software
Related functionality, not a direct replacement.
Cloudflare Tunnel
Exposes a service on your machine to the internet through Cloudflare without opening a single port in your firewall.
ngrok
A tunnelling agent and gateway that exposes a local app to the internet with request inspection.
frp
Reach private network services through a reverse proxy.
bore
Forward a local TCP port through a remote server.
dnsdist
A DNS load balancer that routes queries to backend servers and blocks abusive traffic with rules.
