Skip to content
SPECIFICTION
Get listed

Traefik Mesh

doc.traefik.io

Free plan LinuxAPISelf-hosted
Visit doc.traefik.io
Spec score 7.9 #6 of 22 in Service Mesh Platforms

What it is

Traefik Mesh is a free, open-source service mesh designed for use in Kubernetes. It routes traffic through proxy endpoints on each node and runs the mesh controller in a dedicated pod, without sidecar containers. Existing services remain outside the mesh until they are added through Traefik Mesh service names. Services can be configured with annotations or Service Mesh Interface (SMI) objects, and ACL mode can require authorization between resources using SMI TrafficTarget resources. Traffic controls include retries, circuit breakers, rate limits, and SMI traffic splitting; examples cover HTTP and TCP services. A built-in debugging API is accessed through the controller pod rather than exposed as a service. Installation uses a Helm chart and requires Kubernetes, CoreDNS or KubeDNS, and Helm v3. The compatibility page lists Kubernetes 1.21, 1.22, and 1.23 as its latest supported minor versions, and says general functionality is not guaranteed for older versions. Traefik Mesh does not provide mutual TLS or implement the SMI Traffic Metrics specification. It is self-hosted and listed for Kubernetes.

Spec sheet

Purpose
Traefik Mesh is a lightweight service mesh designed to be straightforward to install and use in a Kubernetes cluster.Read 9 Oct 2026 · doc.traefik.io
Headquarters
Traefik Labs' privacy policy identifies its registered office as 132 rue Bossuet, 69006 Lyon, France.Read 8 Oct 2026 · traefik.io
Founded
2016Read 28 Sep 2026 · doc.traefik.io
Company
Traefik Labs says it was founded in 2016 and describes its mission as helping organizations adopt and scale cloud-native architectures.Read 8 Oct 2026 · traefik.io
Maker
Traefik Labs says it was founded in 2016.Read 9 Oct 2026 · traefik.io
Access control
Optional ACL mode forbids traffic unless it is explicitly allowed through an SMI TrafficTarget.Read 9 Oct 2026 · doc.traefik.io
Architecture
It routes traffic through proxy endpoints on each node and runs its controller in a dedicated pod, without sidecar containers.Read 9 Oct 2026 · doc.traefik.io
Cloud compatibility
The installation documentation says it runs on most public clouds, including AWS, GKE, Azure, and DigitalOcean.Read 9 Oct 2026 · doc.traefik.io
Compatibility limit
The compatibility page lists Kubernetes 1.21, 1.22, and 1.23 as the currently supported latest minor versions and says general functionality is not guaranteed for older versions.Read 9 Oct 2026 · doc.traefik.io
Configuration
Services can be configured with Kubernetes annotations or Service Mesh Interface objects.Read 9 Oct 2026 · doc.traefik.io
Debug API
A built-in debugging API is accessed through the controller pod and is not exposed via a service for security reasons.Read 9 Oct 2026 · doc.traefik.io
Installation
The supported installation method is Helm using official releases; source installation is intended for development or contributing and may not be supported.Read 9 Oct 2026 · doc.traefik.io
Kubernetes compatibility
The compatibility page lists Kubernetes versions 1.21, 1.22, and 1.23 as its latest three supported minor versions and says older versions may not have general functionality guaranteed.Read 8 Oct 2026 · doc.traefik.io
Metrics limitation
Traefik Mesh does not implement the SMI Traffic Metrics specification.Read 9 Oct 2026 · doc.traefik.io
Opt-in
Existing services are unaffected until they are explicitly added to the mesh.Read 8 Oct 2026 · doc.traefik.io
Opt-in behavior
Existing services are unaffected by default; services join the mesh when accessed through Traefik Mesh service names.Read 9 Oct 2026 · doc.traefik.io
Prerequisites
The documented prerequisites are Kubernetes 1.11+, CoreDNS or KubeDNS, and Helm v3.Read 9 Oct 2026 · doc.traefik.io
Security limitation
The documentation states that Traefik Mesh does not provide mutual TLS.Read 9 Oct 2026 · doc.traefik.io
SMI support
Traefik Mesh supports the Service Mesh Interface specification.Read 8 Oct 2026 · doc.traefik.io
Supported environments
The documentation recommends conformant Kubernetes environments and reports use on AWS, GKE, Azure, and DigitalOcean.Read 8 Oct 2026 · doc.traefik.io
Traffic controls
Configuration supports traffic types, retries, circuit breakers, rate limits, and SMI traffic splitting.Read 9 Oct 2026 · doc.traefik.io
Traffic examples
The examples configure both HTTP and TCP services for access through Traefik Mesh.Read 8 Oct 2026 · doc.traefik.io

Plans and prices

Traefik Mesh Free Open source; requires Kubernetes 1.11+, CoreDNS/KubeDNS, and Helm v3 Read 9 Oct 2026 · github.com

Every Traefik Mesh plan and price →

Strong points and limits

Strong points

  • Routes traffic without sidecar containers.
  • Existing services are unaffected until added to the mesh.
  • Supports retries, circuit breakers, and rate limits.
  • ACL mode can require authorization between resources.
  • Open source and free.

Limits

  • Does not provide mutual TLS.
  • Does not implement SMI Traffic Metrics.
  • Requires Kubernetes, CoreDNS or KubeDNS, and Helm v3.
  • Latest listed supported minors are 1.21, 1.22, and 1.23.

Who it suits

Traefik Mesh suits teams running Kubernetes that want to add services to a mesh selectively and configure traffic policies through annotations or SMI objects. Its lack of mutual TLS and SMI Traffic Metrics support may matter to teams evaluating requirements.

Verdict

Traefik Mesh provides a sidecarless approach to Kubernetes service traffic, with opt-in membership and configurable policies. Confirm that its compatibility range and missing mutual TLS and Traffic Metrics support fit your requirements.

Where Specifiction places it

Alternatives to Traefik MeshAll alternatives →