Traefik Mesh website screenshot

Traefik Mesh

Traefik Mesh (formerly Maesh) is a lightweight, non-invasive service mesh built on top of Traefik Proxy for Kubernetes. It provides automatic traffic management, observability, and security for microservices without requiring sidecar containers. Traefik Mesh is compliant with the Service Mesh Interface (SMI) specification and supports HTTP, TCP, and UDP traffic modes, traffic splitting, access control via TrafficTarget, rate limiting, circuit breaking, and retries. The project is effectively dormant: the last released version is v1.4.8 (2022-08-19), and commit activity since then has been limited to CI and documentation maintenance. The GitHub repository is not formally archived as of this profile date and there is no official deprecation banner on the project's README or documentation site, but the lack of feature releases for nearly four years and the absence of an SMI-compatible successor inside Traefik Labs' product line (Traefik Hub is positioned as Kubernetes-native API management, not a service mesh) make this an unmaintained project for practical purposes.

Traefik Mesh publishes 3 APIs on the APIs.io network: Configuration API, Status API, and Topology API. Tagged areas include Kubernetes, Service Mesh, Open Source, SMI, and Traffic Management.

The Traefik Mesh catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

Traefik Mesh’s developer surface includes documentation, engineering blog, release notes, changelog, and 15 more developer resources.

42.5/100 developing ▬ flat Agent 29/100 agent aware Full breakdown ↓
scored 2026-08-05 · rubric v0.9.1
3 APIs 8 Features 4 Use Cases
KubernetesService MeshOpen SourceSMITraffic ManagementDormantUnmaintained

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-05 · rubric v0.9.1
Composite quality — 42.5/100 · developing
Contract Quality 16.9 / 25
Developer Ergonomics 3.0 / 20
Commercial Clarity 4.2 / 20
Operational Transparency 2.7 / 13
Governance 8.3 / 12
Discoverability 7.4 / 10
Agent readiness — 29/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 0 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 7 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/traefik-mesh: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 3

Individual APIs this provider publishes, each with its own machine-readable definition.

Traefik Mesh Configuration API

Endpoints for retrieving the current dynamic Traefik configuration generated by the Traefik Mesh controller.

Traefik Mesh Status API

Endpoints for checking the readiness and status of the Traefik Mesh controller and proxy nodes.

Traefik Mesh Topology API

Endpoints for inspecting the mesh topology as seen by the controller.

Open Collections 1

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Features 8

Notable capabilities this provider offers.

Non-Invasive Service Mesh

No sidecar containers required; uses per-node Traefik Proxy instances.

SMI Compliance

Full support for Service Mesh Interface (SMI) specification including TrafficSplit, TrafficTarget, HTTPRouteGroup, and TCPRoute.

HTTP Traffic Management

Retry, circuit breaking, rate limiting, and traffic splitting for HTTP services.

TCP and UDP Support

Transparent proxy support for TCP and UDP traffic in addition to HTTP.

Access Control List (ACL) Mode

All traffic forbidden by default unless explicitly allowed via SMI TrafficTarget resources.

Traffic Splitting

Route traffic subsets to different service versions using SMI TrafficSplit.

Kubernetes Annotations

Configure mesh behavior per service via Kubernetes annotations.

Helm Installation

Easy deployment and configuration via official Helm chart.

Scroll for all 8

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Traefik Mesh Context

22 classes · 0 properties

JSON-LD

Spectral Rules 2

Spectral governance rulesets for linting and validating these APIs.

Traefik Mesh API Rules

5 rules · 3 warnings 2 info

SPECTRAL

Traefik Mesh API Rules

15 rules · 8 errors 7 warnings

SPECTRAL

JSON Schema 2

Standalone JSON Schema definitions for this provider's data models.

Traefik Mesh Pod Info

3 properties

JSON SCHEMA

Traefik Mesh Service Entry

5 properties

JSON SCHEMA

JSON Structure 1

JSON Structure definitions describing this provider's data shapes.

Traefik Mesh Pod Info Structure

0 properties

JSON STRUCTURE

Examples 1

Example request and response payloads for these APIs.

Security Posture 1

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Traefik Mesh Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Traefik Mesh Agentic Access

5 operations

5 operations · 0 acting

AGENTIC

Use Cases 4

What developers build with this provider.

Canary Deployments

Gradually shift traffic to new service versions using SMI TrafficSplit.

Service-to-Service Access Control

Enforce zero-trust networking with SMI TrafficTarget ACL mode.

Observability

Inspect live mesh configuration, topology, and node readiness via controller API.

Microservices Traffic Management

Apply retries, circuit breakers, and rate limits without changing application code.

Integrations 3

Pre-built integrations with other platforms and tools.

Traefik Proxy

Uses Traefik Proxy as the data plane proxy on each Kubernetes node.

Kubernetes

Native Kubernetes integration via Custom Resource Definitions and annotations.

SMI Spec

Implements Service Mesh Interface specification for interoperability.

Resources

Documentation 1

Reference material describing how the API behaves

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 3

Pagination, idempotency, versioning, errors, and events

Build 2

SDKs, sample code, and the tooling you integrate with

Access & Security 1

Authentication, authorization, and security posture

Operate 5

Status, limits, changes, and where to get help

Commercial 3

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Other 1

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: traefik-mesh
name: Traefik Mesh
description: 'Traefik Mesh (formerly Maesh) is a lightweight, non-invasive service mesh built on top of Traefik Proxy for
  Kubernetes. It provides automatic traffic management, observability, and security for microservices without requiring sidecar
  containers. Traefik Mesh is compliant with the Service Mesh Interface (SMI) specification and supports HTTP, TCP, and UDP
  traffic modes, traffic splitting, access control via TrafficTarget, rate limiting, circuit breaking, and retries. The project
  is effectively dormant: the last released version is v1.4.8 (2022-08-19), and commit activity since then has been limited
  to CI and documentation maintenance. The GitHub repository is not formally archived as of this profile date and there is
  no official deprecation banner on the project''s README or documentation site, but the lack of feature releases for nearly
  four years and the absence of an SMI-compatible successor inside Traefik Labs'' product line (Traefik Hub is positioned
  as Kubernetes-native API management, not a service mesh) make this an unmaintained project for practical purposes.'
type: Index
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source: []
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/traefik-mesh.png
url: https://raw.githubusercontent.com/api-evangelist/traefik-mesh/refs/heads/main/apis.yml
created: '2026-05-03'
modified: '2026-05-23'
specificationVersion: '0.19'
tags:
- Kubernetes
- Service Mesh
- Open Source
- SMI
- Traffic Management
- Dormant
- Unmaintained
apis:
- aid: traefik-mesh:traefik-mesh-configuration-api
  name: Traefik Mesh Configuration API
  description: Endpoints for retrieving the current dynamic Traefik configuration generated by the Traefik Mesh controller.
  humanURL: https://doc.traefik.io/traefik-mesh/
  baseURL: http://controller-pod-ip:9000
  tags:
  - Configuration
  properties:
  - type: OpenAPI
    url: openapi/traefik-mesh-configuration-api-openapi.yml
  - type: Documentation
    url: https://doc.traefik.io/traefik-mesh/
  - type: GitHubRepository
    url: https://github.com/traefik/mesh
  - type: JSONSchema
    url: json-schema/traefik-mesh-pod-info-schema.json
  - type: JSONSchema
    url: json-schema/traefik-mesh-service-entry-schema.json
- aid: traefik-mesh:traefik-mesh-status-api
  name: Traefik Mesh Status API
  description: Endpoints for checking the readiness and status of the Traefik Mesh controller and proxy nodes.
  humanURL: https://doc.traefik.io/traefik-mesh/
  baseURL: http://controller-pod-ip:9000
  tags:
  - Status
  properties:
  - type: OpenAPI
    url: openapi/traefik-mesh-status-api-openapi.yml
  - type: Documentation
    url: https://doc.traefik.io/traefik-mesh/
  - type: GitHubRepository
    url: https://github.com/traefik/mesh
  - type: JSONSchema
    url: json-schema/traefik-mesh-pod-info-schema.json
  - type: JSONSchema
    url: json-schema/traefik-mesh-service-entry-schema.json
- aid: traefik-mesh:traefik-mesh-topology-api
  name: Traefik Mesh Topology API
  description: Endpoints for inspecting the mesh topology as seen by the controller.
  humanURL: https://doc.traefik.io/traefik-mesh/
  baseURL: http://controller-pod-ip:9000
  tags:
  - Topology
  properties:
  - type: OpenAPI
    url: openapi/traefik-mesh-topology-api-openapi.yml
  - type: Documentation
    url: https://doc.traefik.io/traefik-mesh/
  - type: GitHubRepository
    url: https://github.com/traefik/mesh
  - type: JSONSchema
    url: json-schema/traefik-mesh-pod-info-schema.json
  - type: JSONSchema
    url: json-schema/traefik-mesh-service-entry-schema.json
common:
- type: AgenticAccess
  url: agentic-access/traefik-mesh-agentic-access.yml
- type: DomainSecurity
  url: security/traefik-mesh-domain-security.yml
- type: Website
  url: https://traefik.io/traefik-mesh
- type: Documentation
  url: https://doc.traefik.io/traefik-mesh/
- type: GitHubOrganization
  url: https://github.com/traefik
- type: GitHubRepository
  url: https://github.com/traefik/mesh
- type: HelmChart
  url: https://github.com/traefik/mesh-helm-chart
- type: Blog
  url: https://traefik.io/blog/
- type: Community
  url: https://community.traefik.io/
- type: Slack
  url: https://slack.traefik.io/
- type: TermsOfService
  url: https://traefik.io/terms/
- type: PrivacyPolicy
  url: https://traefik.io/privacy/
- type: License
  url: https://github.com/traefik/mesh/blob/master/LICENSE
- type: Spectral
  url: rules/traefik-mesh-rules.yml
- type: JSONLD
  url: json-ld/traefik-mesh-context.jsonld
- type: Vocabulary
  url: vocabulary/traefik-mesh-vocabulary.yml
- type: ReleaseNotes
  url: https://github.com/traefik/mesh/releases
- type: ChangeLog
  url: https://github.com/traefik/mesh/releases
- type: MaintenanceStatus
  data:
    status: Dormant
    formallyArchived: false
    lastRelease: v1.4.8
    lastReleaseDate: '2022-08-19'
    lastCommitDate: '2026-03-23'
    lastCommitNote: Most recent commits are CI and documentation housekeeping (chore(docs)/chore(ci)) rather than feature
      work. No code changes of substance since 2022.
    officialDeprecationNotice: false
    replacement: None announced by Traefik Labs
    relatedProducts:
    - name: Traefik Hub
      url: https://traefik.io/traefik-hub/
      relationship: Kubernetes-native API management — not a service mesh and not positioned by Traefik Labs as a Traefik
        Mesh successor.
    - name: Traefik Proxy
      url: https://traefik.io/traefik/
      relationship: The underlying ingress/edge proxy. Several Traefik Mesh capabilities (HTTP middleware, retries, rate limiting,
        circuit breaking) are available natively in Traefik Proxy without the mesh layer.
    ecosystemContext: The broader Service Mesh Interface (SMI) specification that Traefik Mesh implements has itself stalled
      (no new releases since 2021) and was archived by CNCF in 2023, weakening the SMI-based positioning of this project.
- type: Features
  data:
  - name: Non-Invasive Service Mesh
    description: No sidecar containers required; uses per-node Traefik Proxy instances.
  - name: SMI Compliance
    description: Full support for Service Mesh Interface (SMI) specification including TrafficSplit, TrafficTarget, HTTPRouteGroup,
      and TCPRoute.
  - name: HTTP Traffic Management
    description: Retry, circuit breaking, rate limiting, and traffic splitting for HTTP services.
  - name: TCP and UDP Support
    description: Transparent proxy support for TCP and UDP traffic in addition to HTTP.
  - name: Access Control List (ACL) Mode
    description: All traffic forbidden by default unless explicitly allowed via SMI TrafficTarget resources.
  - name: Traffic Splitting
    description: Route traffic subsets to different service versions using SMI TrafficSplit.
  - name: Kubernetes Annotations
    description: Configure mesh behavior per service via Kubernetes annotations.
  - name: Helm Installation
    description: Easy deployment and configuration via official Helm chart.
- type: UseCases
  data:
  - name: Canary Deployments
    description: Gradually shift traffic to new service versions using SMI TrafficSplit.
  - name: Service-to-Service Access Control
    description: Enforce zero-trust networking with SMI TrafficTarget ACL mode.
  - name: Observability
    description: Inspect live mesh configuration, topology, and node readiness via controller API.
  - name: Microservices Traffic Management
    description: Apply retries, circuit breakers, and rate limits without changing application code.
- type: Integrations
  data:
  - name: Traefik Proxy
    description: Uses Traefik Proxy as the data plane proxy on each Kubernetes node.
  - name: Kubernetes
    description: Native Kubernetes integration via Custom Resource Definitions and annotations.
  - name: SMI Spec
    description: Implements Service Mesh Interface specification for interoperability.
- type: LlmsText
  url: https://traefik.io/llms.txt
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com