traefik-kop

traefik-kop

Docker-to-Redis discovery agent for Traefik multi-host routing

431stars
24forks
Last commit: 1mo ago
Repo age: 5y old

traefik-kop is a small Go-based discovery agent that reads Docker container labels on a local node and publishes equivalent service definitions to Redis so a single central Traefik instance (configured with a Redis provider) can route to services running on multiple Docker hosts.

Key Features

  • Mirrors Traefik Docker provider logic: reads container labels and translates them into Traefik service/route definitions
  • Publishes service definitions into Redis so a remote Traefik instance can consume them
  • Flexible IP binding: explicit bind-ip, interface-derived IP, container networking overrides, or auto-detection
  • Namespace and label-prefix filtering to target or isolate sets of containers
  • Load balancer merging option to combine endpoints from multiple nodes for the same service
  • Configurable via CLI flags or environment variables; supports redis auth, TTL, and poll interval

Use Cases

  • Expose services from multiple non-swarm Docker hosts through a single public Traefik reverse proxy
  • Centralized ingress routing for heterogenous Docker hosts where Traefik cannot run locally on every node
  • Multi-tenant or environment separation using namespaces or custom label prefixes to control which containers are published

Limitations and Considerations

  • Requires a reachable Redis instance and a Traefik instance configured to use the Redis provider
  • Needs access to the Docker socket on each node; running with this access has security implications
  • If redis-ttl is not used or load balancer merging is enabled, stale/backing IP entries can persist when node IPs change
  • Some deployment modes (host networking, multiple port bindings) require explicit labels or host networking for correct port selection

traefik-kop is a pragmatic solution when you need Traefik-style label-driven routing across multiple Docker hosts without Swarm or Kubernetes. It is lightweight, configurable, and designed to integrate with existing Traefik Docker-provider semantics.

Categories:

Tags:

Tech Stack:

Share:

Similar Services

Caddy

Caddy

Extensible web server and reverse proxy with automatic HTTPS

69.2k
4.6k
Last commit: 1d ago

Caddy is a fast, extensible Go web server and reverse proxy with automatic HTTPS (ACME), HTTP/1.1, HTTP/2, and HTTP/3 support, and a JSON config API.

Alternative to:
Caddy Cloud
Caddy Cloud
+8
Traefik Proxy

Traefik Proxy

Cloud-native reverse proxy, load balancer, and ingress controller

61.1k
5.8k
Last commit: 1d ago

Traefik Proxy is a dynamic reverse proxy and load balancer that auto-discovers services from Docker, Kubernetes, and other providers, with HTTPS, routing, and observabili...

Alternative to:
Traefik Cloud
Traefik Cloud
+7
Kong Gateway

Kong Gateway

Cloud-native API and LLM gateway with extensible plugins

42.5k
5k
Last commit: 2mo ago

Kong Gateway is a high-performance, cloud-native API gateway for routing, securing, and observing API traffic, with an extensible plugin system and Kubernetes support.

Alternative to:
Amazon API Gateway
Amazon API Gateway
+7
Nginx Proxy Manager

Nginx Proxy Manager

Web UI to manage Nginx reverse proxy hosts and SSL certificates

31.1k
3.5k
Last commit: 2d ago

Nginx Proxy Manager is a web-based admin panel for managing Nginx reverse proxy hosts, redirects, streams, and Let’s Encrypt SSL certificates via Docker.

Alternative to:
NGINX Management Suite
NGINX Management Suite
+6
NGINX

NGINX

High-performance web server, reverse proxy, and load balancer

29.1k
7.7k
Last commit: 2d ago

NGINX is a high-performance HTTP server and reverse proxy with caching, load balancing, TLS termination, and TCP/UDP proxying via a modular architecture.

Alternative to:
NGINX Management Suite
NGINX Management Suite
+2
Pangolin

Pangolin

Identity-aware VPN and reverse proxy for secure remote access

18k
532
Last commit: 2d ago

Open-source identity-based remote access platform combining WireGuard VPN and tunneled reverse proxy access with granular zero-trust controls.

Alternative to:
Cloudflare Access
Cloudflare Access
+16