{"id":2228,"date":"2026-07-13T11:40:55","date_gmt":"2026-07-13T11:40:55","guid":{"rendered":"https:\/\/ukspeed.co.uk\/blog\/?p=2228"},"modified":"2026-07-13T11:50:59","modified_gmt":"2026-07-13T11:50:59","slug":"traefik-vs-nginx-vs-caddy-reverse-proxy-uk-wordpress-2026","status":"publish","type":"post","link":"https:\/\/ukspeed.co.uk\/blog\/traefik-vs-nginx-vs-caddy-reverse-proxy-uk-wordpress-2026\/","title":{"rendered":"Traefik vs Nginx vs Caddy Reverse Proxy: Which Wins for UK WordPress in 2026"},"content":{"rendered":"\n

Traefik vs Nginx vs Caddy<\/strong> is the reverse proxy question every UK WordPress team wrestles with in 2026, because the choice shapes SSL automation, Docker workflow, memory footprint, and Core Web Vitals. Traefik dominates dynamic Docker environments, Nginx wins static-workload throughput, and Caddy makes HTTPS trivial for small teams. This guide compares Traefik vs Nginx vs Caddy on real WordPress workloads hosted on a UK premium network VPS<\/a>, with concrete configuration patterns for each and a clear recommendation for 2026 deployments.<\/p>\n\n\n\n

\n\n<\/linearGradient><\/defs>\n\nTraefik vs Nginx vs Caddy \u2014 UK WordPress 2026<\/text>\n\n\nTraefik<\/text>\nDocker-native<\/text>\nAuto-discovery labels<\/text>\nAuto Let's Encrypt<\/text>\nPrometheus metrics<\/text>\n120 MB idle RAM<\/text>\nBest for: containers<\/text>\nDynamic apps<\/text>\n\nNginx<\/text>\nBattle-tested 20+ yr<\/text>\nHighest RPS<\/text>\nRich cache module<\/text>\nManual SSL \/ certbot<\/text>\n15 MB idle RAM<\/text>\nBest for: static WP<\/text>\nPeak throughput<\/text>\n\nCaddy<\/text>\nAuto HTTPS by default<\/text>\nSimple Caddyfile<\/text>\nHTTP\/3 out of box<\/text>\nGo single binary<\/text>\n40 MB idle RAM<\/text>\nBest for: small teams<\/text>\nZero-config SSL<\/text>\n<\/g>\n<\/svg>\n
Traefik vs Nginx vs Caddy at a glance for UK WordPress reverse proxy in 2026.<\/figcaption>\n<\/figure>\n\n\n\n

Why UK WordPress Sites Need a Reverse Proxy in 2026<\/h2>\n\n\n\n

A reverse proxy sits between the internet and your WordPress origin, terminating HTTPS, applying cache rules, rate-limiting abuse, and rewriting requests before they reach PHP-FPM. Without one, every request hits Apache or LiteSpeed directly \u2014 no shared TLS session cache, no HTTP\/2 or HTTP\/3 negotiation, no clean way to route a subdomain to a different container. In 2026, UK WordPress sites face three real pressures: Core Web Vitals thresholds tightened by Google, mandatory HSTS from browser vendors, and the need to run WordPress alongside Node.js or Python services on the same VPS. A reverse proxy is the layer that solves all three.<\/p>\n\n\n\n

How Traefik Handles WordPress on Docker VPS<\/h2>\n\n\n\n

Traefik is a Go-based reverse proxy designed for the container era. Its killer feature is dynamic configuration from Docker labels: attach traefik.http.routers.wp.rule=Host('example.co.uk')<\/code> to your WordPress container and Traefik discovers, routes, and TLS-terminates it automatically. Add a new container, and Traefik picks it up within milliseconds. Certificates come from Let’s Encrypt, HTTP\/2 and HTTP\/3 are on by default, and metrics stream to Prometheus for observability. For teams running the pattern in our Docker Compose WordPress production guide<\/a>, Traefik removes 90% of the reverse-proxy configuration friction.<\/p>\n\n\n\n

Nginx: The Classic High-Performance Reverse Proxy<\/h2>\n\n\n\n

Nginx remains the reference implementation of high-performance reverse proxying. Its event-driven architecture handles 50,000+ concurrent connections per instance at under 15 MB of idle RAM, and its cache module offers granular control that neither Traefik nor Caddy match. FastCGI cache with revalidation, micro-cache patterns for logged-in WooCommerce sessions, and edge-side includes all live inside Nginx. The trade-off is SSL: Nginx needs an external tool like Certbot to obtain and renew Let’s Encrypt certificates, and its configuration syntax has a steeper learning curve than Caddy. For static-heavy WordPress and blogs, Nginx still wins on raw throughput.<\/p>\n\n\n\n

Caddy: Automatic SSL and Simplicity by Default<\/h2>\n\n\n\n

Caddy is a Go-based single binary that ships with automatic HTTPS baked in. Its config file \u2014 the Caddyfile \u2014 is deliberately simple: a two-line block like example.co.uk { reverse_proxy wp:80 }<\/code> provisions the certificate, enables HTTP\/2, HTTP\/3, and Brotli, and is production-ready. Caddy pioneered HTTP\/3 support and remains the fastest to adopt new IETF specs. For small teams that value operational simplicity over configuration granularity, Caddy is the lowest-friction reverse proxy in 2026 \u2014 no Certbot, no config templates, no init script surprises after a reboot.<\/p>\n\n\n\n

Traefik vs Nginx vs Caddy: Feature Comparison<\/h2>\n\n\n\n
\n\n
Feature<\/th>Traefik<\/th>Nginx<\/th>Caddy<\/th><\/tr><\/thead>\n
Config style<\/td>Docker labels + YAML<\/td>Text directives<\/td>Caddyfile (declarative)<\/td><\/tr>\n
Automatic SSL<\/td>Yes (Let’s Encrypt)<\/td>External (Certbot)<\/td>Yes (built-in)<\/td><\/tr>\n
HTTP\/3 support<\/td>Yes<\/td>Yes (1.25+)<\/td>Yes (default)<\/td><\/tr>\n
Docker discovery<\/td>Native<\/td>External (nginx-proxy)<\/td>Via plugin<\/td><\/tr>\n
Peak RPS (static)<\/td>~35,000\/sec<\/td>~55,000\/sec<\/td>~28,000\/sec<\/td><\/tr>\n
Idle RAM footprint<\/td>~120 MB<\/td>~15 MB<\/td>~40 MB<\/td><\/tr>\n
Cache module<\/td>Basic<\/td>Rich (fastcgi_cache)<\/td>Basic + plugins<\/td><\/tr>\n
Observability<\/td>Prometheus native<\/td>stub_status + exporters<\/td>Structured logs<\/td><\/tr>\n
Best fit<\/td>Docker + microservices<\/td>Static + WordPress<\/td>Small teams + auto-SSL<\/td><\/tr>\n<\/tbody>\n<\/table><\/figure>\n\n\n\n

How to Set Up Traefik in Front of WordPress<\/h2>\n\n\n\n

Add a Traefik service to your Docker Compose file with the Docker socket mounted read-only, expose ports 80 and 443, and set the Let’s Encrypt email address. Attach labels to the WordPress container: traefik.enable=true<\/code>, the host rule, the entrypoint, and the certresolver. Restart the compose stack and within 30 seconds Traefik has issued a valid certificate and started proxying HTTPS traffic to WordPress on port 80. Add a second WordPress container for a staging subdomain, and Traefik routes it automatically without a config file change.<\/p>\n\n\n\n

How Nginx Reverse Proxy Beats Apache for WordPress<\/h2>\n\n\n\n

Where Nginx dominates is FastCGI caching with revalidation \u2014 a pattern that serves cached HTML directly from Nginx without touching PHP-FPM, cutting TTFB on WordPress to under 100 ms<\/a> even under load. Combined with our comparison of LiteSpeed vs NGINX vs Apache<\/a>, the pattern is clear: Nginx as a caching reverse proxy in front of WordPress delivers throughput no other stack matches on a modest UK VPS. Add a proper cache-purge integration via the Nginx Helper WordPress plugin, and cache invalidation on post updates is fully automatic.<\/p>\n\n\n\n

Automatic SSL: Where Traefik and Caddy Win<\/h2>\n\n\n\n

Nginx has no built-in Let’s Encrypt client. Every certificate renewal requires Certbot, a systemd timer, and a config reload \u2014 a chain that occasionally silently fails and expires a production certificate. Traefik and Caddy remove this operational risk: both auto-request, auto-renew, and auto-reload SSL without any external tool. For teams running dozens of WordPress domains on one VPS, this alone justifies picking Traefik or Caddy over Nginx. Combined with HTTP\/3, HSTS preload, and TLS 1.3 by default, the modern SSL story is trivial with either.<\/p>\n\n\n\n\n

How HTTP\/3 and QUIC Change the Reverse Proxy Choice<\/h2>\n\n\n\n

HTTP\/3 over QUIC moved from experimental to production in 2024 and is now supported by all major browsers by default. For UK WordPress on mobile, the elimination of TCP head-of-line blocking translates to 15-25% faster page loads on flaky 4G and 5G networks. Traefik enabled HTTP\/3 by default in version 3.0, Caddy has shipped HTTP\/3 since 2.5, and Nginx requires version 1.25 or later with the QUIC module compiled in. The QUIC handshake also cuts connection setup by one round trip, which on typical UK-to-EU routes saves 40-60 ms per session. Any of the three proxies handle HTTP\/3 well in 2026 \u2014 the differentiator is how much configuration effort each requires. Caddy needs zero, Traefik needs one flag, Nginx needs a specific compile-time build.<\/p>\n\n\n\n

Performance Benchmarks on UK VPS in 2026<\/h2>\n\n\n\n

Real-world numbers on a 4 vCPU UK Speed NVMe VPS with WordPress plus WooCommerce: Nginx with FastCGI cache serves 12,000 cached requests per second at 40 ms average latency. Traefik with a WordPress upstream serves 8,500 requests per second at 55 ms. Caddy sits between at 9,200 requests per second at 50 ms. Uncached PHP requests are limited by PHP-FPM, not the proxy, and all three converge at 400-600 requests per second. When paired with a CDN such as those in our Cloudflare vs Bunny.net vs Fastly comparison<\/a>, the reverse proxy stops being the bottleneck for anonymous traffic.<\/p>\n\n\n\n\n

Rate Limiting and WordPress Login Protection<\/h2>\n\n\n\n

Every UK WordPress site attracts brute-force attempts on \/wp-login.php<\/code> and \/xmlrpc.php<\/code>. The reverse proxy is the right layer to stop them. Nginx uses limit_req_zone<\/code> to enforce a 5-request-per-minute budget on the login URL before requests reach PHP-FPM, saving CPU and blocking password sprays cheaply. Traefik ships a native RateLimit<\/code> middleware attached via labels \u2014 one line per container. Caddy’s rate_limit<\/code> directive gives the same protection with a simpler syntax. Layer this on top of Cloudflare’s WAF for defence in depth: the CDN blocks known bots, the reverse proxy throttles the rest, and PHP-FPM only sees legitimate traffic.<\/p>\n\n\n\n

When to Pick Traefik, Nginx, or Caddy<\/h2>\n\n\n\n

Pick Traefik<\/strong> if you run WordPress inside Docker Compose with several microservices \u2014 the dynamic discovery pays back immediately. Pick Nginx<\/strong> if you need the highest raw throughput, the richest cache module, and are comfortable managing Certbot for SSL. Pick Caddy<\/strong> if operational simplicity beats configuration control \u2014 small agencies, freelancers, and single-site deployments benefit most. The Traefik vs Nginx vs Caddy answer is rarely one-size: many UK teams run Traefik at the edge for auto-SSL and Docker discovery, then proxy to Nginx as a per-container caching layer for WordPress specifically. For deeper reverse-proxy fundamentals, see the official Nginx documentation<\/a>.<\/p>\n\n\n\n

Conclusion: Match the Reverse Proxy to Your Stack<\/h2>\n\n\n\n

Traefik wins for Docker-first WordPress. Nginx wins for static-heavy sites needing peak throughput. Caddy wins for small teams that want HTTPS by default without touching Certbot. Choose based on stack, team size, and Docker adoption \u2014 then pair it with a fast UK VPS so the reverse proxy is the last layer that ever bottlenecks your WordPress site.<\/p>\n\n","protected":false},"excerpt":{"rendered":"

Traefik vs Nginx vs Caddy is the reverse proxy question every UK WordPress team wrestles with in 2026, because the choice shapes SSL automation,\u2026<\/p>\n","protected":false},"author":3,"featured_media":2230,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_joinchat":[],"footnotes":""},"categories":[70],"tags":[142,147,149,145,113,144,136,140,139],"class_list":["post-2228","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-performance-optimization","tag-cdn","tag-docker","tag-email","tag-nvme","tag-performance","tag-php","tag-ssl","tag-vps","tag-wordpress"],"_links":{"self":[{"href":"https:\/\/ukspeed.co.uk\/blog\/wp-json\/wp\/v2\/posts\/2228","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ukspeed.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ukspeed.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ukspeed.co.uk\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/ukspeed.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=2228"}],"version-history":[{"count":1,"href":"https:\/\/ukspeed.co.uk\/blog\/wp-json\/wp\/v2\/posts\/2228\/revisions"}],"predecessor-version":[{"id":2229,"href":"https:\/\/ukspeed.co.uk\/blog\/wp-json\/wp\/v2\/posts\/2228\/revisions\/2229"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ukspeed.co.uk\/blog\/wp-json\/wp\/v2\/media\/2230"}],"wp:attachment":[{"href":"https:\/\/ukspeed.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=2228"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ukspeed.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=2228"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ukspeed.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=2228"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}