# \#kv

**URL:** https://community.traefik.io/tag/kv/48.md

[Latest](https://community.traefik.io/latest.md) · [Categories](https://community.traefik.io/categories.md) · [Tags](https://community.traefik.io/tags.md)

---

## [Redis can be a Provider and thank you Traefik](https://community.traefik.io/t/redis-can-be-a-provider-and-thank-you-traefik/29909)

<div class="topic-metadata">

**Author:** [@j0nny55555](https://community.traefik.io/u/j0nny55555)\
**Replies:** 0\
**Last updated:** [May 30, 2026, 10:27am UTC](https://community.traefik.io/t/redis-can-be-a-provider-and-thank-you-traefik/29909 "2026-05-30T10:27:38Z")

</div>

Allowed for truly easy ipallowlist management, will say, a big boost would come to some documentation on how to abstract out lists into the Redis detail... To any that get here wondering, following the "/" separator syn…

---

## [Huge consul KV update ends in ressource spikes](https://community.traefik.io/t/huge-consul-kv-update-ends-in-ressource-spikes/29778)

<div class="topic-metadata">

**Author:** [@leva](https://community.traefik.io/u/leva)\
**Replies:** 3\
**Last updated:** [April 15, 2026, 3:07pm UTC](https://community.traefik.io/t/huge-consul-kv-update-ends-in-ressource-spikes/29778 "2026-04-15T15:07:10Z")

</div>

Last week we had to migrate about 1000 customers in our DB which lead to over 3000 new ressources created in consul kv that were then picked up by traefik. This lead to enourmous resouce spikes that eventually ended in …

---

## [Does traefik support dynamic entrypoint](https://community.traefik.io/t/does-traefik-support-dynamic-entrypoint/29505)

<div class="topic-metadata">

**Author:** [@pavanbhaskardev](https://community.traefik.io/u/pavanbhaskardev)\
**Replies:** 7\
**Last updated:** [December 27, 2025, 9:05am UTC](https://community.traefik.io/t/does-traefik-support-dynamic-entrypoint/29505 "2025-12-27T09:05:44Z")

</div>

Hi everyone, We’re trying to proxy multiple TCP connections to our databases inside a private network # traefik.yaml entryPoints: web: address: ":80" websecure: address: ":443" ping: address: ":8082" …

---

## [Traefik 3.x + Knative Serving (v1.19): kservice Returns "IngressNotConfigured"](https://community.traefik.io/t/traefik-3-x-knative-serving-v1-19-kservice-returns-ingressnotconfigured/29336)

<div class="topic-metadata">

**Author:** [@astahjmo](https://community.traefik.io/u/astahjmo)\
**Replies:** 0\
**Last updated:** [November 22, 2025, 12:53pm UTC](https://community.traefik.io/t/traefik-3-x-knative-serving-v1-19-kservice-returns-ingressnotconfigured/29336 "2025-11-22T12:53:55Z")

</div>

Hello everyone, I am setting up a Knative Serving environment using Traefik as the Ingress Controller, following the official Traefik documentation for the Knative provider. Environment: k3s default traefik disabled …

---

## [Traefik Ingressroute Certificate rotating issue](https://community.traefik.io/t/traefik-ingressroute-certificate-rotating-issue/28595)

<div class="topic-metadata">

**Author:** [@JaiLakshmanKumar](https://community.traefik.io/u/JaiLakshmanKumar)\
**Replies:** 2\
**Last updated:** [September 11, 2025, 9:05pm UTC](https://community.traefik.io/t/traefik-ingressroute-certificate-rotating-issue/28595 "2025-09-11T21:05:32Z")

</div>

We are picking the certificate from akv and secret is created. Applied that secret onto ingressroute in tls.secretName.Then we restarted traefik pod and application deployment.After hitting the url of application it is s…

---

## [Traefik does not prune deleted rules from redis KV](https://community.traefik.io/t/traefik-does-not-prune-deleted-rules-from-redis-kv/27789)

<div class="topic-metadata">

**Author:** [@alxpgn](https://community.traefik.io/u/alxpgn)\
**Replies:** 1\
**Last updated:** [June 24, 2025, 2:00pm UTC](https://community.traefik.io/t/traefik-does-not-prune-deleted-rules-from-redis-kv/27789 "2025-06-24T14:00:02Z")

</div>

I noticed that traefik does not propagate deletion of dynamic kv (redis), only updates. Is that an expected behavior ? A bit of context of my setup. I have configured traefik to use a redis instance using static config…

---

## [HA with etcd backed certs in swarm](https://community.traefik.io/t/ha-with-etcd-backed-certs-in-swarm/26616)

<div class="topic-metadata">

**Author:** [@Karmicjuju](https://community.traefik.io/u/Karmicjuju)\
**Replies:** 3\
**Last updated:** [February 24, 2025, 6:05am UTC](https://community.traefik.io/t/ha-with-etcd-backed-certs-in-swarm/26616 "2025-02-24T06:05:13Z")

</div>

Running a Swarm cluster and v3 as a global service. When I set the cert storage to a file, i get a successful challenge. However, pointing to etcd endpoints returns unable to get ACME account: open etcd://192.168.7.200…

---

## [Traefik cluster with etcd](https://community.traefik.io/t/traefik-cluster-with-etcd/25881)

<div class="topic-metadata">

**Author:** [@mfreeman451](https://community.traefik.io/u/mfreeman451)\
**Replies:** 0\
**Last updated:** [January 7, 2025, 4:00pm UTC](https://community.traefik.io/t/traefik-cluster-with-etcd/25881 "2025-01-07T16:00:25Z")

</div>

I'm trying to back my traefik cluster with etcd. I've added the config to etcd, I setup a watcher before I pushed to the KV and see the values get created, however traefik complains that its watcher isn't actually seeing…

---

## [The WatchTree Channel is Closed Error after Implementing Redis Server Provider Authentication](https://community.traefik.io/t/the-watchtree-channel-is-closed-error-after-implementing-redis-server-provider-authentication/25170)

<div class="topic-metadata">

**Author:** [@svatsala](https://community.traefik.io/u/svatsala)\
**Replies:** 2\
**Last updated:** [November 15, 2024, 6:39pm UTC](https://community.traefik.io/t/the-watchtree-channel-is-closed-error-after-implementing-redis-server-provider-authentication/25170 "2024-11-15T18:39:08Z")

</div>

We have a traefik proxy pod that should connect to our redis instance pods in the same kubernetes cluster. However, after we've implemented redis auth, we are getting the following looping error in our traefik proxy that…

---

## [Seeking Advice on Using Traefik for Large-Scale API Gateway Deployment](https://community.traefik.io/t/seeking-advice-on-using-traefik-for-large-scale-api-gateway-deployment/22339)

<div class="topic-metadata">

**Author:** [@leonlyu1996](https://community.traefik.io/u/leonlyu1996)\
**Replies:** 1\
**Last updated:** [April 18, 2024, 8:47am UTC](https://community.traefik.io/t/seeking-advice-on-using-traefik-for-large-scale-api-gateway-deployment/22339 "2024-04-18T08:47:10Z")

</div>

Hello everyone, I am currently planning to deploy Traefik as an API gateway within my enterprise, and I choose to use ETCD as the provider. Our setup is expected to include over 1,000 routers, 1,000 services, and 10,000…

---

## [Checking if a header is unset in route rule](https://community.traefik.io/t/checking-if-a-header-is-unset-in-route-rule/19535)

<div class="topic-metadata">

**Author:** [@aucampia](https://community.traefik.io/u/aucampia)\
**Replies:** 2\
**Last updated:** [August 18, 2023, 8:23am UTC](https://community.traefik.io/t/checking-if-a-header-is-unset-in-route-rule/19535 "2023-08-18T08:23:29Z")

</div>

Is there some way with nomad to check if a header is not set in a routing rule? I think technically this should do it: !HeadersRegexp(\`x-some-header\`, \`.\*\`) This should work because .\* should always match any value, s…

---

## [Bring up traefik on host 0.0.0.0](https://community.traefik.io/t/bring-up-traefik-on-host-0-0-0-0/19443)

<div class="topic-metadata">

**Author:** [@nikhil-kagita](https://community.traefik.io/u/nikhil-kagita)\
**Replies:** 1\
**Last updated:** [August 7, 2023, 4:04pm UTC](https://community.traefik.io/t/bring-up-traefik-on-host-0-0-0-0/19443 "2023-08-07T16:04:43Z")

</div>

Ideally, when I bring up a simple http server using python -m http.server 8081, it runs on 0.0.0.0:8081 which can be connected from a different pod. Upon giving the netstat -nlp command, I see that the local address is 0…

---

## [Certificates in consul?](https://community.traefik.io/t/certificates-in-consul/14419)

<div class="topic-metadata">

**Author:** [@chrisbecke](https://community.traefik.io/u/chrisbecke)\
**Replies:** 3\
**Last updated:** [August 1, 2023, 6:32am UTC](https://community.traefik.io/t/certificates-in-consul/14419 "2023-08-01T06:32:05Z")

</div>

Its not clear how (or if its possible) to store certificate base64 data in consul when consul is being used as a configuration provider. Attaching Consul as a configuration provider to Traefik provides a way to provide …

---

## [level=error msg="KV connection error: failed to watch KV: key not found in store](https://community.traefik.io/t/level-error-msg-kv-connection-error-failed-to-watch-kv-key-not-found-in-store/19170)

<div class="topic-metadata">

**Author:** [@huerni](https://community.traefik.io/u/huerni)\
**Replies:** 1\
**Last updated:** [July 9, 2023, 11:43am UTC](https://community.traefik.io/t/level-error-msg-kv-connection-error-failed-to-watch-kv-key-not-found-in-store/19170 "2023-07-09T11:43:58Z")

</div>

Hello, my docker-compose file is as follows, but I keep getting the error message "level=error msg="KV connection error: failed to watch KV: key not found in store, retrying in 16.356303067s" providerName=etcd". Can you …

---

## [Specifying service port, when using KV store for config](https://community.traefik.io/t/specifying-service-port-when-using-kv-store-for-config/17392)

<div class="topic-metadata">

**Author:** [@dandrews](https://community.traefik.io/u/dandrews)\
**Replies:** 3\
**Last updated:** [February 3, 2023, 7:07am UTC](https://community.traefik.io/t/specifying-service-port-when-using-kv-store-for-config/17392 "2023-02-03T07:07:22Z")

</div>

I have been trying to get a one of my services connected that uses a port other than 80 or 443. Im using a K/V store (Redis) for managing all my config. I've seen docs and samples for setting this as a label traefik.ht…

---

## [Traefik v2.9 not reading dynamic tls config file](https://community.traefik.io/t/traefik-v2-9-not-reading-dynamic-tls-config-file/16344)

<div class="topic-metadata">

**Author:** [@ffrank](https://community.traefik.io/u/ffrank)\
**Replies:** 2\
**Last updated:** [November 4, 2022, 4:14pm UTC](https://community.traefik.io/t/traefik-v2-9-not-reading-dynamic-tls-config-file/16344 "2022-11-04T16:14:32Z")

</div>

I run traefik in Docker Swarm. I launch it with command: - --providers.docker.swarmMode=true - --providers.file.directory=/configuration - --log.level=DEBUG In the volume mounted to /configuratio…

---

## [Sub-level subdomains TLS not working](https://community.traefik.io/t/sub-level-subdomains-tls-not-working/16324)

<div class="topic-metadata">

**Author:** [@Krystex](https://community.traefik.io/u/Krystex)\
**Replies:** 5\
**Last updated:** [November 2, 2022, 4:06pm UTC](https://community.traefik.io/t/sub-level-subdomains-tls-not-working/16324 "2022-11-02T16:06:09Z")

</div>

Hi there! So I'm using redis to automatically create configurations, but sub-level subdomains (e.g. files.home.myhost.com) are not working with TLS, so the traefik default cert is returned. Normal 1-level subdomains lik…

---

## [Traefik reloads entire dynamic Redis configuration when updating a single service/route](https://community.traefik.io/t/traefik-reloads-entire-dynamic-redis-configuration-when-updating-a-single-service-route/16028)

<div class="topic-metadata">

**Author:** [@mah82](https://community.traefik.io/u/mah82)\
**Replies:** 0\
**Last updated:** [October 5, 2022, 11:15am UTC](https://community.traefik.io/t/traefik-reloads-entire-dynamic-redis-configuration-when-updating-a-single-service-route/16028 "2022-10-05T11:15:02Z")

</div>

Hi, We are running Traefik based on a dynamic configuration in Redis, using it as a reverse proxy for about 100 backend VMs. So far we have been quite impressed with the performance and ease of use of Traefik. However,…

---

## [Traefik not reloading configuration when redis was updated](https://community.traefik.io/t/traefik-not-reloading-configuration-when-redis-was-updated/5532)

<div class="topic-metadata">

**Author:** [@2dmorg](https://community.traefik.io/u/2dmorg)\
**Replies:** 1\
**Last updated:** [October 5, 2022, 10:56am UTC](https://community.traefik.io/t/traefik-not-reloading-configuration-when-redis-was-updated/5532 "2022-10-05T10:56:54Z")

</div>

redis: 5.0 traefik: 2.2.0 config.toml: ################################################################ # # Configuration for Traefik v2. # ################################################################ ###########…

---

## [How can I store SSL Certs in a Key-Value store like Redis, Vault, Consul or etcd rather than in acme.json?](https://community.traefik.io/t/how-can-i-store-ssl-certs-in-a-key-value-store-like-redis-vault-consul-or-etcd-rather-than-in-acme-json/15682)

<div class="topic-metadata">

**Author:** [@lakshminarasimmanv](https://community.traefik.io/u/lakshminarasimmanv)\
**Replies:** 2\
**Last updated:** [September 9, 2022, 4:13pm UTC](https://community.traefik.io/t/how-can-i-store-ssl-certs-in-a-key-value-store-like-redis-vault-consul-or-etcd-rather-than-in-acme-json/15682 "2022-09-09T16:13:25Z")

</div>

Is it possible to use other services like Redis, Vault, Consul, or etcd to store and access SSL certificates, instead of storing them in an acme.json file? Here's my traefik.yml configuration, Thanks in advance!

---

## [Redis seems to lose connection to redis and not reconnect until restart](https://community.traefik.io/t/redis-seems-to-lose-connection-to-redis-and-not-reconnect-until-restart/15221)

<div class="topic-metadata">

**Author:** [@flopana](https://community.traefik.io/u/flopana)\
**Replies:** 2\
**Last updated:** [August 8, 2022, 12:58pm UTC](https://community.traefik.io/t/redis-seems-to-lose-connection-to-redis-and-not-reconnect-until-restart/15221 "2022-08-08T12:58:44Z")

</div>

I use Redis as a Provider in which I insert rules that dynamically change over time trough my program. Usually this works fine but sometimes Traefik won't get any new Configurations from Redis or delete old ones until I…

---

## [Can servers in load balancer has it own tls certs](https://community.traefik.io/t/can-servers-in-load-balancer-has-it-own-tls-certs/14395)

<div class="topic-metadata">

**Author:** [@Ferrymania](https://community.traefik.io/u/Ferrymania)\
**Replies:** 0\
**Last updated:** [May 8, 2022, 7:40am UTC](https://community.traefik.io/t/can-servers-in-load-balancer-has-it-own-tls-certs/14395 "2022-05-08T07:40:39Z")

</div>

now I have several servers in load banlance,and each server need mTLS,so each server has different tls client certs, now I add certs in serversTransport like this, serversTransports: { myTransport: { certificates: \[ { ce…

---

## [Zookeeper polling/refresh interval](https://community.traefik.io/t/zookeeper-polling-refresh-interval/14109)

<div class="topic-metadata">

**Author:** [@brad.erickson](https://community.traefik.io/u/brad.erickson)\
**Replies:** 2\
**Last updated:** [April 13, 2022, 5:48pm UTC](https://community.traefik.io/t/zookeeper-polling-refresh-interval/14109 "2022-04-13T17:48:35Z")

</div>

We are currently implementing a new set of traefik instances in our infrastructure. For us the best option would be to use zookeeper (kv) as we have that for our dynamic configs. What I have seen is the traefik instance …

---

## [Traefik + Lets Encrypt TLS-ALPN-01 Certificate Managment](https://community.traefik.io/t/traefik-lets-encrypt-tls-alpn-01-certificate-managment/13692)

<div class="topic-metadata">

**Author:** [@LordG66](https://community.traefik.io/u/LordG66)\
**Replies:** 3\
**Last updated:** [March 9, 2022, 10:00am UTC](https://community.traefik.io/t/traefik-lets-encrypt-tls-alpn-01-certificate-managment/13692 "2022-03-09T10:00:45Z")

</div>

The need to manage and provide certificates for a large amount of domains(100k+) is said to supported by traefik in combination with a KV store for dynamic router configuration. The chosen method is TLS-ALPN-01 because …

---

## [Usage of redis for configuration](https://community.traefik.io/t/usage-of-redis-for-configuration/13554)

<div class="topic-metadata">

**Author:** [@vladoportos](https://community.traefik.io/u/vladoportos)\
**Replies:** 0\
**Last updated:** [February 22, 2022, 5:50pm UTC](https://community.traefik.io/t/usage-of-redis-for-configuration/13554 "2022-02-22T17:50:24Z")

</div>

Is there some example of using redis for dynamic configuration, because documentation was virtually no help and nobody on Google seems to be using it..everybody is reaching for the file provider. Problem is that I have …

---

## [Trying to use alternate certificate with Consul KV](https://community.traefik.io/t/trying-to-use-alternate-certificate-with-consul-kv/11752)

<div class="topic-metadata">

**Author:** [@eadderley](https://community.traefik.io/u/eadderley)\
**Replies:** 5\
**Last updated:** [September 14, 2021, 9:09pm UTC](https://community.traefik.io/t/trying-to-use-alternate-certificate-with-consul-kv/11752 "2021-09-14T21:09:27Z")

</div>

Hi. We're using Consul Catalog for routing and Consul K/V for doing certs. Our tags in Catalog look like so: tags = \[ "mortar-static", "traefik.enable=true", "traefik.http.routers.mortar-s…

---

## [TraefikV2 Consul rootkey](https://community.traefik.io/t/traefikv2-consul-rootkey/11202)

<div class="topic-metadata">

**Author:** [@Raskosk](https://community.traefik.io/u/Raskosk)\
**Replies:** 2\
**Last updated:** [July 17, 2021, 7:24am UTC](https://community.traefik.io/t/traefikv2-consul-rootkey/11202 "2021-07-17T07:24:22Z")

</div>

I'm just getting started with traefik and Consul. I've 3 independent running traefikV2.4.9 instances and want to manage my configurations with Consul and ConsulCatalog. Therefore, I'm trying to keep my configurations f…

---

## [Share LE Certs between multiple traefik instances](https://community.traefik.io/t/share-le-certs-between-multiple-traefik-instances/10897)

<div class="topic-metadata">

**Author:** [@JacobDEvans](https://community.traefik.io/u/JacobDEvans)\
**Replies:** 1\
**Last updated:** [June 11, 2021, 9:46pm UTC](https://community.traefik.io/t/share-le-certs-between-multiple-traefik-instances/10897 "2021-06-11T21:46:48Z")

</div>

I'm aware CE no longer supports KV stores for LE/ACME Certs, but is there a way to disable renewals on some nodes and use other shared storage methods (such as shared acme.json volume via portworx)? Current workaround i…

---

## [\[CONSUL\]\[ACL\] Using ACL with traefik 2.0 for configuration discovery](https://community.traefik.io/t/consul-acl-using-acl-with-traefik-2-0-for-configuration-discovery/10404)

<div class="topic-metadata">

**Author:** [@bvivi57](https://community.traefik.io/u/bvivi57)\
**Replies:** 8\
**Last updated:** [April 30, 2021, 2:53pm UTC](https://community.traefik.io/t/consul-acl-using-acl-with-traefik-2-0-for-configuration-discovery/10404 "2021-04-30T14:53:54Z")

</div>

Hi, I am looking to use the KV function of consul to configure traefik. For security reasons, I have created an ACL that allows the traefik root to read. I can't configure the token associated to this ACL for traefik. …

---

## [Am I able to use redis to store millions of exact paths?](https://community.traefik.io/t/am-i-able-to-use-redis-to-store-millions-of-exact-paths/10184)

<div class="topic-metadata">

**Author:** [@bsr](https://community.traefik.io/u/bsr)\
**Replies:** 1\
**Last updated:** [March 31, 2021, 7:58am UTC](https://community.traefik.io/t/am-i-able-to-use-redis-to-store-millions-of-exact-paths/10184 "2021-03-31T07:58:29Z")

</div>

Hi, I have a use case that i hope traefik can support. I have millions of existing routes that do not follow any pattern that I can rely on. The plan is to use redis to store these paths as kv pairs and feed them to t…

[Next page](https://community.traefik.io/tag/kv/48.md?match_all_tags=true&page=1&tags%5B%5D=kv)
