Skip to content

Custom Domains

Docs Preview

This is unreleased documentation for Traefik Hub!

To do: This needs more info

Since a user can configure custom domains for the Gateway and Portal via CRDs, this page needs to be updated!

Custom domains cannot be configured on Kubernetes Edge Ingress CRD

This page explains how to use Traefik Hub with custom domains.


Introduction

Custom domains allow you to make your sites accessible at your own domain names (for example, mydomain.dev)

Before you begin

This feature requires you to have:

  • Your own domain with DNS records that you can update
  • An already published service with Traefik Hub

Implementation details

Learn about the differences between domains generated by Traefik Hub and custom ones.

Custom domain

When you use a custom domain, Traefik Hub will regularly check the CNAME entry of your DNS.

As soon as the domain is verified, Traefik Hub ill create an Ingress for accessing the service on the entry point of the Traefik Hub agent and will obtain a certificate for your custom domain and protect the ingress with TLS.

This entry point uses by default a secured connection.

With a custom domain, services are accessible via the Traefik Hub tunnel and via the public ClusterIP of the service, using the websecure entry point.

Traefik Hub domain

If you use a Traefik Hub domain, for example faithful-gayal-agctu4.q4brn06t.traefikhub.io the service will be reachable only via the Traefik Hub tunnel.

Implementation details

Learn about the differences between domains generated by Traefik Hub and custom ones.

Custom domain

When you use a custom domain, Traefik Hub will regularly check the CNAME entry of your DNS.

As soon as the domain is verified, Traefik Hub ill create an Ingress for accessing the service on the entry point of the Traefik Hub agent and will obtain a certificate for your custom domain and protect the ingress with TLS.

This entry point uses by default a secured connection.

With a custom domain, services are accessible via the Traefik Hub tunnel and via the public ClusterIP of the service, using the websecure entry point.

Traefik Hub domain

If you use a Traefik Hub domain, for example faithful-gayal-agctu4.q4brn06t.traefikhub.io the service will be reachable only via the Traefik Hub tunnel.

Publishing through Custom Domain

The custom domain feature is based on DNS records configuration.

Using canonical names, you can forward your domain to the domain Traefik Hub generated for your service.

Custom domains only work for already published services

Find the service you want to publish with your custom domain and get the generated domain.

select service

publish service

In your DNS provider, add a CNAME record pointing your custom domain to the Traefik Hub generated URL, for example, mydomain.dev pointing to faithful-gayal-agctu4.q4brn06t.traefikhub.io.

The generated domain name remains valid unless you unpublish your service.

Field Description
Domain The domain you want to use to access your service.
Example: service.example.com
TTL Time-to-live for DNS caching mechanisms, in seconds.
Example: 10800
Type Type of record you are creating for your domain. CNAME only.
Example: CNAME

After the DNS record is set up, go back to the service page and add your domain to the Custom address section and select Save.

publish service

Once every step is completed, it may take a few seconds for the system to apply the configuration.

Not Trusted Certificates

Generating a Let's Encrypt certificate for the new domains requires more time than exposing the service. It might end in a window where the service is available with the wrong certificate. During this time, Traefik Hub serves a self-signed certificate.