traefik-kop logo

traefik-kop

Docker-to-Redis discovery agent for Traefik multi-host routing

510 stars 27 forks last commit first released MIT

Actively maintained

Last commit 11 May 2026.

traefik-kop is a small Go-based discovery agent that reads Docker container labels on a local node and publishes equivalent service definitions to Redis so a single central Traefik instance (configured with a Redis provider) can route to services running on multiple Docker hosts.

Key Features

  • Mirrors Traefik Docker provider logic: reads container labels and translates them into Traefik service/route definitions
  • Publishes service definitions into Redis so a remote Traefik instance can consume them
  • Flexible IP binding: explicit bind-ip, interface-derived IP, container networking overrides, or auto-detection
  • Namespace and label-prefix filtering to target or isolate sets of containers
  • Load balancer merging option to combine endpoints from multiple nodes for the same service
  • Configurable via CLI flags or environment variables; supports redis auth, TTL, and poll interval

Use Cases

  • Expose services from multiple non-swarm Docker hosts through a single public Traefik reverse proxy
  • Centralized ingress routing for heterogenous Docker hosts where Traefik cannot run locally on every node
  • Multi-tenant or environment separation using namespaces or custom label prefixes to control which containers are published

Limitations and Considerations

  • Requires a reachable Redis instance and a Traefik instance configured to use the Redis provider
  • Needs access to the Docker socket on each node; running with this access has security implications
  • If redis-ttl is not used or load balancer merging is enabled, stale/backing IP entries can persist when node IPs change
  • Some deployment modes (host networking, multiple port bindings) require explicit labels or host networking for correct port selection

traefik-kop is a pragmatic solution when you need Traefik-style label-driven routing across multiple Docker hosts without Swarm or Kubernetes. It is lightweight, configurable, and designed to integrate with existing Traefik Docker-provider semantics.

Categories:

Tags:

Tech Stack:

Share:

Similar to traefik-kop

Zoraxy logo

Zoraxy

HTTP reverse proxy and gateway with web UI and real-time analytics

5.4k
320
Last commit

A general-purpose HTTP reverse proxy and forwarding tool for homelabs, offering web UI, ACME/TLS, stream proxy, plugins and realtime monitoring.

AGPL-3.0Actively maintained
Alternative to:
ngrok logo
ngrok
+16
sish logo

sish

SSH-based reverse tunneling for HTTP(S), WebSockets, and TCP

4.7k
333
Last commit

sish is an open-source Serveo/ngrok alternative that exposes local HTTP(S), WebSockets, and TCP services to the internet using SSH reverse tunnels.

MITActively maintained
Alternative to:
ngrok logo
ngrok
+3

nforwardauth

Lightweight forward-auth service for reverse proxies

157
8
Last commit

A minimal, Rust-based forward authentication middleware for reverse proxies (Traefik, Caddy, nginx) using a passwd file and signed auth tokens.

MITActively maintained
Alternative to:
Cloudflare Access logo
Cloudflare Access
+9
Varnish Cache logo

Varnish Cache

High-performance HTTP accelerator and reverse proxy cache

4k
394
Last commit

Varnish Cache is a high-performance HTTP reverse proxy cache for accelerating web applications and APIs with flexible caching rules and detailed request logging.

Slowing down
Alternative to:
Cloudflare CDN logo
Cloudflare CDN
+5

Static Web Server

High-performance static file web server with TLS and HTTP/2

2.3k
131
Last commit

Static Web Server (SWS) is a lightweight, cross-platform Rust web server for serving static files with HTTP/2, TLS, compression, caching headers, and SPA fallbacks.

Apache-2.0Actively maintained
Alternative to:
Apache HTTP Server logo
Apache HTTP Server
+5
g3proxy logo

g3proxy

Enterprise-oriented generic forward proxy and TCP/TLS stream proxy

894
81
Last commit

High-performance Rust proxy supporting HTTP/SOCKS5 forwarding, transparent proxying, TLS MITM, ICAP integration, ACLs, auth, and observability features.

Apache-2.0Actively maintained
Alternative to:
Bright Data logo
Bright Data
+10