Traefik Hub for Service Providers on Nutanix

Nutanix Flow gives each tenant its own VPC, with security policies and a Layer 4 load balancer. For the application layer, Nutanix works with partners such as Traefik Labs. Traefik Hub serves encrypted connections and renews their certificates, runs a web application firewall with the OWASP Core Rule Set, and acts as an API gateway with keys, tokens, rate limits, and plans. Flow keeps tenants apart; Traefik Hub serves their apps.

Traefik Hub runs on top of Flow in three tenant network designs: shared in a transit VPC that serves many tenants, in a dedicated transit VPC for one tenant, or inside the tenant's own VPC. Each placement maps to a tier (e.g., Basic, Premium, and Enterprise), so providers keep the network design they already run and sell each placement at its own price point. Nutanix runs the platform underneath, with SP Central for tenants and quotas, Prism Central for VMs and categories, AHV for virtual machines, and NKP for Kubernetes.

Traefik Hub finds tenant VMs through Nutanix categories. Set up a service once, then tag a VM to add it to that service. Remove the tag and the VM leaves. Operators tag VMs in Prism Central, and tenants can tag their own in SP Central, with the categories they already use. Apps on NKP, Nutanix Kubernetes Platform, are discovered from Kubernetes directly.

Traefik Hub is a single, lightweight binary that delivers load balancing, encryption, a web application firewall, and an API gateway, so providers run one light component instead of a separate tool for each service. That leaves more server capacity for tenants and the services they pay for.

Yes. Basic, Premium, and Enterprise all run the same Traefik Hub with the same routes and policies. Moving a tenant up a tier changes where Traefik Hub runs, from a shared transit VPC to a dedicated transit VPC or into the tenant's own VPC, without adding a new tool.

Distro Zero and a FIPS 140-3 compliant image with a validated cryptographic module are included at the Enterprise tier. Every tenant gets encryption with certificate renewal, and Premium and Enterprise tenants get a web application firewall running the OWASP Core Rule Set. For tenants that need traffic handled inside their own network, the top tier runs Traefik Hub inside the tenant's VPC, dedicated to that one tenant.

Yes. The same Traefik Hub delivers load balancing, encryption, a web application firewall, and an API gateway on top of Nutanix Flow, finds VMs through Nutanix categories, and serves apps on AHV and NKP. Enterprises already working with Nutanix can ask their Nutanix team about Traefik Hub.