Skip to content

Features

High Availability

The control plane is a key component of Traefik Enterprise. It is responsible for storing all cluster data, including events, TLS certificates, and the Traefik Proxy configuration. It is also in charge of connecting to the orchestrator to generate the data plane routing configuration and manage the service mesh.

Since it is such a critical part of your system, Traefik Enterprise is designed from the ground up to be fault tolerant: the control plane runs natively in cluster mode without any extra configuration or external key-value store. It ensures your data is always available and safe by using an internal distributed store, implemented with Raft.

You can find more information on high availability by visiting Concepts -> High Availability.

Scalability

The data plane is in charge of forwarding the incoming requests to the backend applications running inside your infrastructure. It is designed to scale horizontally in order to face irregular network loads. Traefik Enterprise handles high loads easily: just add more nodes to the data plane to handle the additional requests. When the peak is gone, shrink the number of nodes to save resources. Of course, this process can be handled automatically using auto-scaling tools.

Security

By splitting responsibilities between two planes, Traefik Enterprise follows the principle of "separation of concerns." To ensure that sensitive information only runs within a closed and safe environment, the control plane is not exposed to the outside. As a result, any malicious action from external traffic stays within the data plane and your platform stays safe. Moreover, Traefik Enterprise only relies on encrypted communications between nodes, to add an extra layer of security.

Service Mesh

New. Traefik Enterprise 2.2 introduces an optional integrated service mesh -- a feature not provided by Traefik Proxy. While Traefik Enterprise ingress nodes control how external traffic can access your services, Traefik Enterprise service mesh nodes manage internal traffic between multiple microservices that make up an application on your cluster.

The service mesh takes advantage of Traefik Enterprise's architecture and is integrated with its control plane. It conforms to the current Service Mesh Interface (SMI) specification and supports such features as traffic access control, traffic splitting, and the circuit breaker pattern.

Smooth Operations

Installing and managing a Raft-based application is usually a painful experience. Because Traefik Proxy's popularity is due to its usability and refreshing user experience, however, we have extended those benefits to Traefik Enterprise for you.

Traefik Enterprise comes with an additional command-line tool called teectl (pronounced "teakettle") that can deploy and operate a cluster with several nodes with a single command line. We hope you will love using this time-saving tool.

Dashboard

The Traefik Enterprise dashboard shows you all the relevant information about your cluster at a glance.

  • Monitor and view error reporting for your cluster:

Dashboard Overview

  • Visualize the nodes of your cluster:

Dashboard Cluster Overview

  • Monitor and view error reporting for your ingress:

Dashboard Ingress Overview

  • Monitor and view error reporting for your service mesh:

Dashboard Mesh Overview

Support

Traefik Enterprise licenses come with built-in support: contact our team of engineers at support.traefik.io.

Compare

Feature Traefik Proxy Traefik Enterprise
Websockets, HTTP/2, TCP, GRPC ready
Dynamic Configuration
Static Configuration Auto Reload
Metrics
Tracing
Let's Encrypt
Public Plugin Support
Private Plugin Support
Vault PKI
Vault K/V (TLS cert store)
Integrated Service Mesh
Multi-cluster ACME
LDAP Authentication
JWT Authentication
HMAC Authentication
OAuth Token Introspection
OpenID Connect authentication
Open Policy Agent Support
Vault AppRole Authentication
Distributed Let's Encrypt
Distributed Rate Limit
Distributed In Flight Request
High Availability
Encrypted Cluster Communication
Cluster-Wide Dashboard
Remote CLI
HTTP Cache
API Portal
Built-In Commercial Support
FIPS compliance

What's Next?

Now that you have a basic overview of Traefik Enterprise's features, you might want to go straight to the installation phase and read the Quick Start.

Or maybe you'd like to familiarize yourself even more with the vocabulary and take a look at the glossary?