Traefik & Marathon

    See also Marathon user guide.

    Labels

    • Labels are case insensitive.
    • The complete list of labels can be found in .

    Traefik creates, for each Marathon application, a corresponding service and .

    The Service automatically gets a server per instance of the application,and the router automatically gets a rule defined by defaultRule (if no rule for it was defined in labels).

    Service definition

    In general when configuring a Traefik provider,a service assigned to one (or several) router(s) must be defined as well for the routing to be functional.

    There are, however, exceptions when using label-based configurations:

    • If a label defines a router (e.g. through a router Rule)and a label defines a service (e.g. implicitly through a loadbalancer server port value),but the router does not specify any service,then that service is automatically assigned to the router.
    • If a label defines a router (e.g. through a router Rule) but no service is defined,then a service is automatically created and assigned to the router.

    As one would expect, in either of these cases, if in addition a service is specified for the router,then that service is the one assigned, regardless of whether it actually is defined or whatever else other services are defined.

    Automatic service assignment with labels

    Service myservice gets automatically assigned to router myproxy.

    Automatic service creation and assignment with labels

    No service specified or defined, and yet one gets automatically created.and assigned to router myproxy.

    2.   "traefik.http.routers.myproxy.rule": "Host(`foo.com`)"
    3. }

    Routers

    To update the configuration of the Router automatically attached to the application,add labels starting with traefik.http.routers.{router-name-of-your-choice}. and followed by the option you want to change.

    For example, to change the routing rule, you could add the label "traefik.http.routers.routername.rule": "Host(mydomain.com)".

    The character @ is not authorized in the router name <router_name>.

    traefik.http.routers.<router_name>.rule

    See rule for more information. 

    1. "traefik.http.routers.myrouter.rule": "Host(`mydomain.com`)"

    traefik.http.routers.<router_name>.entrypoints

    See for more information.

      traefik.http.routers.<router_name>.middlewares

      See middlewares and for more information. 

      1. "traefik.http.routers.myrouter.middlewares": "auth,prefix,cb"

      traefik.http.routers.<router_name>.service

      See rule for more information. 

      1. "traefik.http.routers.myrouter.service": "myservice"

      traefik.http.routers.<router_name>.tls

      See for more information.

      1. "traefik.http.routers.myrouter.tls": "true"

      traefik.http.routers.<router_name>.tls.certresolver

      See certResolver for more information.

      1. "traefik.http.routers.myrouter.tls.certresolver": "myresolver"

      traefik.http.routers.<router_name>.tls.domains[n].main

      See for more information.

      1. "traefik.http.routers.myrouter.tls.domains[0].main": "foobar.com"

      traefik.http.routers.<router_name>.tls.domains[n].sans

      See domains for more information.

      1. "traefik.http.routers.myrouter.tls.domains[0].sans": "test.foobar.com,dev.foobar.com"

      traefik.http.routers.<router_name>.tls.options

      See for more information.

      1. "traefik.http.routers.myrouter.tls.options": "foobar"

      traefik.http.routers.<router_name>.priority

      1. "traefik.http.routers.myrouter.priority": "42"

      To update the configuration of the Service automatically attached to the container,add labels starting with traefik.http.services.{service-name-of-your-choice}., followed by the option you want to change.

      For example, to change the passHostHeader behavior, you'd add the label "traefik.http.services.servicename.loadbalancer.passhostheader": "false".

      The character @ is not authorized in the service name <service_name>.

      Registers a port.Useful when the container exposes multiples ports.

      1. "traefik.http.services.myservice.loadbalancer.server.port": "8080"

      traefik.http.services.<service_name>.loadbalancer.server.scheme

      Overrides the default scheme.

      1. "traefik.http.services.myservice.loadbalancer.server.scheme": "http"

      traefik.http.services.<service_name>.loadbalancer.passhostheader

      See pass Host header for more information.

      traefik.http.services.<service_name>.loadbalancer.healthcheck.headers.<header_name>

      See for more information.

      1. "traefik.http.services.myservice.loadbalancer.healthcheck.headers.X-Foo": "foobar"

      traefik.http.services.<service_name>.loadbalancer.healthcheck.hostname

      See health check for more information.

      1. "traefik.http.services.myservice.loadbalancer.healthcheck.hostname": "foobar.com"

      traefik.http.services.<service_name>.loadbalancer.healthcheck.interval

      See for more information.

      1. "traefik.http.services.myservice.loadbalancer.healthcheck.interval": "10"

      traefik.http.services.<service_name>.loadbalancer.healthcheck.path

      See health check for more information.

      1. "traefik.http.services.myservice.loadbalancer.healthcheck.path": "/foo"

      traefik.http.services.<service_name>.loadbalancer.healthcheck.port

      See for more information.

      1. "traefik.http.services.myservice.loadbalancer.healthcheck.port": "42"

      traefik.http.services.<service_name>.loadbalancer.healthcheck.scheme

      See health check for more information.

      1. "traefik.http.services.myservice.loadbalancer.healthcheck.scheme": "http"

      traefik.http.services.<service_name>.loadbalancer.healthcheck.timeout

      See for more information.

      1. "traefik.http.services.myservice.loadbalancer.healthcheck.timeout": "10"

      traefik.http.services.<service_name>.loadbalancer.sticky

      See sticky sessions for more information.

      1. "traefik.http.services.myservice.loadbalancer.sticky": "true"

      traefik.http.services.<service_name>.loadbalancer.sticky.cookie.httponly

      See for more information.

      1. "traefik.http.services.myservice.loadbalancer.sticky.cookie.httponly": "true"

      traefik.http.services.<service_name>.loadbalancer.sticky.cookie.name

      See sticky sessions for more information.

      1. "traefik.http.services.myservice.loadbalancer.sticky.cookie.name": "foobar"

      traefik.http.services.<service_name>.loadbalancer.sticky.cookie.secure

      See for more information.

        traefik.http.services.<service_name>.loadbalancer.responseforwarding.flushinterval

        See response forwarding for more information.

        1. "traefik.http.services.myservice.loadbalancer.responseforwarding.flushinterval": "10"

        Middleware

        For example, to declare a middleware redirectscheme named my-redirect, you'd write .

        More information about available middlewares in the dedicated .

        The character @ is not authorized in the middleware name.

        Declaring and Referencing a Middleware

        1. {
        2.     ...
        3.     "labels": {
        4.         "traefik.http.middlewares.my-redirect.redirectscheme.scheme": "https",
        5.         "traefik.http.routers.my-container.middlewares": "my-redirect"
        6.     }
        7. }

        Conflicts in Declaration

        If you declare multiple middleware with the same name but with different parameters, the middleware fails to be declared.

        You can declare TCP Routers and/or Services using labels.

        Declaring TCP Routers and Services

        TCP and HTTP

        If you declare a TCP Router/Service, it will prevent Traefik from automatically creating an HTTP Router/Service (like it does by default if no TCP Router/Service is defined).You can declare both a TCP Router/Service and an HTTP Router/Service for the same container (but you have to do so manually).

        TCP Routers

        traefik.tcp.routers.<router_name>.entrypoints

        See for more information.

        1. "traefik.tcp.routers.mytcprouter.entrypoints": "ep1,ep2"

        traefik.tcp.routers.<router_name>.rule

        See rule for more information.

        1. "traefik.tcp.routers.mytcprouter.rule": "HostSNI(`myhost.com`)"

        traefik.tcp.routers.<router_name>.service

        See for more information.

        1. "traefik.tcp.routers.mytcprouter.service": "myservice"

        traefik.tcp.routers.<router_name>.tls

        See TLS for more information.

        1. "traefik.tcp.routers.mytcprouter.tls": "true

        traefik.tcp.routers.<router_name>.tls.certresolver

        See for more information.

        1. "traefik.tcp.routers.mytcprouter.tls.certresolver": "myresolver"

        traefik.tcp.routers.<router_name>.tls.domains[n].main

        See domains for more information.

        1. "traefik.tcp.routers.mytcprouter.tls.domains[0].main": "foobar.com"

        traefik.tcp.routers.<router_name>.tls.domains[n].sans

        See for more information.

        1. "traefik.tcp.routers.mytcprouter.tls.domains[0].sans": "test.foobar.com,dev.foobar.com"

        traefik.tcp.routers.<router_name>.tls.options

        See options for more information.

        1. "traefik.tcp.routers.mytcprouter.tls.options": "mysoptions"

        traefik.tcp.routers.<router_name>.tls.passthrough

        See for more information.

        1. "traefik.tcp.routers.mytcprouter.tls.passthrough": "true"

        TCP Services

        traefik.tcp.services.<service_name>.loadbalancer.server.port

        Registers a port of the application.

        1. "traefik.tcp.services.mytcpservice.loadbalancer.server.port": "423"

        traefik.tcp.services.<service_name>.loadbalancer.terminationdelay

        See for more information.

        1. "traefik.tcp.services.mytcpservice.loadbalancer.terminationdelay": "100"

        Specific Provider Options

        traefik.enable

        1. "traefik.enable": "true"

        Setting this option controls whether Traefik exposes the application.It overrides the value of .

        traefik.marathon.ipadressidx