Traefik

Traefik watches your container platform and configures itself: attach a few labels to a Docker service and routing, TLS certificates and middleware appear without touching a config file. In Kubernetes it plays the same trick with ingress resources.

The label-driven magic is wonderful once it clicks and bewildering before that — Traefik's learning curve is front-loaded compared to writing plain nginx config. Automatic Let's Encrypt handling is first-class.

The natural choice when services come and go dynamically and you are tired of editing proxy configs to match.