Freedom251 › Service Mesh Platforms
Traefik Mesh
What Traefik Mesh is
Traefik Mesh is an open-source service mesh for Kubernetes that routes traffic through proxy endpoints on each node, with a separate pod running its controller. Its sidecarless design means services remain outside the mesh until they are accessed through Traefik Mesh service names. Teams can configure services with annotations or Service Mesh Interface (SMI) objects, and use traffic controls such as retries, circuit breakers, rate limits, and SMI traffic splitting. ACL mode can require authorization between resources through SMI TrafficTarget objects. Examples cover HTTP and TCP services, and a debugging API is reached through the controller pod rather than exposed as a service. Installation uses a Helm chart and requires Kubernetes 1.11 or later, CoreDNS or KubeDNS, and Helm v3. The documentation recommends conformant Kubernetes environments and reports use on AWS, GKE, Azure, and DigitalOcean. The compatibility page lists Kubernetes 1.21, 1.22, and 1.23 as its latest supported minor versions. Traefik Mesh is free and self-hosted; it does not provide mutual TLS or implement SMI Traffic Metrics.
Who it suits
Traefik Mesh suits teams running Kubernetes that want to add services to a mesh selectively and configure traffic policies with annotations or SMI objects. Its prerequisites and Kubernetes compatibility limits are important to check before adoption.
What it does well
- Free and open source.
- Sidecarless proxy architecture.
- Supports SMI traffic splitting.
- Includes retries, circuit breakers, and rate limits.
- ACL mode can require explicit authorization.
What to know first
- Requires Kubernetes, CoreDNS or KubeDNS, and Helm v3.
- Does not provide mutual TLS.
- Does not implement SMI Traffic Metrics.
- Older Kubernetes versions may lack guaranteed functionality.
Limits
The compatibility page lists Kubernetes 1.21, 1.22, and 1.23 as the latest supported minor versions; general functionality is not guaranteed for older versions. Traefik Mesh does not provide mutual TLS or implement the SMI Traffic Metrics specification.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Traefik Mesh | Open source; requires Kubernetes 1.11+, CoreDNS/KubeDNS, and Helm v3 | Free |
As doc.traefik.io lists them, read 9 Oct 2026. The maker's own page has the final word.
Getting started
- Use the documented Helm chart installation route.
- Prepare Kubernetes 1.11 or later, CoreDNS or KubeDNS, and Helm v3.
- Install Traefik Mesh in the Kubernetes environment.
- Configure services with annotations or SMI objects.
- Access services through Traefik Mesh service names to add them to the mesh.
Verdict
Traefik Mesh offers a free, sidecarless approach to Kubernetes service traffic management, with configurable policies and optional access control. Check its Kubernetes compatibility and lack of mutual TLS before choosing it.
Questions
How much does Traefik Mesh cost?
The listed plan costs nothing. It is open source.
What does Traefik Mesh run on?
It is a self-hosted service mesh for Kubernetes. Its prerequisites include Kubernetes 1.11 or later, CoreDNS or KubeDNS, and Helm v3.
How is Traefik Mesh installed?
The documented installation method is the Helm chart.
Does it support mutual TLS?
No. Traefik Mesh does not provide mutual TLS.
Who makes Traefik Mesh?
Traefik Labs makes it and says it was founded in 2016.
Facts from Traefik Mesh's own pages
- Access control
- Optional ACL mode forbids traffic unless it is explicitly allowed through an SMI TrafficTarget. · doc.traefik.io, 9 Oct 2026
- Architecture
- It routes traffic through proxy endpoints on each node and runs its controller in a dedicated pod, without sidecar containers. · doc.traefik.io, 9 Oct 2026
- Cloud compatibility
- The installation documentation says it runs on most public clouds, including AWS, GKE, Azure, and DigitalOcean. · doc.traefik.io, 9 Oct 2026
- Company
- Traefik Labs says it was founded in 2016 and describes its mission as helping organizations adopt and scale cloud-native architectures. · traefik.io, 8 Oct 2026
- Compatibility limit
- The compatibility page lists Kubernetes 1.21, 1.22, and 1.23 as the currently supported latest minor versions and says general functionality is not guaranteed for older versions. · doc.traefik.io, 9 Oct 2026
- Configuration
- Services can be configured with Kubernetes annotations or Service Mesh Interface objects. · doc.traefik.io, 9 Oct 2026
- Debug API
- A built-in debugging API is accessed through the controller pod and is not exposed via a service for security reasons. · doc.traefik.io, 9 Oct 2026
- Founded
- 2016 · doc.traefik.io, 28 Sept 2026
- Headquarters
- Traefik Labs' privacy policy identifies its registered office as 132 rue Bossuet, 69006 Lyon, France. · traefik.io, 8 Oct 2026
- Installation
- The supported installation method is Helm using official releases; source installation is intended for development or contributing and may not be supported. · doc.traefik.io, 9 Oct 2026
- Kubernetes compatibility
- The compatibility page lists Kubernetes versions 1.21, 1.22, and 1.23 as its latest three supported minor versions and says older versions may not have general functionality guaranteed. · doc.traefik.io, 8 Oct 2026
- Maker
- Traefik Labs says it was founded in 2016. · traefik.io, 9 Oct 2026
- Metrics limitation
- Traefik Mesh does not implement the SMI Traffic Metrics specification. · doc.traefik.io, 9 Oct 2026
- Opt-in
- Existing services are unaffected until they are explicitly added to the mesh. · doc.traefik.io, 8 Oct 2026
- Opt-in behavior
- Existing services are unaffected by default; services join the mesh when accessed through Traefik Mesh service names. · doc.traefik.io, 9 Oct 2026
- Prerequisites
- The documented prerequisites are Kubernetes 1.11+, CoreDNS or KubeDNS, and Helm v3. · doc.traefik.io, 9 Oct 2026
- Purpose
- Traefik Mesh is a lightweight service mesh designed to be straightforward to install and use in a Kubernetes cluster. · doc.traefik.io, 9 Oct 2026
- Security limitation
- The documentation states that Traefik Mesh does not provide mutual TLS. · doc.traefik.io, 9 Oct 2026
- SMI support
- Traefik Mesh supports the Service Mesh Interface specification. · doc.traefik.io, 8 Oct 2026
- Supported environments
- The documentation recommends conformant Kubernetes environments and reports use on AWS, GKE, Azure, and DigitalOcean. · doc.traefik.io, 8 Oct 2026
- Traffic controls
- Configuration supports traffic types, retries, circuit breakers, rate limits, and SMI traffic splitting. · doc.traefik.io, 9 Oct 2026
- Traffic examples
- The examples configure both HTTP and TCP services for access through Traefik Mesh. · doc.traefik.io, 8 Oct 2026
Where Traefik Mesh stands on Freedom251
- Service Mesh Platforms#10 of 22