Traefik Labs

Traefik Labs, the company behind the open-source Traefik Proxy, has grown that routing tool into a platform for connecting applications, managing APIs and governing AI traffic. Its pitch is that API, AI and MCP gateways can run from one binary, with a single set of policies across workloads wherever they are deployed.

From open-source proxy to Runtime Platform

Traefik Proxy remains the open-source, cloud-native application proxy and the starting point. Traefik Hub API Gateway is the upgrade path from it, with Hub API Management adding GitOps-driven lifecycle work, an API catalog, a developer portal, versioning and OpenAPI schema validation at the gateway. A web application firewall, runtime API governance and API mocking sit alongside. Community resources include a plugin catalog, a forum and an Ambassadors programme.

Routing, authentication and observability

The platform handles layer 4 and layer 7 routing, canary and blue/green releases, traffic mirroring and retries, over HTTP/2, HTTP/3, gRPC and TCP/UDP. Authentication covers OAuth2/OIDC, JWT and mTLS with OPA-compatible authorisation. Telemetry is OpenTelemetry-native, with Prometheus, Grafana, Datadog and Dash0 named as integrations. Kubernetes users can choose Ingress, the Gateway API or IngressRoute, and the company says its Ingress NGINX provider supports over 90 percent of real-world annotations natively, which it positions as a migration route.

Governing AI agents and models

The AI Gateway fronts OpenAI, Anthropic, Bedrock and on-premises models, adding token rate limits and quotas, an LLM Guard middleware and a regex and NLP Content Guard. The MCP Gateway keeps a registry of MCP servers and applies task-based access control per tool and per task, with audit and replay. Newer items include Verifiable Agent Evidence, a Traefik MCP Server, and air-gapped API management with policy-as-code.

Hardened and regulated deployments

A Hardened Secure Image ships a memory-safe Go binary, and a FIPS 140-3 offering provides a validated cryptographic module out of the box. Traefik is named as default ingress in Nutanix NKP, SUSE Rancher RKE2, K3s and Canonical MicroK8s, with partners listed as HashiCorp, Microsoft, Nutanix, Oracle OCI and SUSE AI Factory.

Key facts

Founded: 2016 Founder: Emile Vauge, Founder and CTO People: Sudeep Goswami (CEO), Gerald Croes (VP of Engineering), Sebastien Francois (Head of Finance) Investors: Balderton, Elaia, 360 Capital Partners, Kima Ventures, OSSC Community scale: the site cites 3.5 billion downloads and 65K GitHub stars