Traefik & Redis

A Story of KV store & Containers

Store your configuration in Redis and let Traefik do the rest!

Dynamic configuration updates

Dynamic configuration updates require Redis keyspace notifications to be enabled. Cloud-managed Redis services (e.g., GCP Memorystore, AWS ElastiCache) may disable this by default due to CPU performance issues. For more information, see the Redis documentation or refer to your cloud provider's documentation for specific configuration steps.

Routing Configuration

See the dedicated section in routing.

Provider Configuration

endpoints

Required, Default="127.0.0.1:6379"

Defines how to access Redis.

File (YAML)

providers:
  redis:
    endpoints:
      - "127.0.0.1:6379"

File (TOML)

[providers.redis]
  endpoints = ["127.0.0.1:6379"]

CLI

--providers.redis.endpoints=127.0.0.1:6379

rootKey

Required, Default="traefik"

Defines the root key of the configuration.

File (YAML)

providers:
  redis:
    rootKey: "traefik"

File (TOML)

[providers.redis]
  rootKey = "traefik"

CLI

--providers.redis.rootkey=traefik

username

Optional, Default=""

Defines a username to connect with Redis.

File (YAML)

providers:
  redis:
    # ...
    username: "foo"

File (TOML)

[providers.redis]
  # ...
  username = "foo"

CLI

--providers.redis.username=foo

password

Optional, Default=""

Defines a password to connect with Redis.

File (YAML)

providers:
  redis:
    # ...
    password: "bar"

File (TOML)

[providers.redis]
  # ...
  password = "bar"

CLI

--providers.redis.password=foo

db

Optional, Default=0

Defines the database to be selected after connecting to the Redis.

File (YAML)

providers:
  redis:
    # ...
    db: 0

File (TOML)

[providers.redis]
  db = 0

CLI

--providers.redis.db=0

tls

Optional

Defines the TLS configuration used for the secure connection to Redis.

ca

Optional

ca is the path to the certificate authority used for the secure connection to Redis, it defaults to the system bundle.

File (YAML)

providers:
  redis:
    tls:
      ca: path/to/ca.crt

File (TOML)

[providers.redis.tls]
  ca = "path/to/ca.crt"

CLI

--providers.redis.tls.ca=path/to/ca.crt

cert

Optional

cert is the path to the public certificate used for the secure connection to Redis. When using this option, setting the key option is required.

File (YAML)

providers:
  redis:
    tls:
      cert: path/to/foo.cert
      key: path/to/foo.key

File (TOML)

[providers.redis.tls]
  cert = "path/to/foo.cert"
  key = "path/to/foo.key"

CLI

--providers.redis.tls.cert=path/to/foo.cert
--providers.redis.tls.key=path/to/foo.key

key

Optional

key is the path to the private key used for the secure connection to Redis. When using this option, setting the cert option is required.

File (YAML)

providers:
  redis:
    tls:
      cert: path/to/foo.cert
      key: path/to/foo.key

File (TOML)

[providers.redis.tls]
  cert = "path/to/foo.cert"
  key = "path/to/foo.key"

CLI

--providers.redis.tls.cert=path/to/foo.cert
--providers.redis.tls.key=path/to/foo.key

insecureSkipVerify

Optional, Default=false

If insecureSkipVerify is true, the TLS connection to Redis accepts any certificate presented by the server regardless of the hostnames it covers.

File (YAML)

providers:
  redis:
    tls:
      insecureSkipVerify: true

File (TOML)

[providers.redis.tls]
  insecureSkipVerify = true

CLI

--providers.redis.tls.insecureSkipVerify=true

sentinel

Optional

Defines the Sentinel configuration used to interact with Redis Sentinel.

masterName

Required

masterName is the name of the Sentinel master.

File (YAML)

providers:
  redis:
    sentinel:
      masterName: my-master

File (TOML)

[providers.redis.sentinel]
  masterName = "my-master"

CLI

--providers.redis.sentinel.masterName=my-master

username

Optional

username is the username for Sentinel authentication.

File (YAML)

providers:
  redis:
    sentinel:
      username: user

File (TOML)

[providers.redis.sentinel]
  username = "user"

CLI

--providers.redis.sentinel.username=user

password

Optional

password is the password for Sentinel authentication.

File (YAML)

providers:
  redis:
    sentinel:
      password: password

File (TOML)

[providers.redis.sentinel]
  password = "password"

CLI

--providers.redis.sentinel.password=password

latencyStrategy

Optional, Default=false

latencyStrategy defines whether to route commands to the closest master or replica nodes (mutually exclusive with RandomStrategy and ReplicaStrategy).

File (YAML)

providers:
  redis:
    sentinel:
      latencyStrategy: true

File (TOML)

[providers.redis.sentinel]
latencyStrategy = true

CLI

--providers.redis.sentinel.latencyStrategy=true

randomStrategy

Optional, Default=false

randomStrategy defines whether to route commands randomly to master or replica nodes (mutually exclusive with LatencyStrategy and ReplicaStrategy).

File (YAML)

providers:
  redis:
    sentinel:
      randomStrategy: true

File (TOML)

[providers.redis.sentinel]
randomStrategy = true

CLI

--providers.redis.sentinel.randomStrategy=true

replicaStrategy

Optional, Default=false

replicaStrategy Defines whether to route all commands to replica nodes (mutually exclusive with LatencyStrategy and RandomStrategy).

File (YAML)

providers:
  redis:
    sentinel:
      replicaStrategy: true

File (TOML)

[providers.redis.sentinel]
replicaStrategy = true

CLI

--providers.redis.sentinel.replicaStrategy=true

useDisconnectedReplicas

Optional, Default=false

useDisconnectedReplicas defines whether to use replicas disconnected with master when cannot get connected replicas.

File (YAML)

providers:
  redis:
    sentinel:
      useDisconnectedReplicas: true

File (TOML)

[providers.redis.sentinel]
useDisconnectedReplicas = true

CLI

--providers.redis.sentinel.useDisconnectedReplicas=true