1. traefik    Traefik is a modern HTTP reverse proxy and load balancer made to deploy microservices with ease.
  2. Complete documentation is available at https://traefik.io
  4. Usage: traefik [command] [flags] [arguments]
  6. Use "traefik [command] --help" for help on any command.
  8. Commands:
  9.     healthcheck    Calls Traefik /ping endpoint (disabled by default) to check the health of Traefik.
  10.     version        Shows the current Traefik version.
  12. Flag's usage: traefik [--flag=flag_argument] [-f [flag_argument]]    # set flag_argument to flag(s)
  13.           or: traefik [--flag[=true|false| ]] [-f [true|false| ]]    # set true/false to boolean flag(s)
  15. Flags:
  16.     --accesslog  (Default: "false")
  17.         Access log settings.
  19.     --accesslog.bufferingsize  (Default: "0")
  20.         Number of access log lines to process in a buffered way.
  22.     --accesslog.fields.defaultmode  (Default: "keep")
  23.         Default mode for fields: keep | drop
  25.     --accesslog.fields.headers.defaultmode  (Default: "drop")
  26.         Default mode for fields: keep | drop | redact
  28.     --accesslog.fields.headers.names.<name>  (Default: "")
  29.         Override mode for headers
  31.     --accesslog.fields.names.<name>  (Default: "")
  32.         Override mode for fields
  34.     --accesslog.filepath  (Default: "")
  35.         Access log file path. Stdout is used when omitted or empty.
  37.     --accesslog.filters.minduration  (Default: "0")
  38.         Keep access logs when request took longer than the specified duration.
  40.     --accesslog.filters.retryattempts  (Default: "false")
  41.         Keep access logs when at least one retry happened.
  43.     --accesslog.filters.statuscodes  (Default: "")
  44.         Keep access logs with status codes in the specified range.
  46.     --accesslog.format  (Default: "common")
  47.         Access log format: json | common
  49.     --api  (Default: "false")
  50.         Enable api/dashboard.
  52.     --api.dashboard  (Default: "true")
  53.         Activate dashboard.
  55.     --api.debug  (Default: "false")
  56.         Enable additional endpoints for debugging and profiling.
  58.     --api.insecure  (Default: "false")
  59.         Activate API directly on the entryPoint named traefik.
  61.     --certificatesresolvers.<name>  (Default: "false")
  62.         Certificates resolvers configuration.
  64.     --certificatesresolvers.<name>.acme.caserver  (Default: "https://acme-v02.api.letsencrypt.org/directory")
  65.         CA server to use.
  67.     --certificatesresolvers.<name>.acme.dnschallenge  (Default: "false")
  68.         Activate DNS-01 Challenge.
  70.     --certificatesresolvers.<name>.acme.dnschallenge.delaybeforecheck  (Default: "0")
  71.         Assume DNS propagates after a delay in seconds rather than finding and querying
  72.         nameservers.
  74.     --certificatesresolvers.<name>.acme.dnschallenge.disablepropagationcheck  (Default: "false")
  75.         Disable the DNS propagation checks before notifying ACME that the DNS challenge
  76.         is ready. [not recommended]
  78.     --certificatesresolvers.<name>.acme.dnschallenge.provider  (Default: "")
  79.         Use a DNS-01 based challenge provider rather than HTTPS.
  81.     --certificatesresolvers.<name>.acme.dnschallenge.resolvers  (Default: "")
  82.         Use following DNS servers to resolve the FQDN authority.
  84.     --certificatesresolvers.<name>.acme.email  (Default: "")
  85.         Email address used for registration.
  87.     --certificatesresolvers.<name>.acme.httpchallenge  (Default: "false")
  88.         Activate HTTP-01 Challenge.
  90.     --certificatesresolvers.<name>.acme.httpchallenge.entrypoint  (Default: "")
  91.         HTTP challenge EntryPoint
  93.     --certificatesresolvers.<name>.acme.keytype  (Default: "RSA4096")
  94.         KeyType used for generating certificate private key. Allow value 'EC256',
  95.         'EC384', 'RSA2048', 'RSA4096', 'RSA8192'.
  97.     --certificatesresolvers.<name>.acme.preferredchain  (Default: "")
  98.         Preferred chain to use.
  100.     --certificatesresolvers.<name>.acme.storage  (Default: "acme.json")
  101.         Storage to use.
  103.     --certificatesresolvers.<name>.acme.tlschallenge  (Default: "true")
  104.         Activate TLS-ALPN-01 Challenge.
  106.     --configfile  (Default: "")
  107.         Configuration file to use. If specified all other flags are ignored.
  109.     --entrypoints.<name>  (Default: "false")
  110.         Entry points definition.
  112.     --entrypoints.<name>.address  (Default: "")
  113.         Entry point address.
  115.     --entrypoints.<name>.forwardedheaders.insecure  (Default: "false")
  116.         Trust all forwarded headers.
  118.     --entrypoints.<name>.forwardedheaders.trustedips  (Default: "")
  119.         Trust only forwarded headers from selected IPs.
  121.     --entrypoints.<name>.http  (Default: "")
  122.         HTTP configuration.
  124.     --entrypoints.<name>.http.middlewares  (Default: "")
  125.         Default middlewares for the routers linked to the entry point.
  127.     --entrypoints.<name>.http.redirections.entrypoint.permanent  (Default: "true")
  128.         Applies a permanent redirection.
  130.     --entrypoints.<name>.http.redirections.entrypoint.priority  (Default: "2147483647")
  131.         Priority of the generated router.
  133.     --entrypoints.<name>.http.redirections.entrypoint.scheme  (Default: "https")
  134.         Scheme used for the redirection.
  136.     --entrypoints.<name>.http.redirections.entrypoint.to  (Default: "")
  137.         Targeted entry point of the redirection.
  139.     --entrypoints.<name>.http.tls  (Default: "false")
  140.         Default TLS configuration for the routers linked to the entry point.
  142.     --entrypoints.<name>.http.tls.certresolver  (Default: "")
  143.         Default certificate resolver for the routers linked to the entry point.
  145.     --entrypoints.<name>.http.tls.domains  (Default: "")
  146.         Default TLS domains for the routers linked to the entry point.
  148.     --entrypoints.<name>.http.tls.domains[n].main  (Default: "")
  149.         Default subject name.
  151.     --entrypoints.<name>.http.tls.domains[n].sans  (Default: "")
  152.         Subject alternative names.
  154.     --entrypoints.<name>.http.tls.options  (Default: "")
  155.         Default TLS options for the routers linked to the entry point.
  157.     --entrypoints.<name>.proxyprotocol  (Default: "false")
  158.         Proxy-Protocol configuration.
  160.     --entrypoints.<name>.proxyprotocol.insecure  (Default: "false")
  161.         Trust all.
  163.     --entrypoints.<name>.proxyprotocol.trustedips  (Default: "")
  164.         Trust only selected IPs.
  166.     --entrypoints.<name>.transport.lifecycle.gracetimeout  (Default: "10")
  167.         Duration to give active requests a chance to finish before Traefik stops.
  169.     --entrypoints.<name>.transport.lifecycle.requestacceptgracetimeout  (Default: "0")
  170.         Duration to keep accepting requests before Traefik initiates the graceful
  171.         shutdown procedure.
  173.     --entrypoints.<name>.transport.respondingtimeouts.idletimeout  (Default: "180")
  174.         IdleTimeout is the maximum amount duration an idle (keep-alive) connection will
  175.         remain idle before closing itself. If zero, no timeout is set.
  177.     --entrypoints.<name>.transport.respondingtimeouts.readtimeout  (Default: "0")
  178.         ReadTimeout is the maximum duration for reading the entire request, including
  179.         the body. If zero, no timeout is set.
  181.     --entrypoints.<name>.transport.respondingtimeouts.writetimeout  (Default: "0")
  182.         WriteTimeout is the maximum duration before timing out writes of the response.
  183.         If zero, no timeout is set.
  185.     --experimental.devplugin.gopath  (Default: "")
  186.         plugin's GOPATH.
  188.     --experimental.devplugin.modulename  (Default: "")
  189.         plugin's module name.
  191.     --experimental.plugins.<name>  (Default: "false")
  192.         Plugins configuration.
  194.     --experimental.plugins.<name>.modulename  (Default: "")
  195.         plugin's module name.
  197.     --experimental.plugins.<name>.version  (Default: "")
  198.         plugin's version.
  200.     --global.checknewversion  (Default: "true")
  201.         Periodically check if a new version has been released.
  203.     --global.sendanonymoususage  
  204.         Periodically send anonymous usage statistics. If the option is not specified, it
  205.         will be enabled by default.
  207.     --hostresolver  (Default: "false")
  208.         Enable CNAME Flattening.
  210.     --hostresolver.cnameflattening  (Default: "false")
  211.         A flag to enable/disable CNAME flattening
  213.     --hostresolver.resolvconfig  (Default: "/etc/resolv.conf")
  214.         resolv.conf used for DNS resolving
  216.     --hostresolver.resolvdepth  (Default: "5")
  217.         The maximal depth of DNS recursive resolving
  219.     --log  (Default: "false")
  220.         Traefik log settings.
  222.     --log.filepath  (Default: "")
  223.         Traefik log file path. Stdout is used when omitted or empty.
  225.     --log.format  (Default: "common")
  226.         Traefik log format: json | common
  228.     --log.level  (Default: "ERROR")
  229.         Log level set to traefik logs.
  231.     --metrics.datadog  (Default: "false")
  232.         Datadog metrics exporter type.
  234.     --metrics.datadog.addentrypointslabels  (Default: "true")
  235.         Enable metrics on entry points.
  237.     --metrics.datadog.address  (Default: "localhost:8125")
  238.         Datadog's address.
  240.     --metrics.datadog.addserviceslabels  (Default: "true")
  241.         Enable metrics on services.
  243.     --metrics.datadog.pushinterval  (Default: "10")
  244.         Datadog push interval.
  246.     --metrics.influxdb  (Default: "false")
  247.         InfluxDB metrics exporter type.
  249.     --metrics.influxdb.addentrypointslabels  (Default: "true")
  250.         Enable metrics on entry points.
  252.     --metrics.influxdb.address  (Default: "localhost:8089")
  253.         InfluxDB address.
  255.     --metrics.influxdb.addserviceslabels  (Default: "true")
  256.         Enable metrics on services.
  258.     --metrics.influxdb.database  (Default: "")
  259.         InfluxDB database used when protocol is http.
  261.     --metrics.influxdb.password  (Default: "")
  262.         InfluxDB password (only with http).
  264.     --metrics.influxdb.protocol  (Default: "udp")
  265.         InfluxDB address protocol (udp or http).
  267.     --metrics.influxdb.pushinterval  (Default: "10")
  268.         InfluxDB push interval.
  270.     --metrics.influxdb.retentionpolicy  (Default: "")
  271.         InfluxDB retention policy used when protocol is http.
  273.     --metrics.influxdb.username  (Default: "")
  274.         InfluxDB username (only with http).
  276.     --metrics.prometheus  (Default: "false")
  277.         Prometheus metrics exporter type.
  279.     --metrics.prometheus.addentrypointslabels  (Default: "true")
  280.         Enable metrics on entry points.
  282.     --metrics.prometheus.addserviceslabels  (Default: "true")
  283.         Enable metrics on services.
  285.     --metrics.prometheus.buckets  (Default: "0.100000, 0.300000, 1.200000, 5.000000")
  286.         Buckets for latency metrics.
  288.     --metrics.prometheus.entrypoint  (Default: "traefik")
  289.         EntryPoint
  291.     --metrics.prometheus.manualrouting  (Default: "false")
  292.         Manual routing
  294.     --metrics.statsd  (Default: "false")
  295.         StatsD metrics exporter type.
  297.     --metrics.statsd.addentrypointslabels  (Default: "true")
  298.         Enable metrics on entry points.
  300.     --metrics.statsd.address  (Default: "localhost:8125")
  301.         StatsD address.
  303.     --metrics.statsd.addserviceslabels  (Default: "true")
  304.         Enable metrics on services.
  306.     --metrics.statsd.prefix  (Default: "traefik")
  307.         Prefix to use for metrics collection.
  309.     --metrics.statsd.pushinterval  (Default: "10")
  310.         StatsD push interval.
  312.     --pilot.token  (Default: "")
  313.         Traefik Pilot token.
  315.     --ping  (Default: "false")
  316.         Enable ping.
  318.     --ping.entrypoint  (Default: "traefik")
  319.         EntryPoint
  321.     --ping.manualrouting  (Default: "false")
  322.         Manual routing
  324.     --ping.terminatingstatuscode  (Default: "503")
  325.         Terminating status code
  327.     --providers.consul  (Default: "false")
  328.         Enable Consul backend with default settings.
  330.     --providers.consul.endpoints  (Default: "127.0.0.1:8500")
  331.         KV store endpoints
  333.     --providers.consul.password  (Default: "")
  334.         KV Password
  336.     --providers.consul.rootkey  (Default: "traefik")
  337.         Root key used for KV store
  339.     --providers.consul.tls.ca  (Default: "")
  340.         TLS CA
  342.     --providers.consul.tls.caoptional  (Default: "false")
  343.         TLS CA.Optional
  345.     --providers.consul.tls.cert  (Default: "")
  346.         TLS cert
  348.     --providers.consul.tls.insecureskipverify  (Default: "false")
  349.         TLS insecure skip verify
  351.     --providers.consul.tls.key  (Default: "")
  352.         TLS key
  354.     --providers.consul.username  (Default: "")
  355.         KV Username
  357.     --providers.consulcatalog  (Default: "false")
  358.         Enable ConsulCatalog backend with default settings.
  360.     --providers.consulcatalog.cache  (Default: "false")
  361.         Use local agent caching for catalog reads.
  363.     --providers.consulcatalog.constraints  (Default: "")
  364.         Constraints is an expression that Traefik matches against the container's labels
  365.         to determine whether to create any route for that container.
  367.     --providers.consulcatalog.defaultrule  (Default: "Host(`{{ normalize .Name }}`)")
  368.         Default rule.
  370.     --providers.consulcatalog.endpoint.address  (Default: "127.0.0.1:8500")
  371.         The address of the Consul server
  373.     --providers.consulcatalog.endpoint.datacenter  (Default: "")
  374.         Data center to use. If not provided, the default agent data center is used
  376.     --providers.consulcatalog.endpoint.endpointwaittime  (Default: "0")
  377.         WaitTime limits how long a Watch will block. If not provided, the agent default
  378.         values will be used
  380.     --providers.consulcatalog.endpoint.httpauth.password  (Default: "")
  381.         Basic Auth password
  383.     --providers.consulcatalog.endpoint.httpauth.username  (Default: "")
  384.         Basic Auth username
  386.     --providers.consulcatalog.endpoint.scheme  (Default: "")
  387.         The URI scheme for the Consul server
  389.     --providers.consulcatalog.endpoint.tls.ca  (Default: "")
  390.         TLS CA
  392.     --providers.consulcatalog.endpoint.tls.caoptional  (Default: "false")
  393.         TLS CA.Optional
  395.     --providers.consulcatalog.endpoint.tls.cert  (Default: "")
  396.         TLS cert
  398.     --providers.consulcatalog.endpoint.tls.insecureskipverify  (Default: "false")
  399.         TLS insecure skip verify
  401.     --providers.consulcatalog.endpoint.tls.key  (Default: "")
  402.         TLS key
  404.     --providers.consulcatalog.endpoint.token  (Default: "")
  405.         Token is used to provide a per-request ACL token which overrides the agent's
  406.         default token
  408.     --providers.consulcatalog.exposedbydefault  (Default: "true")
  409.         Expose containers by default.
  411.     --providers.consulcatalog.prefix  (Default: "traefik")
  412.         Prefix for consul service tags. Default 'traefik'
  414.     --providers.consulcatalog.refreshinterval  (Default: "15")
  415.         Interval for check Consul API. Default 100ms
  417.     --providers.consulcatalog.requireconsistent  (Default: "false")
  418.         Forces the read to be fully consistent.
  420.     --providers.consulcatalog.stale  (Default: "false")
  421.         Use stale consistency for catalog reads.
  423.     --providers.docker  (Default: "false")
  424.         Enable Docker backend with default settings.
  426.     --providers.docker.constraints  (Default: "")
  427.         Constraints is an expression that Traefik matches against the container's labels
  428.         to determine whether to create any route for that container.
  430.     --providers.docker.defaultrule  (Default: "Host(`{{ normalize .Name }}`)")
  431.         Default rule.
  433.     --providers.docker.endpoint  (Default: "unix:///var/run/docker.sock")
  434.         Docker server endpoint. Can be a tcp or a unix socket endpoint.
  436.     --providers.docker.exposedbydefault  (Default: "true")
  437.         Expose containers by default.
  439.     --providers.docker.network  (Default: "")
  440.         Default Docker network used.
  442.     --providers.docker.swarmmode  (Default: "false")
  443.         Use Docker on Swarm Mode.
  445.     --providers.docker.swarmmoderefreshseconds  (Default: "15")
  446.         Polling interval for swarm mode.
  448.     --providers.docker.tls.ca  (Default: "")
  449.         TLS CA
  451.     --providers.docker.tls.caoptional  (Default: "false")
  452.         TLS CA.Optional
  454.     --providers.docker.tls.cert  (Default: "")
  455.         TLS cert
  457.     --providers.docker.tls.insecureskipverify  (Default: "false")
  458.         TLS insecure skip verify
  460.     --providers.docker.tls.key  (Default: "")
  461.         TLS key
  463.     --providers.docker.usebindportip  (Default: "false")
  464.         Use the ip address from the bound port, rather than from the inner network.
  466.     --providers.docker.watch  (Default: "true")
  467.         Watch Docker Swarm events.
  469.     --providers.ecs  (Default: "false")
  470.         Enable AWS ECS backend with default settings.
  472.     --providers.ecs.accesskeyid  (Default: "")
  473.         The AWS credentials access key to use for making requests
  475.     --providers.ecs.autodiscoverclusters  (Default: "false")
  476.         Auto discover cluster
  478.     --providers.ecs.clusters  (Default: "default")
  479.         ECS Clusters name
  481.     --providers.ecs.constraints  (Default: "")
  482.         Constraints is an expression that Traefik matches against the container's labels
  483.         to determine whether to create any route for that container.
  485.     --providers.ecs.defaultrule  (Default: "Host(`{{ normalize .Name }}`)")
  486.         Default rule.
  488.     --providers.ecs.exposedbydefault  (Default: "true")
  489.         Expose services by default
  491.     --providers.ecs.refreshseconds  (Default: "15")
  492.         Polling interval (in seconds)
  494.     --providers.ecs.region  (Default: "")
  495.         The AWS region to use for requests
  497.     --providers.ecs.secretaccesskey  (Default: "")
  498.         The AWS credentials access key to use for making requests
  500.     --providers.etcd  (Default: "false")
  501.         Enable Etcd backend with default settings.
  503.     --providers.etcd.endpoints  (Default: "127.0.0.1:2379")
  504.         KV store endpoints
  506.     --providers.etcd.password  (Default: "")
  507.         KV Password
  509.     --providers.etcd.rootkey  (Default: "traefik")
  510.         Root key used for KV store
  512.     --providers.etcd.tls.ca  (Default: "")
  513.         TLS CA
  515.     --providers.etcd.tls.caoptional  (Default: "false")
  516.         TLS CA.Optional
  518.     --providers.etcd.tls.cert  (Default: "")
  519.         TLS cert
  521.     --providers.etcd.tls.insecureskipverify  (Default: "false")
  522.         TLS insecure skip verify
  524.     --providers.etcd.tls.key  (Default: "")
  525.         TLS key
  527.     --providers.etcd.username  (Default: "")
  528.         KV Username
  530.     --providers.file.debugloggeneratedtemplate  (Default: "false")
  531.         Enable debug logging of generated configuration template.
  533.     --providers.file.directory  (Default: "")
  534.         Load dynamic configuration from one or more .toml or .yml files in a directory.
  536.     --providers.file.filename  (Default: "")
  537.         Load dynamic configuration from a file.
  539.     --providers.file.watch  (Default: "true")
  540.         Watch provider.
  542.     --providers.http  (Default: "false")
  543.         Enable HTTP backend with default settings.
  545.     --providers.http.endpoint  (Default: "")
  546.         Load configuration from this endpoint.
  548.     --providers.http.pollinterval  (Default: "5")
  549.         Polling interval for endpoint.
  551.     --providers.http.polltimeout  (Default: "5")
  552.         Polling timeout for endpoint.
  554.     --providers.http.tls.ca  (Default: "")
  555.         TLS CA
  557.     --providers.http.tls.caoptional  (Default: "false")
  558.         TLS CA.Optional
  560.     --providers.http.tls.cert  (Default: "")
  561.         TLS cert
  563.     --providers.http.tls.insecureskipverify  (Default: "false")
  564.         TLS insecure skip verify
  566.     --providers.http.tls.key  (Default: "")
  567.         TLS key
  569.     --providers.kubernetescrd  (Default: "false")
  570.         Enable Kubernetes backend with default settings.
  572.     --providers.kubernetescrd.certauthfilepath  (Default: "")
  573.         Kubernetes certificate authority file path (not needed for in-cluster client).
  575.     --providers.kubernetescrd.disablepasshostheaders  (Default: "false")
  576.         Kubernetes disable PassHost Headers.
  578.     --providers.kubernetescrd.endpoint  (Default: "")
  579.         Kubernetes server endpoint (required for external cluster client).
  581.     --providers.kubernetescrd.ingressclass  (Default: "")
  582.         Value of kubernetes.io/ingress.class annotation to watch for.
  584.     --providers.kubernetescrd.labelselector  (Default: "")
  585.         Kubernetes label selector to use.
  587.     --providers.kubernetescrd.namespaces  (Default: "")
  588.         Kubernetes namespaces.
  590.     --providers.kubernetescrd.throttleduration  (Default: "0")
  591.         Ingress refresh throttle duration
  593.     --providers.kubernetescrd.token  (Default: "")
  594.         Kubernetes bearer token (not needed for in-cluster client).
  596.     --providers.kubernetesingress  (Default: "false")
  597.         Enable Kubernetes backend with default settings.
  599.     --providers.kubernetesingress.certauthfilepath  (Default: "")
  600.         Kubernetes certificate authority file path (not needed for in-cluster client).
  602.     --providers.kubernetesingress.disablepasshostheaders  (Default: "false")
  603.         Kubernetes disable PassHost Headers.
  605.     --providers.kubernetesingress.endpoint  (Default: "")
  606.         Kubernetes server endpoint (required for external cluster client).
  608.     --providers.kubernetesingress.ingressclass  (Default: "")
  609.         Value of kubernetes.io/ingress.class annotation to watch for.
  611.     --providers.kubernetesingress.ingressendpoint.hostname  (Default: "")
  612.         Hostname used for Kubernetes Ingress endpoints.
  614.     --providers.kubernetesingress.ingressendpoint.ip  (Default: "")
  615.         IP used for Kubernetes Ingress endpoints.
  617.     --providers.kubernetesingress.ingressendpoint.publishedservice  (Default: "")
  618.         Published Kubernetes Service to copy status from.
  620.     --providers.kubernetesingress.labelselector  (Default: "")
  621.         Kubernetes Ingress label selector to use.
  623.     --providers.kubernetesingress.namespaces  (Default: "")
  624.         Kubernetes namespaces.
  626.     --providers.kubernetesingress.throttleduration  (Default: "0")
  627.         Ingress refresh throttle duration
  629.     --providers.kubernetesingress.token  (Default: "")
  630.         Kubernetes bearer token (not needed for in-cluster client).
  632.     --providers.marathon  (Default: "false")
  633.         Enable Marathon backend with default settings.
  635.     --providers.marathon.basic.httpbasicauthuser  (Default: "")
  636.         Basic authentication User.
  638.     --providers.marathon.basic.httpbasicpassword  (Default: "")
  639.         Basic authentication Password.
  641.     --providers.marathon.constraints  (Default: "")
  642.         Constraints is an expression that Traefik matches against the application's
  643.         labels to determine whether to create any route for that application.
  645.     --providers.marathon.dcostoken  (Default: "")
  646.         DCOSToken for DCOS environment, This will override the Authorization header.
  648.     --providers.marathon.defaultrule  (Default: "Host(`{{ normalize .Name }}`)")
  649.         Default rule.
  651.     --providers.marathon.dialertimeout  (Default: "5")
  652.         Set a dialer timeout for Marathon.
  654.     --providers.marathon.endpoint  (Default: "http://127.0.0.1:8080")
  655.         Marathon server endpoint. You can also specify multiple endpoint for Marathon.
  657.     --providers.marathon.exposedbydefault  (Default: "true")
  658.         Expose Marathon apps by default.
  660.     --providers.marathon.forcetaskhostname  (Default: "false")
  661.         Force to use the task's hostname.
  663.     --providers.marathon.keepalive  (Default: "10")
  664.         Set a TCP Keep Alive time.
  666.     --providers.marathon.respectreadinesschecks  (Default: "false")
  667.         Filter out tasks with non-successful readiness checks during deployments.
  669.     --providers.marathon.responseheadertimeout  (Default: "60")
  670.         Set a response header timeout for Marathon.
  672.     --providers.marathon.tls.ca  (Default: "")
  673.         TLS CA
  675.     --providers.marathon.tls.caoptional  (Default: "false")
  676.         TLS CA.Optional
  678.     --providers.marathon.tls.cert  (Default: "")
  679.         TLS cert
  681.     --providers.marathon.tls.insecureskipverify  (Default: "false")
  682.         TLS insecure skip verify
  684.     --providers.marathon.tls.key  (Default: "")
  685.         TLS key
  687.     --providers.marathon.tlshandshaketimeout  (Default: "5")
  688.         Set a TLS handshake timeout for Marathon.
  690.     --providers.marathon.trace  (Default: "false")
  691.         Display additional provider logs.
  693.     --providers.marathon.watch  (Default: "true")
  694.         Watch provider.
  696.     --providers.providersthrottleduration  (Default: "2")
  697.         Backends throttle duration: minimum duration between 2 events from providers
  698.         before applying a new configuration. It avoids unnecessary reloads if multiples
  699.         events are sent in a short amount of time.
  701.     --providers.rancher  (Default: "false")
  702.         Enable Rancher backend with default settings.
  704.     --providers.rancher.constraints  (Default: "")
  705.         Constraints is an expression that Traefik matches against the container's labels
  706.         to determine whether to create any route for that container.
  708.     --providers.rancher.defaultrule  (Default: "Host(`{{ normalize .Name }}`)")
  709.         Default rule.
  711.     --providers.rancher.enableservicehealthfilter  (Default: "true")
  712.         Filter services with unhealthy states and inactive states.
  714.     --providers.rancher.exposedbydefault  (Default: "true")
  715.         Expose containers by default.
  717.     --providers.rancher.intervalpoll  (Default: "false")
  718.         Poll the Rancher metadata service every 'rancher.refreshseconds' (less
  719.         accurate).
  721.     --providers.rancher.prefix  (Default: "latest")
  722.         Prefix used for accessing the Rancher metadata service.
  724.     --providers.rancher.refreshseconds  (Default: "15")
  725.         Defines the polling interval in seconds.
  727.     --providers.rancher.watch  (Default: "true")
  728.         Watch provider.
  730.     --providers.redis  (Default: "false")
  731.         Enable Redis backend with default settings.
  733.     --providers.redis.endpoints  (Default: "127.0.0.1:6379")
  734.         KV store endpoints
  736.     --providers.redis.password  (Default: "")
  737.         KV Password
  739.     --providers.redis.rootkey  (Default: "traefik")
  740.         Root key used for KV store
  742.     --providers.redis.tls.ca  (Default: "")
  743.         TLS CA
  745.     --providers.redis.tls.caoptional  (Default: "false")
  746.         TLS CA.Optional
  748.     --providers.redis.tls.cert  (Default: "")
  749.         TLS cert
  751.     --providers.redis.tls.insecureskipverify  (Default: "false")
  752.         TLS insecure skip verify
  754.     --providers.redis.tls.key  (Default: "")
  755.         TLS key
  757.     --providers.redis.username  (Default: "")
  758.         KV Username
  760.     --providers.rest  (Default: "false")
  761.         Enable Rest backend with default settings.
  763.     --providers.rest.insecure  (Default: "false")
  764.         Activate REST Provider directly on the entryPoint named traefik.
  766.     --providers.zookeeper  (Default: "false")
  767.         Enable ZooKeeper backend with default settings.
  769.     --providers.zookeeper.endpoints  (Default: "127.0.0.1:2181")
  770.         KV store endpoints
  772.     --providers.zookeeper.password  (Default: "")
  773.         KV Password
  775.     --providers.zookeeper.rootkey  (Default: "traefik")
  776.         Root key used for KV store
  778.     --providers.zookeeper.tls.ca  (Default: "")
  779.         TLS CA
  781.     --providers.zookeeper.tls.caoptional  (Default: "false")
  782.         TLS CA.Optional
  784.     --providers.zookeeper.tls.cert  (Default: "")
  785.         TLS cert
  787.     --providers.zookeeper.tls.insecureskipverify  (Default: "false")
  788.         TLS insecure skip verify
  790.     --providers.zookeeper.tls.key  (Default: "")
  791.         TLS key
  793.     --providers.zookeeper.username  (Default: "")
  794.         KV Username
  796.     --serverstransport.forwardingtimeouts.dialtimeout  (Default: "30")
  797.         The amount of time to wait until a connection to a backend server can be
  798.         established. If zero, no timeout exists.
  800.     --serverstransport.forwardingtimeouts.idleconntimeout  (Default: "90")
  801.         The maximum period for which an idle HTTP keep-alive connection will remain open
  802.         before closing itself
  804.     --serverstransport.forwardingtimeouts.responseheadertimeout  (Default: "0")
  805.         The amount of time to wait for a server's response headers after fully writing
  806.         the request (including its body, if any). If zero, no timeout exists.
  808.     --serverstransport.insecureskipverify  (Default: "false")
  809.         Disable SSL certificate verification.
  811.     --serverstransport.maxidleconnsperhost  (Default: "200")
  812.         If non-zero, controls the maximum idle (keep-alive) to keep per-host. If zero,
  813.         DefaultMaxIdleConnsPerHost is used
  815.     --serverstransport.rootcas  (Default: "")
  816.         Add cert file for self-signed certificate.
  818.     --tracing  (Default: "false")
  819.         OpenTracing configuration.
  821.     --tracing.datadog  (Default: "false")
  822.         Settings for Datadog.
  824.     --tracing.datadog.bagageprefixheadername  (Default: "")
  825.         Specifies the header name prefix that will be used to store baggage items in a
  826.         map.
  828.     --tracing.datadog.debug  (Default: "false")
  829.         Enable Datadog debug.
  831.     --tracing.datadog.globaltag  (Default: "")
  832.         Key:Value tag to be set on all the spans.
  834.     --tracing.datadog.localagenthostport  (Default: "localhost:8126")
  835.         Set datadog-agent's host:port that the reporter will used.
  837.     --tracing.datadog.parentidheadername  (Default: "")
  838.         Specifies the header name that will be used to store the parent ID.
  840.     --tracing.datadog.prioritysampling  (Default: "false")
  841.         Enable priority sampling. When using distributed tracing, this option must be
  842.         enabled in order to get all the parts of a distributed trace sampled.
  844.     --tracing.datadog.samplingpriorityheadername  (Default: "")
  845.         Specifies the header name that will be used to store the sampling priority.
  847.     --tracing.datadog.traceidheadername  (Default: "")
  848.         Specifies the header name that will be used to store the trace ID.
  850.     --tracing.elastic  (Default: "false")
  851.         Settings for Elastic.
  853.     --tracing.elastic.secrettoken  (Default: "")
  854.         Set the token used to connect to Elastic APM Server.
  856.     --tracing.elastic.serverurl  (Default: "")
  857.         Set the URL of the Elastic APM server.
  859.     --tracing.elastic.serviceenvironment  (Default: "")
  860.         Set the name of the environment Traefik is deployed in, e.g. 'production' or
  861.         'staging'.
  863.     --tracing.haystack  (Default: "false")
  864.         Settings for Haystack.
  866.     --tracing.haystack.baggageprefixheadername  (Default: "")
  867.         Specifies the header name prefix that will be used to store baggage items in a
  868.         map.
  870.     --tracing.haystack.globaltag  (Default: "")
  871.         Key:Value tag to be set on all the spans.
  873.     --tracing.haystack.localagenthost  (Default: "127.0.0.1")
  874.         Set haystack-agent's host that the reporter will used.
  876.     --tracing.haystack.localagentport  (Default: "35000")
  877.         Set haystack-agent's port that the reporter will used.
  879.     --tracing.haystack.parentidheadername  (Default: "")
  880.         Specifies the header name that will be used to store the parent ID.
  882.     --tracing.haystack.spanidheadername  (Default: "")
  883.         Specifies the header name that will be used to store the span ID.
  885.     --tracing.haystack.traceidheadername  (Default: "")
  886.         Specifies the header name that will be used to store the trace ID.
  888.     --tracing.instana  (Default: "false")
  889.         Settings for Instana.
  891.     --tracing.instana.localagenthost  (Default: "")
  892.         Set instana-agent's host that the reporter will used.
  894.     --tracing.instana.localagentport  (Default: "42699")
  895.         Set instana-agent's port that the reporter will used.
  897.     --tracing.instana.loglevel  (Default: "info")
  898.         Set instana-agent's log level. ('error','warn','info','debug')
  900.     --tracing.jaeger  (Default: "false")
  901.         Settings for Jaeger.
  903.     --tracing.jaeger.collector.endpoint  (Default: "")
  904.         Instructs reporter to send spans to jaeger-collector at this URL.
  906.     --tracing.jaeger.collector.password  (Default: "")
  907.         Password for basic http authentication when sending spans to jaeger-collector.
  909.     --tracing.jaeger.collector.user  (Default: "")
  910.         User for basic http authentication when sending spans to jaeger-collector.
  912.     --tracing.jaeger.disableattemptreconnecting  (Default: "true")
  913.         Disable the periodic re-resolution of the agent's hostname and reconnection if
  914.         there was a change.
  916.     --tracing.jaeger.gen128bit  (Default: "false")
  917.         Generate 128 bit span IDs.
  919.     --tracing.jaeger.localagenthostport  (Default: "127.0.0.1:6831")
  920.         Set jaeger-agent's host:port that the reporter will used.
  922.     --tracing.jaeger.propagation  (Default: "jaeger")
  923.         Which propagation format to use (jaeger/b3).
  925.     --tracing.jaeger.samplingparam  (Default: "1.000000")
  926.         Set the sampling parameter.
  928.     --tracing.jaeger.samplingserverurl  (Default: "http://localhost:5778/sampling")
  929.         Set the sampling server url.
  931.     --tracing.jaeger.samplingtype  (Default: "const")
  932.         Set the sampling type.
  934.     --tracing.jaeger.tracecontextheadername  (Default: "uber-trace-id")
  935.         Set the header to use for the trace-id.
  937.     --tracing.servicename  (Default: "traefik")
  938.         Set the name for this service.
  940.     --tracing.spannamelimit  (Default: "0")
  941.         Set the maximum character limit for Span names (default 0 = no limit).
  943.     --tracing.zipkin  (Default: "false")
  944.         Settings for Zipkin.
  946.     --tracing.zipkin.httpendpoint  (Default: "http://localhost:9411/api/v2/spans")
  947.         HTTP Endpoint to report traces to.
  949.     --tracing.zipkin.id128bit  (Default: "true")
  950.         Use Zipkin 128 bit root span IDs.
  952.     --tracing.zipkin.samespan  (Default: "false")
  953.         Use Zipkin SameSpan RPC style traces.
  955.     --tracing.zipkin.samplerate  (Default: "1.000000")
  956.         The rate between 0.0 and 1.0 of requests to trace.

参考

https://www.cnblogs.com/lngo/p/11062867.html