Skip to content
SPECIFICTION
Get listed

Traefik Hub API Gateway

traefik.io

Free trial WebWindowsLinuxAPISelf-hosted
Visit traefik.io
Spec score 8.2 #6 of 29 in API Gateway Software

What it is

Traefik Hub API Gateway is a hybrid gateway for managing and securing APIs and microservices. It discovers services and adjusts routing when services are deployed or removed, with Kubernetes service discovery, Helm charts, Gateway API, and declarative configuration through Kubernetes resources and CRDs. It supports HTTP, HTTP/2, TCP, UDP, WebSockets, and gRPC, alongside rate limiting, request transformation, HTTP caching, canary deployments, and graceful configuration reloads.

Security options include JWT, OAuth2, OIDC, LDAP, API keys, HMAC, and Open Policy Agent, as well as TLS management and a Web Application Firewall powered by OWASP Coraza. The feature matrix lists FIPS 140-3 compliance. API management includes an inventory, versioning, plans and bundles, subscriptions, and a developer portal with interactive testing and access-credential generation. GitOps tools such as Flux and Argo are supported. The product is stateless and horizontally scalable, and integrates with HashiCorp Vault and OpenTelemetry. It is intended for DevOps and Platform Engineering teams. Pricing is available on request; there is no free plan, though a free trial is offered without a stated duration.

Spec sheet

Purpose
Traefik Hub is an API Management as Code platform for DevOps and Platform Engineering teams using GitOps-driven API lifecycle workflows.Read 8 Oct 2026 · traefik.io
Intended users
The product page identifies DevOps and Platform Engineering teams as its intended audience.Read 8 Oct 2026 · traefik.io
Deployment
The documentation provides installation paths for Kubernetes and Linux and describes Traefik Hub API Gateway as multi-platform.Read 8 Oct 2026 · doc.traefik.io
Trial
The product page has a Free trial call to action but does not state the trial duration.Read 8 Oct 2026 · traefik.io
Integrations
It integrates with HashiCorp Vault and supports metrics backends including Datadog, InfluxDB 2, Prometheus, and StatsD.Read 8 Oct 2026 · doc.traefik.io
Security
Security features include granular API policies, JWT inspection, OIDC, TLS management, Let's Encrypt, SPIFFE, and a WAF powered by OWASP Coraza.Read 8 Oct 2026 · traefik.io
Compliance
The documentation feature matrix lists FIPS 140-3 compliance for the API Gateway and API Management tiers.Read 8 Oct 2026 · doc.traefik.io
Support
The documentation feature matrix marks built-in commercial support as available across its listed tiers.Read 8 Oct 2026 · doc.traefik.io
Headquarters
France and the United StatesRead 28 Sep 2026 · traefik.io
Founded
2016Read 28 Sep 2026 · traefik.io
API governance
It provides a real-time API inventory, API versioning, centralized plans and bundles, and managed or self-serve subscriptions.Read 8 Oct 2026 · traefik.io
Authentication
Listed authentication methods include JWT, OAuth, OpenID Connect, LDAP, and API keys; the feature matrix also lists Open Policy Agent and AuthZEN authorization.Read 8 Oct 2026 · doc.traefik.io
Cloud-native
It supports Kubernetes service discovery, Helm charts, Gateway API, and declarative configuration through Kubernetes resources and CRDs.Read 8 Oct 2026 · traefik.io
Company history
Traefik Labs says it was founded in 2016.Read 8 Oct 2026 · traefik.io
Deployment and scale
The product is Kubernetes-native and describes its architecture as stateless and horizontally scalable.Read 8 Oct 2026 · traefik.io
Developer portal
Its API developer portal supports interactive API testing, customization, and generation of API access credentials such as API keys.Read 8 Oct 2026 · traefik.io
Gateway capabilities
The pricing page says Hub API Gateway includes Traefik Proxy capabilities, multi-cluster management, distributed rate limiting, HTTP caching, and a cluster-view dashboard.Read 8 Oct 2026 · traefik.io
GitOps operations
The product supports GitOps tools such as Flux and Argo, CI/CD deployments, configuration linting, Git rollback, and API change impact analysis.Read 8 Oct 2026 · traefik.io
Identity integrations
The product page names Keycloak, Okta, and Azure Entra ID as IAM integrations and says it supports OIDC.Read 8 Oct 2026 · traefik.io
Observability
It integrates with OpenTelemetry for metrics and tracing and offers a direct Treblle integration through the dashboard.Read 8 Oct 2026 · traefik.io
Pricing
The pricing page directs visitors to request pricing for Traefik Hub API Gateway but does not state a price.Read 8 Oct 2026 · traefik.io
Requirements
The Kubernetes getting-started guide requires Kubernetes 1.23 or later, Helm 3 or later, a Traefik Hub account and license, and outbound HTTPS access to api.traefik.io.Read 8 Oct 2026 · doc.traefik.io
Routing
It discovers services and updates routing rules dynamically as services are deployed or removed.Read 8 Oct 2026 · doc.traefik.io
Security reporting
Traefik Labs directs vulnerability reports concerning Hub to a private security advisory on its Traefik repository.Read 8 Oct 2026 · traefik.io
Traffic features
It supports canary deployments, distributed rate limiting, HTTP caching, graceful configuration reloads, and high availability.Read 8 Oct 2026 · doc.traefik.io
WAF and compliance
The feature matrix lists a native Coraza Web Application Firewall and FIPS 140-3 compliance.Read 8 Oct 2026 · doc.traefik.io

Plans and prices

Traefik Hub API Gateway Priced on request Pricing via “Get Pricing” contact link; no price or usage limits shown Read 8 Oct 2026 · traefik.io

Every Traefik Hub API Gateway plan and price →

Strong points and limits

Strong points

  • Dynamically updates routes as services change
  • Supports HTTP, TCP, UDP, WebSockets, and gRPC
  • Includes rate limiting and request transformation
  • Offers API inventory, versioning, and a developer portal
  • Lists FIPS 140-3 compliance

Limits

  • No free plan
  • Pricing requires a request
  • Kubernetes guide requires version 1.23 or later
  • Kubernetes setup requires a Traefik Hub account and license

Who it suits

It suits DevOps and Platform Engineering teams managing APIs and microservices, especially those using Kubernetes and declarative or GitOps workflows. Teams should confirm the request-based price and Kubernetes requirements for their deployment.

Verdict

Traefik Hub API Gateway combines dynamic routing with a broad protocol and security feature set. Its request-based pricing and Kubernetes setup requirements are important details to check before choosing it.

Where Specifiction places it

Alternatives to Traefik Hub API GatewayAll alternatives →