2 posts tagged with "traefik"

Short answer: Traefik v3.7's kubernetesIngressNGINX provider reads Ingresses on the ingress-nginx class and translates its annotations, so the cutover itself is a load balancer IP handover — no annotation rewrite across your Ingresses, no dual-IngressClass trick. What it does not cover is the ingress-nginx controller configuration: TLS redirect, global error pages, the default certificate, auth annotations after you switch class. Those you port by hand.

We moved a production cluster on 23 August 2026: many Ingresses, multi-tenant, customer apps. Here is what we did and what it cost.

Short answer: HAProxy is the fastest, Caddy is the easiest, Traefik is the best fit for containers, and Nginx is the safest default. All four terminate TLS and reverse proxy well; the choice comes down to how your services change and how much config you want to own. Below: each proxy in detail, every head-to-head pairing, and a performance ranking.