Learn Traefik (cloud-native edge router and reverse proxy) from the ground up to production-grade: prerequisites & environment setup, history & why you need Traefik, architecture & core concepts, Traefik installation, static configuration, Docker provider labels & discovery, routers & rules, services & load balancing, middleware fundamentals, authentication middlewares, headers & security middlewares, path & request middlewares, rate limiting & circuit breaker, compression & buffering, TLS configuration, Let's Encrypt & ACME, wildcard certificates & DNS challenge, custom certificates & mutual TLS, TCP & UDP routing, file provider & dynamic configuration, Kubernetes provider ingress, Kubernetes CRDs IngressRoute, Kubernetes service mesh Traefik Mesh, metrics & Prometheus, access logs & debugging, distributed tracing, high availability & clustering, performance tuning, security hardening, plugins & extensibility, to production checklist & best practices with 31 episodes in total.
Before touching Traefik, you need to understand the concepts of reverse proxy, HTTP, DNS, TLS, as well as the basics of Docker and YAML. In this episode you prepare your environment, verify Docker and supporting tools, and build the skill foundation used throughout the series.

This episode traces the evolution of the reverse proxy from traditional web servers to the cloud-native era, the story of Traefik's birth by Containous in 2015, the reasons why Traefik is different, as well as comparisons with NGINX, HAProxy, Envoy, and Caddy along with the most common use cases.

This episode dissects Traefik architecture: entrypoints, routers, middlewares, services, and providers as the five core components. You also learn the difference between static and dynamic configuration, the service discovery mechanism, and the complete flow of a request through the Traefik pipeline.

This episode guides you through installing Traefik using four methods: binary, Docker container, Docker Compose, and Kubernetes. The main focus is on the Docker and Compose approaches, including volume mounts, network, and port binding, then performing a first run, accessing the dashboard, and verifying the logs.

This episode dissects Traefik static configuration: the YAML, TOML, CLI, and environment variable formats along with their priority order. You learn entrypoint definitions, enabling a secure API and dashboard, certificate resolver configuration, and access log and logging level settings.

This episode unlocks Traefik's service discovery power through the Docker Provider: enabling the provider, Docker socket access, the traefik.http label structure, basic routing with Host and Path, load balancer service configuration, and how containers that start and stop are updated automatically.

This episode goes deeper into Traefik routers and rules: rule syntax, all matchers such as Host, HostRegexp, Path, PathPrefix, Method, Headers, and Query, the AND, OR, and NOT logical operators, complex rule examples, and automatic and manual priority rules for resolving routing conflicts.

This episode covers Traefik services and load balancing: HTTP, TCP, UDP, weighted, and mirroring service types, server list configuration, weight distribution, sticky sessions, and health checks that ensure only healthy backends receive traffic.

This episode opens up the Traefik middleware concept: the request chain and response chain, execution order, how to chain many middlewares on a single router, HTTP, TCP, and plugin middleware types, and common patterns for authentication, security headers, and request-response modification.

This episode covers Traefik authentication middlewares: BasicAuth with htpasswd passwords, DigestAuth, ForwardAuth which delegates authentication to external services such as Authelia, Authentik, and OAuth2 Proxy, and IPWhiteList for restricting access from specific IP addresses.
