Week 5 Citation Asset
Docker Reverse Proxy Capability Matrix
This page is designed as a quotable reference for architecture notes and migration discussions. All rows use one consistent baseline from the current route catalog.
Directly Quotable Conclusions
- Coverage baseline: 87 valid app-db-proxy routes are generated from the current catalog, with about 29 routes per proxy engine.
- Nginx provides the strongest low-level tuning control, suitable for teams that want explicit config ownership.
- Caddy minimizes operational overhead with automatic HTTPS and simpler defaults, ideal for small teams.
- Traefik is strongest for dynamic multi-service routing and label-driven automation in larger Docker estates.
Capability Matrix
| Dimension | Nginx | Caddy | Traefik |
|---|---|---|---|
| TLS and certificate lifecycle | Manual ACME integration or external certbot workflow | Built-in automatic HTTPS and renewal | ACME resolver automation with configurable storage |
| Service discovery model | Mostly static upstream definitions | Static plus lightweight dynamic updates | Native dynamic discovery via Docker labels |
| Granular traffic control | Very strong directives for buffering and limits | Moderate, opinionated defaults | Strong middleware chains and routing rules |
| Operational complexity | Higher, config-heavy | Lower, concise config | Medium-high, label and middleware planning |
| Best-fit deployment profile | Performance tuning and strict policy control | Fast launch and low-maintenance hosting | Multi-service platforms and frequent routing change |