What I Learned About Centralized TLS With ACME and Traefik
A cleaner control-plane pattern for TLS: one ACME issuer, shared certificate state, and stateless Traefik edge nodes.
Overview
Designed and built a containerized, auto-scaling microservices framework on AWS in 2014, running on Docker and ECS with Terraform managing the infrastructure. The system supported services written in Python, Node, Rust, and OpenResty, with multi-region capability.
This was the platform layer underneath AdTrade. Real-time bidding meant many small services with very different scaling profiles, so the framework had to make adding a service cheap and make each one scale on its own terms.
The framework was later modernized in 2018 under Great Data Lake, which licensed Lumate’s technology.