"This Website is Not Secured" You Had One Job, Configuring the Edge Proxy!
summary
Traefik presents concrete automation: it watches Docker and Kubernetes APIs, infers entryPoints/frontends/backends from container labels, requests certificates via ACME/Let's Encrypt and renews them, rewrites paths and upgrades WebSockets, and supports TCP routing and SNI. A distributed Enterprise mode stores credentials separately, provides HA and autoscaling, and a version 2 API renames concepts toward routers/services and adds TCP and layer 4 support; try the docker-compose labels and the Kubernetes Ingress examples to see it working.
AI-written summary · about
chapters (7)
- 0:00Start
- 1:22What Problem Do I Want To Solve
- 5:54Core Concepts
- 6:56Auto-Discovery
- 21:05Configure Nginx with Websockets
- 25:48Auto Scalability
- 29:06Announcements
related talks
31mIntroduction to Traefik
45mLet me handle that for you... Why you need a reverse proxy in your architecture
34mInjecting Security at the Cloud Edge
33mBuilding a Secure, Multi-Protocol and Multi-Tenant Cluster for Internet-Facing Services [A]
39mHow to Reconcile Security and Agility for the Good of Your Applications
57mThe Kubernetes Sessions Security
57mBulletproof Microservices with Spring and Kubernetes
25mKubernetes Ingress-Nginx Security from Beginner to Expert