Please explain "Distributed Let's Encrypt" feature of TraefikEE

Hi @zespri!

For the sake of making the information more visible, I jump here to copy / paste the answer to the KV Store question we had during the Back to Traefik 2.0 Meetup (that you linked also).

Current (pre-2.0) traefik can store ACME certificates in a file or a KV store. The latter helps with running a cluster of traefik, but the storage is restricted to 512kb of certificate information when using Consul. Will this improve? (storing in a key per certificate instead of a single key for all, for example)

While working on 2.0, we decided it was time to rework this part. Sticking with the Unix Philosophy, “Make each program do one thing well,” Traefik is getting back to be a good old single-instance pure data plane. At the same time, clustering has been redesigned from scratch using a production-proven rock-solid raft-based implementation, shipped with Traefik Enterprise Edition (see how). Distributed features (like Let’s Encrypt) can now rely on this advanced cluster technology for these use cases. But hey! You can still use multiple Traefik instances with your favorite KV store, we only removed the unstable and experimental part :slight_smile:

In a nutshell, it means that our current plan with this is to

  1. work on (and improve) Traefik v2
  2. keep supporting v1 for bug fixes
  3. use Traefik EE's architecture for everything that is distributed

Regarding the current issue you mentioned, based on the above roadmap, it is not something we are actively working on.

I hope it clarifies our team's current vision on this!

1 Like