traefik-http3-quic

Enable HTTP/3 (QUIC) on a Traefik ingress controller in Kubernetes.

5|Updated Feb 7, 2021
One-click install
npx skills add https://github.com/ViktorBarzin/infra --skill traefik-http3-quic
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: traefik-http3-quic
Source: https://github.com/ViktorBarzin/infra/tree/main/.claude/skills/traefik-http3-quic
Command: npx skills add https://github.com/ViktorBarzin/infra --skill traefik-http3-quic

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill enables HTTP/3 (QUIC) support for a Traefik ingress controller in Kubernetes, addressing misconfigured Alt-Svc headers and port exposure.

Core Features & Use Cases

  • Traefik Helm values: configure http3 and set advertisedPort to match the external port to ensure correct Alt-Svc.
  • Service ports & re-rendering: ensure the Traefik service includes a UDP port for websecure-http3 and trigger Helm template re-renders after changes.
  • Cloudflare integration: enable HTTP/3 in Cloudflare for proxied domains and verify end-to-end connectivity.
  • Verification: perform end-to-end checks from the cluster and from external clients to confirm HTTP/3 negotiation and operation.

Quick Start

Apply the Traefik HTTP/3 configuration by enabling http3 in Helm values and re-rendering the release, then verify the Alt-Svc header and UDP port exposure.

Frequently Asked Questions about traefik-http3-quic

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enable HTTP/3 on Traefik in Kubernetes?

Enable HTTP/3 on Traefik by configuring the http3 setting in your Traefik Helm chart values, setting the advertisedPort to match the external port, and re-rendering the Helm release templates.

Why is my Traefik HTTP/3 not working despite correct Helm values?

Traefik HTTP/3 fails if the Traefik service does not expose the UDP port for websecure-http3 or if the Alt-Svc header is misconfigured. Ensure the UDP port is exposed and the advertisedPort matches the external port.

Does Traefik HTTP/3 work with Cloudflare proxied domains?

Yes, Traefik HTTP/3 works with Cloudflare proxied domains by enabling HTTP/3 in Cloudflare settings and verifying end-to-end connectivity from both the cluster and external clients.

What is the Alt-Svc header's role in Traefik HTTP/3 configuration?

The Alt-Svc header advertises the availability of the QUIC protocol to clients. Setting the correct advertisedPort in Traefik Helm values ensures this header points to the proper external port.

Can I verify Traefik HTTP/3 negotiation from an external client?

Verify Traefik HTTP/3 negotiation by performing end-to-end checks from external clients to confirm that the QUIC protocol is operating correctly and the Alt-Svc header is properly advertised.