# Traefik

27 Hacker News commenters recommended Traefik and 8 criticized it, November 2025 to November 2026. It was recommended in 10 of 13 months. It meets the Hacker Approved badge rule.

**Verdict:** People recommend Traefik for automatic Docker and Kubernetes routing, plus hands-off HTTPS certificates and easy setup. Critics note ingress annotation handling is inconsistent and some version updates break setups.

## Why people recommend it

- Automatic routing from Docker labels (3 comments): "we chose traefik because of the automatic docker label based dynamic routing" ([source](https://news.ycombinator.com/item?id=46674972)) "with docker compose/labels it's real easy to give things a reverse proxy with an auth gate and other middleware" ([source](https://news.ycombinator.com/item?id=50111967)) "This works pretty easily in a docker host with traefik handling domains, paths, and certificates." ([source](https://news.ycombinator.com/item?id=49944342))
- Handles HTTPS and Let's Encrypt certificates (4 comments): "Gives me TLS termination and actual domain names for the services that I want to be publicly accessible." ([source](https://news.ycombinator.com/item?id=50024302)) "Traefik handles the routing and Let's Encrypt cert creation and renewal." ([source](https://news.ycombinator.com/item?id=50114940)) "does HTTPS almost as seamlessly as Caddy and is geared more for production and enterprise" ([source](https://news.ycombinator.com/item?id=50165735))
- Easy to set up and forget (3 comments): "Traefik is so easy to plug in and forget about" ([source](https://news.ycombinator.com/item?id=47299382)) "I've not had trouble with the default traefik proxy so far" ([source](https://news.ycombinator.com/item?id=49800578)) "I moved to Traefik and never looked back." ([source](https://news.ycombinator.com/item?id=50254884))
- Capable routing and load balancing (2 comments): "for more involved things like multiple load balancing backends, rewriting paths and headers and so on I've found it really good" ([source](https://news.ycombinator.com/item?id=48141994)) "Traefik is far more capable, for example." ([source](https://news.ycombinator.com/item?id=47308044))

## What people warn about

- Ingress annotation handling is inconsistent (2 comments): "Traefik tries very hard to be an option in Kubernetes space, with some promising concepts, but supporting random annotations is not it." ([source](https://news.ycombinator.com/item?id=45931094)) "The main reason I dislike Traefik is because you can get away with broken ingress objects" ([source](https://news.ycombinator.com/item?id=45912854))
- Breaks in some versions or setups (3 comments): "I use traefik as reverse proxy, and it just doesn't seem to work" ([source](https://news.ycombinator.com/item?id=46147298)) "the Photoprism image also didn't work on IPv6 because of Traefik" ([source](https://news.ycombinator.com/item?id=47602405)) "I'm gonna stay with Traefik and bare with the version issue" ([source](https://news.ycombinator.com/item?id=49281048))

## Alternatives hackers recommend

- [Envoy Proxy](https://hackerapproved.com/p/envoy.md): 14 recommend
- [Kubernetes Ingress NGINX](https://hackerapproved.com/p/ingress-nginx.md): 8 recommend
- [Tailscale Serve](https://hackerapproved.com/p/tailscale-serve.md): 5 recommend

## Cite as

Hacker Approved, "Traefik", https://hackerapproved.com/p/traefik/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).