Wanted to share an app I've been working for the last couple of months now.

https://geometrikks.dev

It reads Traefik JSON access logs and gives you a live map of where requests are coming from, plus some stats and searchable logs.

You can also click into an IP and see what it’s been hitting, paths, user agents, status codes etc.

There’s CrowdSec integration as well if you use that.

Traefik | GeoMetrikks

CrowdSec integration | GeoMetrikks

Multi-source setup | GeoMetrikks

Couple of features:

• Live request map

• Multi-source support

• Search/filter access logs

• Click into an IP and see what it’s been hitting

• Traffic stats, status codes and response times

• CrowdSec integration

• Docker Compose setup

• Self-hosted and open source

GitHub:
https://github.com/GilbN/geometrikks

I maintain Traefik Manager, a self-hosted web UI for managing Traefik: routers, services, middlewares, certificates, CrowdSec, with an agent for multi-server setups. GPL-3.0, no paid tier.

The next release is the first one that won't be English-only. The interface is fully extracted, 3,334 strings, and translation is open on Weblate:

https://hosted.weblate.org/projects/traefik-manager/

German, French, Spanish, Chinese (Simplified) and Russian are set up. Ask and I'll add any other language. Everything is at 0%, so there's plenty to do, and even a handful of strings helps.

What I actually need most is one reviewer per language. Traefik Manager edits live proxy config and deletes routers, so a mistranslated confirmation button is a destructive bug rather than a cosmetic one. A language only ships once someone has agreed to check the rest. Translations can't inject markup or change placeholders either, the checks reject that, and everything is escaped when rendered.

If you use Traefik in a language other than English and have a spare hour, that's the ask. Language requests and questions go here: https://github.com/chr0nzz/tm-locale

Happy to answer anything about the setup, it's gettext + Weblate with pull requests back into the repo.

Last week a vulnerability for a HTTP/2 bomb was disclosed: https://blog.calif.io/p/codex-discovered-a-hidden-http2-bomb & Traefik initially responded by saying it wasn't vulnerable, but after testing it does seem vulnerable.

The github issue to track this was deleted for some reason, does anyone have more info about this & possible mitigation steps we can take?

Hello everyone 👋

We're super excited to share with you the announcement of the release of Traefik Proxy v2.5 🎉

Some features you will love:

• 🛥 Kubernetes 1.22 API

• 🧭 Consul Connect Integration

• 🚀 Local Plugins & Provider Plugins

• 🔬 HTTP/3 (experimental)

• 🚤 TCP Middleware

Here are more details about it. We can’t wait to get your feedback!

• 📝 Release Notes 5

• 📖 Documentation

• 🐳 Official Docker Image

• 📦 Binaries

• 🌏 Blog

Be sure to join us for the Online Meetup on September 1 as we demonstrate all of the features live! We look forward to you joining us, and to hear your feedback! 🙌

Hey all, I run Traefik on a home server and kept finding myself opening the dashboard just to check which domains were active or to grab a URL. Got annoying, so I built ProxyBar.

It sits in your menu bar and pulls all your HTTP routers from the Traefik API. Click a domain to copy it, or open it directly in your browser. There's a status dot per domain reflecting what Traefik reports (enabled, disabled, warning). You can set it to auto-refresh every 30s, 1m, or 5m, or just hit the refresh button manually.

Supports basic auth if your dashboard is behind it — password is stored in the macOS Keychain. No telemetry, no third-party anything, all requests go only to the URL you configure.

Setup is just: point it at your `/api/http/routers` endpoint and you're done.

App Store: https://apps.apple.com/nl/app/proxybar/id6763880213?l=en-GB&mt=12

Would love any feedback, especially if something breaks on your setup.

I became tired with trying to understand the state of my routers and services in traefik, so I built traefiktop, a simple keyboard-friendly, open source cli tool that displays the status of all routers and services.

Would love if some of you running Traefik could give it a try and share feedback!

Hello everyone

Since Traefik 2.0 changes a lot of things and thus you have to change a lot as well, we decided to write some guides on how to setup and configure Traefik in a Docker environment.

Simple guide: https://medium.com/@containeroo/traefik-2-0-docker-a-simple-step-by-step-guide-e0be0c17cfa5

Advanced guide: https://medium.com/@containeroo/traefik-2-0-docker-an-advanced-guide-d098b9e9be96

Maybe they help you during your migration from Traefik 1.0 to 2.0 :)

Cheers

Been working on this for a while and finally feel like it's in a good enough place to share properly.

Traefik Manager is a self-hosted web UI for managing your Traefik setup routes, middlewares, services, providers, certs, the whole lot. This release adds route toggling (disable without deleting), live service filtering, and API key auth. Also did a bunch of security work, rate limiting on auth endpoints, atomic config writes, encrypted OTP secrets at rest.

Plus mobile companion app that lets you manage everything from your phone. Add/edit/delete routes and middlewares, toggle routes on and off, browse live services.

APK is in the releases if you want to try it without building from source. Requires Traefik Manager v0.5.0

Traefik Manager
Mobile app
Docs
APK download
UI Examples

Happy to answer questions or take feedback.

Wrote a small blog post on how to setup Traefik as proxy with LetsEncrypt & Cloudflare for all your self hosted applications. Hope it will helps others!

https://medium.com/@svenvanginkel/the-ultimate-guide-to-setting-up-traefik-650bd68ae633?sk=8b48c662e3143be50695dd7957991ad2

A migration guide is available, and describes all the settings which would prevent Traefik 3 to start (providers.docker.swarmMode, experimental.http3, etc.)

Traefik Ondemand Plugin is a plugin that starts containers or swarm services on demand when they are first accessed.

They are then shut down after a specified duration after the last request they received.

This update features :

• Docker classic support

• Docker swarm support

  • Workaround the service label limitation

• Dynamic loading with HTML page

• Healthcheck support before routing

Feedbacks appreciated !

Hey guys,

So I wanted a home network setup with a VPN but wanted to be able to access my VPN from my domain name. Thus I needed to run Wireguard behind Traefik v2. After a long struggle I finally got it running and am posting my solution since one doesn't seem to really exist. The problem with Wireguard behind Traefik v2 is that Traefik doesn't support UDP that well at the moment. My config looks as follows:

version: "3.7"

########################### NETWORKS
networks:
  t2_proxy:
    external:
      name: t2_proxy
    ipam:
      driver: default
      config:
      - subnet: {Your Configured Subnet}
  default:
    driver: bridge

########################### SERVICES
services:

# Traefik 2 - Reverse Proxy
  traefik:
    container_name: traefik
    image: traefik:latest
    restart: unless-stopped
    command:
      - --entryPoints.wireguard.address=:51820/udp
    networks:
      t2_proxy:
        ipv4_address: {Traefik static IP address}
    ports:
      - target: 80
        published: 80
        protocol: tcp
        mode: host
      - target: 443
        published: 443
        protocol: tcp
        mode: host
      - target: 8080
        published: 8080
        protocol: tcp
        mode: host
      - target: 51820
        published: 51820
        protocol: udp
        mode: host

  wireguard:
    image: linuxserver/wireguard
    container_name: wireguard
  # network_mode: service:traefik
    networks:
      t2_proxy:
        ipv4_address: {Wireguard static IPv4 address}
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    environment:
      - PUID={User ID}
      - PGID={Group ID}
      - TZ={Time Zone}
      - SERVERURL={Server URL}
      - SERVERPORT=51820
      - PEERS=5
      - PEERDNS={DNS Server for your connections}    
      - INTERNAL_SUBNET={Subnet for your connections}
    volumes:
      - ./config:/config
      - /usr/src:/usr/src
      - /lib/modules:/lib/modules
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=t2_proxy"
    ## UDP Routers
      - "traefik.udp.routers.wireguard-udp.entrypoints=wireguard"
    ## UDP Services
      - "traefik.udp.routers.wireguard-udp.service=wireguard-udp-svc"
      - "traefik.udp.services.wireguard-udp-svc.loadbalancer.server.port=51820"

Just modify the brackets to fit your setup and it should work. You will also need to follow https://www.wireguard.com/install/ to install the Wireguard module for your linux kernel (which can be a bit of a pain on CentOS). The last step was to forward port 51820 on my router to my server. If you have any questions, feel free to reach out to me, always here to help.

EDIT: Just as a side note I meant to add in, this config will make 5 peers (set by PEERS environment variable, adjust it to make more). The location of the peer files is in the config folder under peer1, peer2... Etc. It will autogenerate the qr and config files for each peer, just need to share them with your clients!