MelonBread.dev

Why is traefik a thing

@wolf480pl i dunno. everyone i've seen use it and asked why they use it over nginx struggle to give any decent reason, and usually default to "but it has pretty graphs"

@wolf480pl kinda the same as how every user of caddy i've spoken to seems to be "i want to use nginx but couldn't figure out how to make a webroot for let's encrypt autorenewal"

@wolf480pl better lb than nginx (i am not talking about nginx pro). Works pretty great with containers and orchestrators.

@quad@weeaboo.space @wolf480pl@mstdn.io pretty graphs is pretty good tbh. nginx doesn't have any proper metrics, because it's gated on the closed source version, which ain't great.

@ignaloidas @wolf480pl even the closed source one's UI isn't that pretty either I've heard.

Personally I dump the logs through goaccess if I need an overview

@Fritange how many req/s per instance can it do in your case?

@quad@weeaboo.space @wolf480pl@mstdn.io eh, at least you can instrument the closed source one. The open source one barely has even that. Just look at what kinds of metrics the prometheus exporter gives with open source, and closed source versions. https://github.com/nginxinc/nginx-prometheus-exporter

@ignaloidas @quad yeah access log parsing is cool until you have hanging connections that didn't close yet, so they don't appear in access logs yet. Metrics aren't just about pretty graphs, they're let you make alers and help diagnose problems when SHTF

@wolf480pl @ignaloidas i mean i'm not even sure if traefik does that. you get a log, not details of current/stuck connections. at least last i checked

@quad @ignaloidas it does expose per-entrypoint and per-upstream metrics in prometheus format

@wolf480pl @ignaloidas well that's neat.

regardless, I'm happy as long as we have more web servers competing. i don't want to end up with another apache conquering the whole world. currently stuff is decent, with a good web server like nginx holding majority, but not monopoly

@wolf480pl It is more a matter of features than performances (look at nginx plus to see differences with nginx : more lb algortihms, cookie stickyness, ...).
traefik can handle most of these advanced features and has a really nice way to manage certificates.

@Fritange but it struggles under load. Or I'm doing something wrong.

@Fritange like, it doesn't matter that it has all these nice features if an 8-core instance of it falls over under mere 2k req/s

@Fritange so my question, from a person running traefik in prod toba person running traefik in prod, is: what kinda req/s are you seeing, and what should I expect my traefik to handle?

@quad @wolf480pl I use it for docker, I don't know about performance or pretty graphs, but I managed to set it up without understanding anything, even with letsencrypt without much effort. That's a selling point, it's easy

@piggo @quad ironic that this is coming from Piggo

@piggo @wolf480pl does it get much easier than:

server_name example.com;
location / { proxy_pass http://10.0.0.1; }
(Plus path to ssl cert and key if ssl)

Though? But built in letโ€™s encrypt sure is a QoL improvement I guess

@quad @wolf480pl @piggo Yeah I am a big dummy but most #nginx config files explain them self. Unless you are doing super fancy stuff.

@rain @piggo @wolf480pl I think people usually overestimate how difficult nginx is because their only interaction with it has been copying 100-line pre-made config files for it containing lots of rules for stuff like caching and extra headers.

That, and major servers like Apache and IIS has conditioned people into thinking that every web server is torture to set up.

@quad Yeah I have never had the pleasure of using Apache but I do always glance at setup guides from time to time when reading documentation, and it never seems intuitive.



@wolf480pl @piggo
replies
0
announces
0
likes
1

@rain @quad
<Directory> is unintuitive AF

@wolf480pl imo you have a different use case. Maybe you should go to a basic haproxy config. I never told than traefik is the best solution for every infrastructure. In fact, I have many configurations with differents lb/reverse proxy (mostly nginx, haproxy, traefik).
Here is a post comparing different benchmark on lb
https://www.loggly.com/blog/benchmarking-5-popular-load-balancers-nginx-haproxy-envoy-traefik-and-alb/

There is no absolute answer to what is the better lb. It depends on your needs.

@Fritange hmm so you have multiple ingress controllers in a single cluster?

@wolf480pl no, not a single cluster.