Traefik 2.2.10 → 2.11.53
115 releases · 8 breaking changes · 56 security fixes · 14 advisories fixed
56security8breaking6deprecated220feature500fix
Vulnerabilities fixed by this upgrade
- 6.4 GHSA-rh7m-2m44-x32f Traefik: Kubernetes Ingress and Service annotations allow cross-namespace references to Middlewares, ServersTransports, and TLSOptions
- 7.0 CVE-2026-71324 Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool
- 7.8 GHSA-cxjq-mrr5-89rv Authentication Bypass via Path Traversal in ReplacePathRegex Middleware
- high CVE-2026-54763 Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth
- 6.9 CVE-2026-54764 ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=false
- 7.8 CVE-2026-48020 Traefik StripPrefix Route-Level Auth Bypass via Path Normalization
- 6.4 CVE-2026-44774 Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false
- 6.9 CVE-2026-41181 Errors middleware forwards Authorization and Cookie headers to separate error page service
- high CVE-2023-29013 HTTP header parsing could cause a deny of service
- medium CVE-2022-23469 Authorization header displayed in the debug logs
- high CVE-2022-46153 Routes exposed with an empty TLSOption
- high CVE-2022-39271 HTTP/2 connections management could cause a deny of service
- high CVE-2022-23632 Wrong TLS configuration choice
- low CVE-2021-32813 Drop Headers via Malicious Connection Header
Breaking changes
- breaking Remove extra dots in migration guide ( by rtribotte) in 2.11.36
- breaking Remove awesome.traefik.io reference in documentation section ( by kevinpollet) in 2.11.19
- breaking Remove helm default repo warning as repo has been long deprecated ( by corneliusroemer) in 2.11.4
- breaking Removes the experimental tag on the Traefik Hub header ( by tfny) in 2.9.5
- breaking [metrics] docs: remove misleading metrics overview configuration ( by gsilvapt) in 2.5.5
- breaking [acme] docs: remove quotes in certificatesresolvers CLI examples ( by rdxmb) in 2.5.4
- breaking [k8s] docs: remove non-working kind config in IngressRouteTCP/UDP examples ( by kevinpollet) in 2.5.4
- breaking Removes invalid items in the changelog. ( by ldez) in 2.3.1
Security changes
- security Advisory GHSA-3ccp-42pg-hgv6 in 2.11.53
- security Advisory GHSA-cxjq-mrr5-89rv in 2.11.52
- security CVE-2026-54763 (Advisory GHSA-x677-9fxg-v5c5) in 2.11.51
- security CVE-2026-54764 (Advisory GHSA-3q9r-p662-5j8m) in 2.11.51
- security [security] Add HTTP/2 header memory exhaustion security documentation ( @emilevauge) in 2.11.51
- security CVE-2026-48020 (Advisory GHSA-xf64-8mw2-4gr2) in 2.11.48
- security CVE-2026-44774 (Advisory GHSA-96qj-4jj5-wcjc) in 2.11.46
- security Advisory GHSA-rh7m-2m44-x32f in 2.11.46
- security CVE-2026-41181 (Advisory GHSA-p6hg-qh38-555r) in 2.11.44
- security CVE-2026-40912 (Advisory GHSA-6jwx-7vp4-9847) in 2.11.43
- security CVE-2026-39858 (Advisory GHSA-5m6w-wvh7-57vm) in 2.11.43
- security CVE-2026-35051 (Advisory GHSA-6384-m2mw-rf54) in 2.11.43
- security CVE-2026-41263 (Advisory GHSA-6x2q-h3cr-8j2h) in 2.11.43
- security CVE-2026-41174 (Advisory GHSA-xhjw-95fp-8vgq) in 2.11.43
- security CVE-2026-33433 (Advisory GHSA-qr99-7898-vr7c) in 2.11.42
- security CVE-2026-33186 (Advisory GHSA-46wh-3698-f2cx) in 2.11.42
- security CVE-2026-32595 (Advisory GHSA-g3hg-j4jv-cwfr) in 2.11.41
- security CVE-2026-32305 (Advisory GHSA-wvvq-wgcr-9q48) in 2.11.41
- security CVE-2026-27141 (Advisory GHSA-4hjq-9h5c-252j) in 2.11.40
- security CVE-2026-26998 (Advisory GHSA-fw45-f5q2-2p4x) in 2.11.38
- security CVE-2026-26999 (Advisory GHSA-xw98-5q62-jx94) in 2.11.38
- security CVE-2026-29054 (Advisory GHSA-92mv-8f8w-wq52) in 2.11.38
- security CVE-2025-68121 (Advisory GHSA-gv8r-9rw9-9697) in 2.11.37
- security warning: Breaking change :warning: As explained in the comment left on the CVE-2025-66490 fix, this new hotfix version makes the behavior opt-in. As a result, this release is breaking compared to the previous hotfix versions since v2.11.32, but it restores by default the behavior that existed… in 2.11.35
- security CVE-2026-22045 (Advisory GHSA-cwjm-3f7h-9hwqj) in 2.11.35
- security CVE-2025-66490 (Advisory GHSA-gm3x-23wp-hc2c): Breaking Change please read the migration guide. in 2.11.32
- security Update SECURITY.md to streamline information ( by emilevauge) in 2.11.32
- security Update SECURITY.md ( by cwayne18) in 2.11.32
- security CVE-2025-47952 (Advisory GHSA-vrch-868g-9jx5) in 2.11.25
- security CVE-2025-32431 (Advisory GHSA-6p68-w45g-48j7) in 2.11.24
- security CVE-2025-22868 (Advisory GHSA-3wqc-mwfx-672p) in 2.11.24
- security CVE-2025-22871 (Advisory GHSA-5423-jcjm-2gpv) in 2.11.24
- security Add Security Support ( by nmengin) in 2.11.22
- security CVE: CVE-2024-53259 (Advisory GHSA-hxr6-2p24-hf98) in 2.11.15
- security CVE: CVE-2024-45410 (Advisory GHSA-h924-8g65-j9wg) in 2.11.14
- security CVE: CVE-2024-45410 (Advisory GHSA-62c8-mh53-4cqv) in 2.11.9
- security CVE: CVE-2024-39321 (Advisory GHSA-gxrv-wf35-62w9) in 2.11.6
- security GHSA-rvj4-q8q5-8grf (Related to CVE-2024-35255) in 2.11.5
- security GHSA-7jmw-8259-q9jx (Related to CVE-2024-24790) in 2.11.4
- security GHSA-f7cq-5v43-8pwp (Related to CVE-2024-24788) in 2.11.3
- security GHSA-7f4j-64p6-5h5v (related to CVE-2023-45288) in 2.11.2
- security CVE-2024-28869 in 2.11.2
- security CVE-2023-45283 in 2.10.6
- security CVE-2023-45284 in 2.10.6
- security [acme] Remove backoff for http challenge (CVE-2023-47124) ( by youkoulayley) in 2.10.6
- security [provider] Refuse recursive requests (CVE-2023-47633) ( by rtribotte) in 2.10.6
- security [server] Deny request with fragment in URL path (CVE-2023-47106) ( by lbenguigui) in 2.10.6
- security Github Advisory GHSA-7v4p-328v-8v5g Related to CVE-2023-39325 in 2.10.5
- security CVE-2023-29013 Related to CVE-2023-24534 in 2.9.10
- security fix CVE-2022-41724 in 2.9.8
- security Fixes CVE-2022-23469: Authorization header displayed in the debug logs in 2.9.6
- security Fixes CVE-2022-46153: Routes exposed with an empty TLSOption in 2.9.6
- security Fixes CVE-2022-39271: HTTP/2 connections management could cause a deny of service in 2.8.8
- security Fixes CVE-2022-23632: Wrong TLS configuration choice in 2.6.1
- security Fixes CVE-2021-32813: Drop Headers via Malicious Connection Header in 2.4.13
- security Add security policies ( by ldez) in 2.4.0
Deprecations
- deprecated [k8s/crd] Adjust deprecation notice for Kubernetes CRD provider ( by rtribotte) in 2.11.0
- deprecated Update deprecation notes about Pilot ( by nmengin) in 2.8.5
- deprecated Update deprecation notes about Pilot ( by nmengin) in 2.8.4
- deprecated Update deprecation notices ( by ddtmachado) in 2.8.1
- deprecated Add a Feature Deprecation page ( by ddtmachado) in 2.7.0
- deprecated Add a deprecation notices section ( by ddtmachado) in 2.6.2
Every release in between
securityAdvisory GHSA-3ccp-42pg-hgv6
fix[middleware, k8s/crd] Add missing ErrorRequestHeaders field to CRDs ( @kevinpollet)
fix[server] Defer the CONNECT payload until the backend accepts the tunnel ( @sdelicata)
fix[server] Bump google.golang.org/grpc to v1.82.1 ( @piscue)
fix[server] Do not add back CONNECT requests to the pool ( @kevinpollet)
featureAdd a migration note for CONNECT requests ( @kevinpollet)
securityAdvisory GHSA-cxjq-mrr5-89rv
fix[middleware] Sanitize replaced path in ReplacePathRegex middleware ( @kevinpollet)
fix[acme] Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 ( @rtribotte)
fix[otel] Bump go.opentelemetry.io/otel to v1.44.0 ( @rtribotte)
fixFix changelog v2.11.51 ( @mmatur)
securityCVE-2026-54763 (Advisory GHSA-x677-9fxg-v5c5)
securityCVE-2026-54764 (Advisory GHSA-3q9r-p662-5j8m)
fix[acme] Bump github.com/go-acme/lego/v5 ( @juliens)
fix[middleware, authentication] Fix x-forwarded-port in forward-auth ( @juliens)
fix[middleware, authentication] Add an option to remove request headers with underscores ( @youkoulayley)
fix[webui] Bump axios to v1.18.0 ( @gndz07)
fixConfigurable max request header size ( @juliens)
security[security] Add HTTP/2 header memory exhaustion security documentation ( @emilevauge)
featureAdds documentations on maxHeaderBytes ( @juliens)
fix[tls] Fix routers with same host, different tlsoptions on different entryPoint ( @juliens)
fix[tls] Fix snicheck for routers with no hosts ( @rtribotte)
fix[http3] Bump github.com/quic-go/quic-go to v0.59.1 ( @rtribotte)
fix[webui] Bump axios to v1.17.0 ( @gndz07)
fix[tls] Fix snicheck with keepalive ( @juliens)
securityCVE-2026-48020 (Advisory GHSA-xf64-8mw2-4gr2)
fix[tls] Compute resolved tlsOptions after applying models ( @rtribotte)
fix[middleware, authentication] Add error on basic auth build if users is empty ( @rtribotte)
fix[k8s/ingress] Avoid ingress path matcher injection and backport 11d251415 ( @rtribotte)
fix[server] Move snicheck to ctx instead of simulated routing ( @juliens)
fix[middleware] Reject requests with different paths after StripPrefix and StripPrefixRegex normalisation ( @rtribotte)
fix[server] Bump golang.org/x/net to v0.55.0 ( @kevinpollet)
fix[server] Bump golang.org/x/crypto to v0.52.0 ( @rtribotte)
securityCVE-2026-44774 (Advisory GHSA-96qj-4jj5-wcjc)
securityAdvisory GHSA-rh7m-2m44-x32f
fix[k8s/ingress, k8s/crd, k8s/gatewayapi] Add CrossProviderNamespaces option ( @rtribotte)
fix[k8s/crd] Fix cross-provider ref check for Kubernetes CRD provider ( @rtribotte)
fix[k8s/crd] Remove cross-provider sanitization for Kubernetes service loading ( @rtribotte)
fix[docker, ecs] Migrate to github.com/moby/moby modules ( @mmatur)
securityCVE-2026-41181 (Advisory GHSA-p6hg-qh38-555r)
fix[middleware] Add errorRequestHeaders option to Errors middleware ( @gndz07)
fix[acme] Bump github.com/go-acme/lego to v4.35.2 ( @mmatur)
otherMake FLAGS Make variable usable ( @twz123)
securityCVE-2026-40912 (Advisory GHSA-6jwx-7vp4-9847)
securityCVE-2026-39858 (Advisory GHSA-5m6w-wvh7-57vm)
securityCVE-2026-35051 (Advisory GHSA-6384-m2mw-rf54)
securityCVE-2026-41263 (Advisory GHSA-6x2q-h3cr-8j2h)
securityCVE-2026-41174 (Advisory GHSA-xhjw-95fp-8vgq)
fix[middleware, authentication] Remove map lookup making the basic auth notFoundSecret empty ( @rtribotte)
fix[middleware, authentication] Fix trustForwardHeader on forward auth middleware ( @juliens)
fix[middleware, authentication] Cleanup and make ForwardAuth logs consistent ( @kevinpollet)
fix[middleware] Remove untrusted X headers with underscores ( @rtribotte)
fix[middleware] Sanitize the request URL after stripping the prefix ( @kevinpollet)
fix[k8s/crd, k8s] Honor allowCrossNamespace with chain middleware CRD ( @rtribotte)
securityCVE-2026-33433 (Advisory GHSA-qr99-7898-vr7c)
securityCVE-2026-33186 (Advisory GHSA-46wh-3698-f2cx)
fix[grpc] Bump google.golang.org/grpc to v1.79.3 ( @mmatur)
fix[middleware, authentication] Prevent duplicate user headers in basic and digest auth middleware ( @juliens)
fix[middleware] Fix StripPrefix and StripPrefixRegex to slice the prefix using encoded prefix length ( @gndz07)
securityCVE-2026-32595 (Advisory GHSA-g3hg-j4jv-cwfr)
securityCVE-2026-32305 (Advisory GHSA-wvvq-wgcr-9q48)
fix[http] Add maxResponseBodySize configuration on HTTP provider ( @gndz07)
fix[tls] Support fragmented TLS client hello ( @rtribotte)
fix[middleware, authentication] Make basic auth check timing constant ( @rtribotte)
otherBump mkdocs-traefiklabs to use consent mode ( @darkweaver87)
securityCVE-2026-27141 (Advisory GHSA-4hjq-9h5c-252j)
fix[docker] Bump Docker and OpenTelemetry dependencies ( by mmatur)
fix[server] Bump golang.org/x/net to v0.51.0 ( by kevinpollet)
securityCVE-2026-26998 (Advisory GHSA-fw45-f5q2-2p4x)
securityCVE-2026-26999 (Advisory GHSA-xw98-5q62-jx94)
securityCVE-2026-29054 (Advisory GHSA-92mv-8f8w-wq52)
fix[middleware] Fix case sensitivity on x-forwarded headers for Connection ( by LBF38)
fix[middleware, authentication] Add maxResponseBodySize configuration to forwardAuth middleware ( by gndz07)
fix[server] Fix TLS handshake error handling ( by juliens)
securityCVE-2025-68121 (Advisory GHSA-gv8r-9rw9-9697)
fix[healthcheck] Validate healthcheck path configuration ( by rtribotte)
fix[tls,server] Cap TLS record length to RFC 8446 limit in ClientHello peeking ( by mmatur)
fix[service] Avoid recursion with services ( by juliens)
fix[webui] Bump dependencies of documentation and webui ( by gndz07)
breakingRemove extra dots in migration guide ( by rtribotte)
securitywarning: Breaking change :warning: As explained in the comment left on the CVE-2025-66490 fix, this new hotfix version makes the behavior opt-in. As a result, this release is breaking compared to the previous hotfix versions since v2.11.32, but it restores by default the behavior that existed…
securityCVE-2026-22045 (Advisory GHSA-cwjm-3f7h-9hwqj)
fix[acme] Add timeout to ACME-TLS/1 challenge handshake ( by LBF38)
fix[server] Make encoded character options opt-in ( by gndz07)
fix[server] Fix deny encoded characters ( by rtribotte)
fix[server] Print access logs for rejected requests and warn about new behavior ( by rtribotte)
otherClarify doc about encoded characters rejection ( by rtribotte)
fixFix encoded characters entryPoint option documentation ( by rtribotte)
fixFix encoded characters option documentation ( by kevinpollet)
securityCVE-2025-66490 (Advisory GHSA-gm3x-23wp-hc2c): Breaking Change please read the migration guide.
fix[server] Reject suspicious encoded characters ( by rtribotte)
fix[plugins] Validate plugin module name ( by kevinpollet)
fix[http3] Bump github.com/quic-go/quic-go to v0.57.1 ( by GreyXor)
fix[http3] Bump github.com/quic-go/quic-go to v0.57.0 ( by GreyXor)
fix[server] Bump golang.org/x/crypto to v0.45.0 ( by kevinpollet)
securityUpdate SECURITY.md to streamline information ( by emilevauge)
securityUpdate SECURITY.md ( by cwayne18)
fix[docker,docker/swarm] Auto-negotiate Docker API version ( by kevinpollet)
fix[http3] Bump github.com/quic-go/quic-go to v0.55.0 ( by kevinpollet)
fix[kv] Fix KV key name used to check if connection is alive ( by kevinpollet)
fix[server] Bump golang.org/x/net to v0.46.0 ( by kevinpollet)
fix[tracing] Bump gopkg.in/DataDog/dd-trace-go.v1 to v1.74.6 ( by hannahkm)
fix[acme] Bump github.com/go-acme/lego/v4 to v4.25.2 ( by ldez)
fix[docker] Bump github.com/docker/docker to v28.3.3 ( by kevinpollet)
fixFix invalid links in documentation ( by mloiseleur)
otherUpdate releases docs for v3.5 ( by jnoordsij)
fix[logs] Redact logged install configuration ( by jspdown)
fix[plugins] Fix client arbitrary file access during archive extraction zipslip ( by odaysec)
fix[server] Disable MPTCP by default ( by rtribotte)
other[k8s/crd,k8s] Remove all mentions of ordering for TLSOption CurvePreferences field ( by jnoordsij)
fixBump github.com/go-viper/mapstructure/v2 to v2.3.0 ( by kevinpollet)
fix[middleware] Do not log redis sentinel username and password ( by kevinpollet)
other[kv] Fix KV reference rendering ( by rtribotte)
other[middleware,k8s/crd] Fix typo in redirect middleware documentation ( by rtribotte)
otherUpdate supported versions ( by jnoordsij)
securityCVE-2025-47952 (Advisory GHSA-vrch-868g-9jx5)
fix[k8s/ingress] Fix panic for ingress with backend resource ( by rtribotte)
fix[server] Normalize request path ( by kevinpollet)
feature[middleware,k8s] Add multi-tenant TLS guidance to the docs ( by sheddy-traefik)
feature[service] Add a note about how to disable connection reuse with backends ( by rtribotte)
fixFix broken link in documentation ( by sheddy-traefik)
otherChange version for path sanitization migration guide ( by rtribotte)
securityCVE-2025-32431 (Advisory GHSA-6p68-w45g-48j7)
securityCVE-2025-22868 (Advisory GHSA-3wqc-mwfx-672p)
securityCVE-2025-22871 (Advisory GHSA-5423-jcjm-2gpv)
fix[acme] Bump github.com/go-acme/lego/v4 to v4.23.1 ( by ldez)
fix[metrics] Bump gopkg.in/DataDog/dd-trace-go.v1 to v1.72.2 ( by kevinpollet)
fix[middleware] Add Content-Length header to preflight response ( by lbenguigui)
fix[server] Sanitize request path ( by rtribotte)
fixBump github.com/redis/go-redis/v9 to v9.7.3 ( by kevinpollet)
fixBump golang.org/x/net to v0.38.0 ( by kevinpollet)
fixBump golang.org/x/oauth2 to v0.28.0 ( by rtribotte)
feature[middleware] Add content-length best practice documentation ( by sheddy-traefik)
otherTypo fix on the Explanation Section for User Guide HTTP Challenge. ( by YapWC)
fix[ecs,logs] Bump AWS SDK to v2 ( by Juneezee)
fix[logs,tls] Error level log for configuration-related TLS errors with backends ( by rtribotte)
fix[rules] Allow underscore character in HostSNI matcher ( by rohitlohar45)
fix[server] Bump github.com/vulcand/oxy/v2 to v2.0.3 ( by adamvduke)
fix[server] Bump golang.org/x/net to v0.37.0 ( by kevinpollet)
fix[webui] Change boolean module properties default value to undefined ( by rtribotte)
fixBump github.com/golang-jwt/jwt to v4.5.2 and v5.2.2 ( by kevinpollet)
fixBump github.com/redis/go-redis/v9 to v9.6.3 ( by kevinpollet)
fixBump golang.org/x/net to v0.36.0 ( by kevinpollet)
fixBump github.com/go-jose/go-jose/v4 to v4.0.5 ( by kevinpollet)
other[accesslogs] Remove documentation for OriginStatusLine and DownstreamStatusLine accessLogs fields ( by rtribotte)
other[middleware] Clarifies that retry middleware uses TCP, not HTTP status codes ( by geraldcroes)
feature[redis] Add tip for dynamic configuration updates of Redis ( by Alanxtl)
securityAdd Security Support ( by nmengin)
fix[acme] Bump github.com/go-acme/lego/v4 to v4.22.2 ( by ldez)
fix[cli] Bump github.com/traefik/paerser to v0.2.2 ( by kevinpollet)
fix[middleware] Enable the retry middleware in the proxy ( by kevinpollet)
fix[middleware] Retry should send headers on Write ( by kevinpollet)
fix[acme] Graceful shutdown for ACME JSON write operation ( by juliens)
otherChange docker-compose to docker compose ( by khai-pi)
fix[middleware] Changing log message when client cert is not available to debug ( by Nelwhix)
fix[service] Do not create a logger instance for each proxy ( by kevinpollet)
fix[webui] Fix auto refresh not clearing on component unmount ( by DoubleREW)
breakingRemove awesome.traefik.io reference in documentation section ( by kevinpollet)
fix[websocket,server] Disable http2 connect setting for websocket by default ( by rtribotte)
fix[acme] Update go-acme/lego to v4.21.0 ( by ldez)
fix[middleware] Fix typo in basicauth note ( by tieje)
fix[service] Configure ErrorLog in httputil.ReverseProxy ( by peacewalker122)
fixBump golang.org/x/net to v0.33.0 ( by kevinpollet)
other[acme] Fix allowACMEByPass TOML example ( by hannesbraun)
other[k8s/crd] Update copyright for 2025 ( by kevinpollet)
fix[server] Update golang.org/x dependencies ( by rtribotte)
securityCVE: CVE-2024-53259 (Advisory GHSA-hxr6-2p24-hf98)
fix[acme] Update go-acme/lego to v4.20.4 ( by ldez)
fix[http3] Update github.com/quic-go/quic-go to v0.48.2 ( by kevinpollet)
securityCVE: CVE-2024-45410 (Advisory GHSA-h924-8g65-j9wg)
fix[acme] Update go-acme/lego to v4.20.2 ( by ldez)
fix[logs,server] Change level of peeking first byte error log to DEBUG ( by rtribotte)
fix[middleware,server] Drop untrusted X-Forwarded-Prefix header ( by rtribotte)
fix[server] Apply keepalive config to h2c entrypoints ( by davefu113)
fix[service] Fix internal handlers ServiceBuilder composition ( by juliens)
feature[accesslogs] Update access-logs.md, add examples for accesslog.format ( by bluepuma77)
fixFix the defaultRule CLI examples ( by kevinpollet)
fixFix spelling, grammar, and rephrase sections for clarity in some documentation pages ( by AntoineDeveloper)
fixFix absolute link in the migration guide ( by kevinpollet)
featureAdd X-Forwarded-Prefix to the migration guide ( by kevinpollet)
fixFix a small typo in entrypoints documentation ( by quiode)
featureAdd a warning about environment variables casing for static configuration ( by anchal00)
otherImprove documentation on dashboard ( by mloiseleur)
fix[middleware,service] Panic on aborted requests to properly close the connection ( by tonybart1337)
otherUpdate business callouts ( by tomatokoolaid)
fix[middleware] Bump github.com/klauspost/compress to dbd6c381492a ( by kevinpollet)
fix[webui] Upgrade to node 22.9 and yarn lock to fix vulnerabilities ( by kevinpollet)
fix[webui] Adopt a layout for the large amount of entrypoint port numbers ( by framebassman)
other[accesslogs] Clarify that only header fields may be redacted in access-logs ( by mattbnz)
otherUpdate business callout ( by tomatokoolaid)
fix[acme] Ensure defaultGeneratedCert.main as Subject's CN ( by Lamatte)
fix[middleware,authentication] Clean connection headers for forward auth request only ( by rtribotte)
fix[middleware] Bump github.com/klauspost/compress to 8e14b1b5a913 ( by kevinpollet)
fix[server] Rework condition to not log on timeout ( by rtribotte)
fix[webui] Remove unused boot files from webui ( by michelheusschen)
other[accesslogs] Specify default format value for access log ( by darkweaver87)
other[api] Update API documentation to mention pagination ( by lyrandy)
fix[http3] Bump github.com/quic-go/quic-go to v0.47.0 ( by rtribotte)
fix[server] Check if ACME certificate resolver is not nil ( by kevinpollet)
securityCVE: CVE-2024-45410 (Advisory GHSA-62c8-mh53-4cqv)
fix[acme] Update go-acme/lego to v4.18.0 ( by ldez)
fix[acme] Allow handling ACME challenges with custom routers ( by rtribotte)
fix[logs,middleware] Make the keys of the accessLog.fields.names map case-insensitive ( by SpecLad)
fix[logs,middleware] Ensure proper logs for aborted streaming responses ( by hood)
fix[middleware,server] Cleanup Connection headers before passing the middleware chain ( by kevinpollet)
fix[plugins] Upgrade paerser to v0.2.1 ( by mmatur)
fix[server,tcp] Prevent error logging when TCP WRR pool is empty ( by kevinpollet)
fix[webui] Upgrade webui dependencies ( by mloiseleur)
other[acme] Fix typo in multiple DNS challenge provider warning ( by tired-engineer)
other[k8s] Update k8s quickstart permissions ( by mmatur)
other[metrics] Remove documentation for unimplemented service retries metric ( by rtribotte)
other[middleware] Unify tab titles ( by jsoref)
otherGive valid examples for exposing dashboard with default Helm values ( by holysoles)
fix[docker] Update to github.com/docker/docker v27.1.1 ( by rtribotte)
fix[webui] Upgrade webui dependencies ( by mmatur)
fixFix embedded youtube video ( by mmatur)
otherUpdated index.md to include video ( by tomatokoolaid)
fix[logs] Make the log about new version more accurate ( by jmcbri)
fix[tls,k8s/crd,k8s] Enforce default cipher suites list ( by rtribotte)
other[acme] Modify certificatesDuration documentation ( by peacewalker122)
other[api] Improve explanation on API exposition ( by mloiseleur)
other[docker,consul,rancher,ecs] Improve doc on sensitive data stored into labels/tags ( by emilevauge)
other[docker,logs] Improve error and documentation on the needed link between router and service ( by mloiseleur)
other[docker] Document Docker port selection on multiple exposed ports ( by mbrodala)
otherUpdate the supported versions table for v3.1 release ( by jnoordsij)
otherUpdate PR approval process ( by emilevauge)
securityCVE: CVE-2024-39321 (Advisory GHSA-gxrv-wf35-62w9)
fix[ecs] Fix ECS config for OIDC + IRSA ( by mmatur)
fix[http3] Disable QUIC 0-RTT ( by mmatur)
fix[middleware,server] Remove interface names from IPv6 ( by JeroenED)
fix[docker,acme] Fix a typo in the ACME docker-compose docs ( by ciacon)
otherUpdate Advanced Capabilities Callout ( by tomatokoolaid)
otherUpdate maintainers ( by emilevauge)
fixFix readme badge for Semaphore CI ( by mmatur)
fixFix typo in keepAliveMaxTime docs ( by shochdoerfer)
securityGHSA-rvj4-q8q5-8grf (Related to CVE-2024-35255)
fix[acme] Update go-acme/lego to v4.17.4 ( by ldez)
otherUpdate the supported versions table ( by nmengin)
securityGHSA-7jmw-8259-q9jx (Related to CVE-2024-24790)
fix[acme] Update go-acme/lego to v4.17.3 ( by ldez)
other[acme] Fix .com and .org domain examples ( by rptaylor)
feature[middleware] Add a note about the Ratelimit middleware's behavior when the sourceCriterion header is missing ( by dgutzmann)
featureAdd user guides link to getting started ( by norlinhenrik)
breakingRemove helm default repo warning as repo has been long deprecated ( by corneliusroemer)
securityGHSA-f7cq-5v43-8pwp (Related to CVE-2024-24788)
fix[server] Remove deadlines for non-TLS connections ( by rtribotte)
fix[webui] Display of Content Security Policy values getting out of screen ( by brandonfl)
fix[webui] Fix provider icon size ( by framebassman)
other[k8s/crd] Fix migration/v2.md ( by stemar94)
other[k8s/gatewayapi] Fix HTTPRoute use of backendRefs ( by sakaru)
other[k8s/gatewayapi] Fix HTTPRoute path type ( by sakaru)
other[k8s] Improve mirroring example on Kubernetes ( by mloiseleur)
otherConsistent entryPoints capitalization in CLI flag usage ( by jnoordsij)
fixFix unfinished migration sentence for v2.11.2 ( by kevinpollet)
securityGHSA-7f4j-64p6-5h5v (related to CVE-2023-45288)
securityCVE-2024-28869
fix[server] Revert LingeringTimeout and change default value for ReadTimeout ( by kevinpollet)
fix[server] Set default ReadTimeout value to 60s ( by rtribotte)
fix[acme,tls] Enforce handling of ACME-TLS/1 challenges ( by rtribotte)
fix[acme] Update go-acme/lego to v4.16.1 ( by ldez)
fix[acme] Close created file in ACME local store CheckFile func ( by testwill)
fix[docker,http3] Update to quic-go v0.42.0 and docker/cli v24.0.9 ( by mloiseleur)
fix[docker,marathon,rancher,ecs,tls,nomad] Allow to configure TLSStore default generated certificate with labels ( by kevinpollet)
fix[ecs] Adjust ECS network interface detection logic ( by amaxine)
fix[logs,tls] Fix log when default TLSStore and TLSOptions are defined multiple times ( by rtribotte)
fix[middleware] Allow empty replacement with ReplacePathRegex middleware ( by rtribotte)
fix[plugins] Update Yaegi to v0.16.1 ( by ldez)
fix[provider,rules] Don't allow routers higher than internal ones ( by ldez)
fix[rules] Reserve priority range for internal routers ( by youkoulayley)
fix[server,tcp] Introduce Lingering Timeout ( by rtribotte)
fix[tcp] Enforce failure for TCP HostSNI with hostname ( by youkoulayley)
fix[tracing] Bump Elastic APM to v2.4.8 ( by rtribotte)
fix[webui] Fix dashboard exposition through a router ( by mmatur)
fix[webui] Display IPAllowlist middleware configuration in dashboard ( by youkoulayley)
fix[webui] Make text more readable in dark mode ( by hood)
fix[webui] Migrate to Quasar 2.x and Vue.js 3.x ( by andsarr)
fix[webui] Add a horizontal scroll for the mobile view ( by framebassman)
other[acme] Update gandiv5 env variable in providers table ( by dominiwe)
other[acme] Fix multiple dns provider documentation ( by mmatur)
other[docker] Fix paragraph in entrypoints and Docker docs ( by luigir-it)
other[k8s] Improve middleware example ( by mloiseleur)
other[metrics] Fix host header mention in prometheus metrics doc ( by MorphBonehunter)
other[metrics] Fix typo in statsd metrics docs ( by xpac1985)
other[middleware] Improve excludedIPs example with IPWhiteList and IPAllowList middleware ( by mloiseleur)
other[nomad] Improve documentation about Nomad ACL minimum rights ( by Thadir)
feature[server] Add specification for TCP TLS routers in documentation ( by shivanipawar00)
other[tls] Fix default value for peerCertURI option ( by marcmognol)
otherUpdate releases page ( by ldez)
featureAdd youkoulayley to maintainers ( by emilevauge)
featureAdd sdelicata to maintainers ( by emilevauge)
other[webui] Modify the Hub Button ( by mdeliatf)
feature[middleware] Deprecate IPWhiteList middleware in favor of IPAllowList ( by lbenguigui)
feature[redis] Add Redis Sentinel support ( by youkoulayley)
feature[server] Add KeepAliveMaxTime and KeepAliveMaxRequests features to entrypoints ( by juliens)
feature[sticky-session] Hash WRR sticky cookies ( by youkoulayley)
fix[acme] Update go-acme/lego to v4.15.0 ( by ldez)
fix[authentication] Fix NTLM and Kerberos ( by juliens)
fix[file] Fix file watcher ( by juliens)
fix[file] Update github.com/fsnotify/fsnotify to v1.7.0 ( by ldez)
fix[http3] Update quic-go to v0.40.1 ( by ldez)
fix[middleware,tcp] Add missing TCP IPAllowList middleware constructor ( by youkoulayley)
fix[nomad] Update the Nomad API dependency to v1.7.2 ( by jrasell)
fix[server] Fix ReadHeaderTimeout for PROXY protocol ( by juliens)
fix[webui] Fixes the Header Button ( by mdeliatf)
fix[webui] Fix URL encode resource's id before calling API endpoints ( by andsarr)
other[acme] Fix TLS challenge explanation ( by cavokz)
other[docker] Update wording of compose example ( by svx)
other[docker,acme] Fix typo ( by youpsla)
other[ecs] Mention ECS as supported backend ( by aleyrizvi)
deprecated[k8s/crd] Adjust deprecation notice for Kubernetes CRD provider ( by rtribotte)
other[middleware] Update the documentation for RateLimit to provide a better example ( by rmburton)
fix[server] Fix the keepAlive options for the CLI examples ( by immanuelfodor)
otherPrepare release v2.11.0-rc2 ( by rtribotte)
otherImprove Concepts documentation page ( by oliver-dvorski)
otherPrepare release v2.11.0-rc1 ( by mmatur)
fixFix description for anonymous usage statistics references ( by ariyonaty)
otherDocumentation enhancements ( by svx)
fix[logs] Fixed datadog logs json format issue ( by sssash18)
securityCVE-2023-45283
securityCVE-2023-45284
security[acme] Remove backoff for http challenge (CVE-2023-47124) ( by youkoulayley)
fix[consul,consulcatalog] Update github.com/hashicorp/consul/api ( by kevinpollet)
fix[http3] Update quic-go to v0.39.1 ( by tomMoulard)
fix[middleware] Fix stripPrefix middleware is not applied to retried attempts ( by niki-timofe)
security[provider] Refuse recursive requests (CVE-2023-47633) ( by rtribotte)
security[server] Deny request with fragment in URL path (CVE-2023-47106) ( by lbenguigui)
fix[tracing] Remove deprecated code usage for datadog tracer ( by mmatur)
other[governance] Update the review process and maintainers team documentation ( by geraldcroes)
other[governance] Guidelines Update ( by geraldcroes)
feature[metrics] Add a mention for the host header in metrics headers labels doc ( by rtribotte)
other[middleware] Rephrase BasicAuth and DigestAuth docs ( by sssash18)
other[middleware] Improve ErrorPages examples ( by arendhummeling)
featureAdd @lbenguigui to maintainers ( by kevinpollet)
securityGithub Advisory GHSA-7v4p-328v-8v5g Related to CVE-2023-39325
fix[accesslogs] Move origin fields capture to service level ( by rtribotte)
fix[accesslogs] Fix preflight response status in access logs ( by rtribotte)
fix[acme] Update go-acme/lego to v4.14.0 ( by ldez)
fix[acme] Update go-acme/lego to v4.13.3 ( by ldez)
fix[http3] Update quic-go to v0.37.5 ( by ldez)
fix[http3] Update quic-go to v0.39.0 ( by ldez)
fix[http3] Update quic-go to v0.37.6 ( by ldez)
fix[http3] Update quic-go to v0.38.0 ( by ldez)
fix[http3] Update quic-go to v0.38.1 ( by ldez)
fix[kv] Ignore ErrKeyNotFound error for the KV provider ( by sunyakun)
fix[middleware,authentication] Adjust forward auth to avoid connection leak ( by wdhongtw)
fix[middleware,server] Improve CNAME flattening to avoid unnecessary error logging ( by niallnsec)
fix[middleware] Allow X-Forwarded-For delete operation ( by rtribotte)
fix[server] Update x/net and grpc/grpc-go ( by rtribotte)
fix[webui] Add missing accessControlAllowOriginListRegex to middleware view ( by DBendit)
fixFix false positive in url anonymization ( by jspdown)
other[acme] Change Arvancloud URL ( by sajjadjafaribojd)
other[acme] Correct minor typo in crd-acme docs ( by ayyron-lmao)
other[healthcheck] Remove healthcheck interval configuration warning ( by rtribotte)
other[kv,redis] Docs describe the missing db parameter in redis provider ( by tokers)
other[middleware] Doc fix accessControlAllowHeaders examples ( by ebuildy)
otherUpdates business callout in the documentation ( by tomatokoolaid)
fix[acme] Update go-acme/lego to v4.13.2 ( by ldez)
fix[acme] Update go-acme/lego to v4.13.0 ( by ldez)
fix[k8s/ingress,k8s] fix: avoid panic on resource backends ( by ldez)
fix[middleware,tracing,plugins] fix: traceability of the middleware plugins ( by ldez)
otherUpdate maintainers guidelines ( by geraldcroes)
otherUpdate release documentation ( by rtribotte)
feature[webui] Updates the Hub tooltip content using a web component and adds an option to disable Hub button ( by mdeliatf)
fix[acme] Update go-acme/lego to v4.12.2 ( by ldez)
fix[acme] Update go-acme/lego to v4.12.1 ( by ldez)
fix[acme] Update go-acme/lego to v4.12.0 ( by ldez)
fix[acme] Update go-acme/lego to v4.11.0 ( by ldez)
fix[acme] Do not check for wildcard domains for non DNS challenge ( by erkexzcx)
fix[k8s/crd] Fix multiple subsets endpoint ( by joaosilva15)
fix[k8s/ingress,k8s/crd,k8s,hub] Clean code related to Hub ( by ldez)
fix[metrics] Enable Prometheus provider cleanup when only the router's metrics level is activated ( by rtribotte)
fix[middleware] Encode query semicolons ( by LandryBe)
fix[middleware] Missing trailer with custom errors middleware ( by rtribotte)
fix[middleware] Support informational headers in middlewares redefining the response writer. ( by rtribotte)
fix[plugins] Improve error messages related to plugins ( by ldez)
fix[tracing] Update DataDog tracing dependency to v1.50.1 ( by der-eismann)
other[accesslogs] Fix over-indented yaml configuration of access logs ( by ufUNnxagpM)
feature[tls] Add FAQ documentation about TLS certificates ( by rtribotte)
fixFix typo ( by green1052)
featureAdd business callouts ( by tomatokoolaid)
featureAdd logo for GitHub dark mode ( by ldez)
fix[middleware,oxy] Update vulcand/oxy to be5cf38 ( by rtribotte)
fixFix v2.10 migration guide ( by rtribotte)
feature[docker] Expose ContainerName in Docker provider ( by quinot)
feature[hub] Remove hub configuration out of experimental ( by mpl)
feature[k8s/crd] Introduce traefik.io API Group CRDs ( by rtribotte)
feature[k8s/ingress,k8s/crd,k8s] Native Kubernetes service load-balancing ( by rtribotte)
feature[middleware,metrics] Add prometheus metric requests_total with headers ( by rtribotte)
feature[nomad] Support multiple namespaces in the Nomad Provider ( by rtribotte)
feature[tracing] Add support to send DataDog traces via Unix Socket ( by der-eismann)
feature[webui] Modify the Hub Button ( by mdeliatf)
feature[webui] Display period setting of the RateLimit middleware in the webui ( by smatyas)
fix[docker] Only warn about missing docker network when network_mode is not host or container ( by sentriz)
fix[k8s/ingress,k8s] Bump k8s.io/client-go from v0.22.1 to v0.26.3 ( by ldez)
fix[plugins] Improve DeepCopy of PluginConf ( by ldez)
fix[plugins] Update Yaegi to v0.15.1 ( by ldez)
fix[server] Update vulcand/oxy to 03de175b3822 ( by longit644)
otherPrepare release v2.10.0-rc1 ( by ldez)
fixFix order of log levels ( by svx)
feature[docker] Update wording - add link descriptions ( by svx)
feature[middleware] Add accessControlAllowHeaders example ( by yingshaoxo)
other[tls] More details on Kubernetes options for mTLS ( by mloiseleur)
otherPrepare release v2.10.0-rc2 ( by mpl)
otherUpdate Call To Actions ( by svx)
otherImprove concepts page ( by svx)
otherUpdate wording ( by svx)
otherMerge branch v2.9 into v2.10 ( by ldez)
otherMerge branch v2.9 into v2.10 ( by mpl)
securityCVE-2023-29013 Related to CVE-2023-24534
fix[acme] Update go-acme/lego to v4.10.2 ( by ldez)
fix[http3] Update quic-go to v0.33.0 ( by ldez)
fix[metrics] Include user-defined default cert for traefik_tls_certs_not_after metric ( by rtribotte)
fix[middleware] Update vulcand/oxy to a0e9f7ff1040 ( by ldez)
fix[nomad] Fix default configuration settings for Nomad Provider ( by aofei)
fix[nomad] Fix Nomad client TLS defaults ( by rtribotte)
fix[server] Remove User-Agent header removal from ReverseProxy director func ( by rtribotte)
other[middleware] Clarify ratelimit middleware ( by mpl)
other[tcp] Correcting variable name 'server address' in TCP Router ( by ralphg6)
fix[server] Update golang.org/x/net to v0.7.0 ( by ldez)
securityfix CVE-2022-41724
fix[acme] Update go-acme/lego to v4.10.0 ( by ldez)
fix[ecs] Prevent panicking when a container has no network interfaces ( by rtribotte)
fix[file] Make file provider more resilient wrt first configuration ( by mpl)
fix[logs] Differentiate UDP stream and TCP connection in logs ( by rtribotte)
fix[middleware] Prevent from no rate limiting when average is zero ( by witalisoft)
fix[middleware] Prevents superfluous WriteHeader call in the error middleware ( by tomMoulard)
fix[middleware] Sanitize X-Forwarded-Proto header in RedirectScheme middleware ( by ldez)
fix[plugins] Update paerser to v0.2.0 ( by ldez)
fix[plugins] Update Yaegi to v0.15.0 ( by ldez)
fix[tls,http3] Bump quic-go to 89769f409f ( by mpl)
fix[tls,tcp] Adds the support for IPv6 in the TCP HostSNI matcher ( by rtribotte)
feature[acme] Add CNAME support and gotchas ( by mpl)
other[acme] Further Let's Encrypt ratelimit warnings ( by hcooper)
feature[k8s] Add info admonition about routing to k8 services ( by svx)
other[k8s] Improve TLSStore CRD documentation ( by mloiseleur)
feature[middleware] doc: add note about remoteaddr strategy ( by mpl)
featureUpdate copyright to match new standard ( by paulocfjunior)
otherUpdate copyright for 2023 ( by kevinpollet)
otherUpdate submitting pull requests to include language about drafts ( by tfny)
securityFixes CVE-2022-23469: Authorization header displayed in the debug logs
securityFixes CVE-2022-46153: Routes exposed with an empty TLSOption
fix[acme] Update go-acme/lego to v4.9.1 ( by @ldez)
fix[k8s/crd] Support of allowEmptyServices in TraefikService ( by @jeromeguiard)
fix[logs] Remove logs of the request ( by @ldez)
fix[plugins] Increase the timeout on plugin download ( by @ldez)
fix[server] Update golang.org/x/net ( by @ldez)
fix[tls] Handle broken TLS conf better ( by @mpl)
fix[tracing] Update DataDog tracing dependency to v1.43.1 ( by @rtribotte)
fix[webui] Add missing serialNumber passTLSClientCert option to middleware panel ( by @rtribotte)
feature[docker] Add networking example ( by @Janik)
feature[hub] Add information about the Hub Agent ( by @nmengin)
other[k8s/helm] Update Helm installation section ( by @mloiseleur)
other[middleware] Clarify PathPrefix matcher greediness ( by @mpl)
fix[logs,middleware] Create a new capture instance for each incoming request ( by sdelicata)
other[k8s/helm] Update helm repository ( by charlie-haley)
otherEnhance wording of building-testing page ( by svx)
featureAdd link descriptions and update wording ( by svx)
breakingRemoves the experimental tag on the Traefik Hub header ( by tfny)
fix[acme] Update go-acme/lego to v4.9.0 ( by tony-defa)
fix[kv,redis] Fix Redis configuration type ( by ldez)
fix[logs,middleware,metrics] Handle capture on redefined http.responseWriters ( by rtribotte)
fix[middleware,k8s] Remove raw cert escape in PassTLSClientCert middleware ( by rtribotte)
fix[plugins] Update Yaegi to v0.14.3 ( by ldez)
fixRemove side effect on default transport tests ( by sdelicata)
other[k8s] Fix links to gateway API guides ( by kevinpollet)
otherSimplify dashboard rule example ( by sosoba)
featureAdd v2.9 to release page ( by kevinpollet)
feature[acme,tls] ACME Default Certificate ( by rtribotte)
feature[consul,etcd,zk,kv,redis] Update valkeyrie to v1.0.0 ( by ldez)
feature[consulcatalog,nomad] Support Nomad canary deployment ( by rtribotte)
feature[consulcatalog] Move consulcatalog provider to only use health apis ( by kevinpollet)
feature[docker] Add support for reaching containers using host networking on Podman ( by freundTech)
feature[docker] Use IPv6 address ( by tomMoulard)
feature[docker] Add allowEmptyServices for Docker provider ( by jvasseur)
feature[ecs] Add support for ECS Anywhere ( by tuxpower)
feature[healthcheck] Add a method option to the service Health Check ( by ddtmachado)
feature[http3] Upgrade quic-go to v0.28.0 ( by tomMoulard)
feature[http] Start polling HTTP provider at the beginning ( by moutoum)
feature[k8s/crd,plugins] Load plugin configuration field value from Kubernetes Secret ( by rtribotte)
feature[logs,tcp] Quiet down TCP RST packet error on read operation ( by rtribotte)
feature[metrics] Add traffic size metrics ( by tomMoulard)
feature[middleware,pilot] Remove Pilot support ( by ldez)
feature[rules,tcp] Support ALPN for TCP + TLS routers ( by sh7dm)
feature[tcp,service,udp] Make the loadbalancers servers order random ( by qmloong)
feature[tls] Change default TLS options for more security ( by ddtmachado)
feature[tracing] Add Datadog GlobalTags support ( by sdelicata)
fix[acme] Fix ACME panic ( by ldez)
otherPrepare release v2.9.0 ( by tomMoulard)
other[metrics] Rework metrics overview page ( by ddtmachado)
otherPrepare release v2.9.0-rc5 ( by ldez)
otherPrepare release v2.9.0-rc4 ( by kevinpollet)
otherPrepare release v2.9.0-rc3 ( by kevinpollet)
otherPrepare release v2.9.0-rc2 (6c2c561 by ldez)
otherPrepare release v2.9.0-rc1 ( by rtribotte)
otherMerge current v2.8 into v2.9 ( by ldez)
otherMerge current v2.8 into v2.9 ( by kevinpollet)
otherMerge v2.8.5 into master ( by rtribotte)
otherMerge current v2.8 into master ( by rtribotte)
otherMerge current v2.8 into master ( by kevinpollet)
securityFixes CVE-2022-39271: HTTP/2 connections management could cause a deny of service
fix[server] Update golang.org/x/net to latest version ( by tspearconquest)
other[docker] Fix watch option description for Docker provider ( by bhuisgen)
other[ecs] Fix autoDiscoverClusters option documentation for ECS provider ( by johnpekcan)
other[k8s] Improve documentation for publishedService and IP options ( by samip5)
fix[consulcatalog] Fix UDP loadbalancer tags not being used with Consul Catalog ( by t3hchipmunk)
fix[docker,rancher,ecs,provider] Simplify AddServer algorithm ( by ldez)
fix[plugins] Allow empty plugin configuration ( by ldez)
fix[rules] Fix query parameter matching with equal ( by ldez)
fix[server] Optimize websocket headers handling ( by juliens)
feature[ecs] Add documentation for ECS constraints option ( by rtribotte)
other[k8s/gatewayapi] Fix link to RouteNamespaces ( by ldez)
featureAdd documentation for json schema usage to validate config in the FAQ ( by rtribotte)
featureAdd a note on case insensitive regex matching ( by NEwa-05)
fix[plugins] Update Yaegi to v0.14.2 ( by kevinpollet)
fix[server] Fix IPv6 addr with square brackets ( by moonlightwatch)
fix[webui,api] Display default TLS options in the dashboard ( by skwair)
feature[docker] Add healthcheck timeout seconds to value ( by fty4)
deprecatedUpdate deprecation notes about Pilot ( by nmengin)
featureAdded resources for businesses ( by tomatokoolaid)
fix[docker,docker/swarm] Fix Docker provider mem leak on operation retries ( by rtribotte)
fix[middleware] Fix retry middleware on panic ( by ldez)
fix[plugins] Allow Traefik starting even if plugin service is unavailable ( by ldez)
fixchore: update paerser to v0.1.9 ( by tomMoulard)
other[acme] Fix infoblox acme provider documentation ( by ldez)
other[k8s/crd] Fix serversTransport CRD documentation ( by cuishuang)
other[k8s/crd] Fix k8s for example for rootCAs serversTransport ( by ben-krieger)
feature[k8s] Add missing networking apiGroup in Kubernetes RBACs examples and references ( by fibsifan)
deprecatedUpdate deprecation notes about Pilot ( by nmengin)
fix[file] Update paerser to v0.1.8 ( by ldez)
fix[marathon] Add missing context in backoff for Marathon ( by rtribotte)
fix[k8s/ingress,k8s] Place namespace before name in router key for Ingress ( by longshine)
fix[kv] Update valkeyrie to a9a70ee ( by kevinpollet)
fix[logs,middleware,tracing] Remove request dump from IPWhitelist debug log and tracing message ( by rtribotte)
fix[metrics] Control allocation and copy of labelNamesValues type ( by rtribotte)
fix[metrics] Fix service up gauge for Prometheus metrics ( by juliens)
fix[plugins] Bump paerser to v0.1.6 ( by ldez)
fix[yaml] Add missing inline tag for YAML serialization ( by kevinpollet)
other[k8s] Fix wording of default behavior for namespaces option ( by markormesher)
feature[k8s] Add getting started guide for Kubernetes ( by moutoum)
feature[plugins] Remove Traefik Pilot and add a Traefik Plugins Catalog page ( by sdelicata)
otherUpdate Thank You page with proper branding and grammar fixes ( by tfny)
otherUpdate CONTRIBUTING.md to contain all information in one place ( by tfny)
otherUpdate the PR guidelines in Contributing docs ( by tfny)
fix[kv] Upgrade valkeyrie to v0.4.1 ( by moutoum)
fix[middleware,metrics] Improve performances when Prometheus metrics are enabled ( by juliens)
fix[middleware] Support forwarded websocket protocol in RedirectScheme ( by moutoum)
otherUpdate the language for advocating page ( by tfny)
featureAdd callout for anyone using Traefik to manage commercial applications ( by tomatokoolaid)
deprecatedUpdate deprecation notices ( by ddtmachado)
feature[consul,consulcatalog] Support multiple namespaces for Consul and ConsulCatalog providers ( by rtribotte)
feature[http3] Upgrade quic-go to v0.27.0 ( by tomMoulard)
feature[http3] Upgrade quic-go to v0.26.0 ( by sylr)
feature[logs] Add destination address to debug log ( by qmloong)
feature[middleware,provider,tls] Deprecate caOptional option in client TLS configuration ( by kevinpollet)
feature[middleware] Support URL replacement in errors middleware ( by tomMoulard)
feature[middleware] Allow config of additional CircuitBreaker params ( by aidy)
feature[provider] Implement Traefik provider for Nomad orchestrator ( by shoenig)
feature[server] Allow HTTP/2 max concurrent stream configuration ( by tomMoulard)
feature[tls,k8s/crd] Support certificates configuration in TLSStore CRD ( by kevinpollet)
feature[webui,pilot,hub] Add Traefik Hub button and deprecate Pilot ( by ldez)
feature[webui,plugins] Reach the catalog of plugins from the Traefik dashboard ( by seedy)
fix[nomad] Use configured token in the Nomad client ( by kevinpollet)
otherPrepare release v2.8.0-rc2 ( by rtribotte)
otherPrepare release v2.8.0-rc1 ( by rtribotte)
otherMerge current v2.7 into v2.8 ( by rtribotte)
otherMerge current v2.7 into master ( by rtribotte)
otherMerge current v2.7 into master ( by tomMoulard)
fix[metrics] Ensure Datadog client is cleanly stopped ( by jbdoumenjou)
feature[middleware,k8s/crd] Add documentation for main, SANs and plugin CRD fields ( by mloiseleur)
fix[healthcheck,service] Do not make multiple requests to the same URL for balancer healthcheck ( by TPXP)
fix[healthcheck,service] Add log when missing path in health check ( by moutoum)
fix[k8s/gatewayapi] Allow multiple listeners on same port in Gateway API provider ( by burner-account)
fix[middleware] RedirectScheme redirects based on X-Forwarded-Proto header ( by moutoum)
fix[plugins] Update yaegi to v0.13.0 ( by kevinpollet)
fix[rules] Fix HostRegexp and Query muxers ( by juliens)
fix[tracing] Update DataDog tracing dependency to v1.38.1 ( by kevinpollet)
feature[acme,k8s/crd] Add documentation to Traefik CRD properties ( by mloiseleur)
feature[middleware] Add missing info.serialNumber option to PassTLSClientCert middleware ( by miteshjadia)
feature[tcp] Add a note on how to handle server first protocols ( by romantomjak)
otherUpdate to improve info section relevance ( by tomatokoolaid)
featureAdded useful links for commercial applications ( by tomatokoolaid)
fix[acme] Update go-acme/lego to v4.7.0 ( by ldez)
fix[logs] Fix invalid placeholder in log message ( by ldez)
other[hub] Hub documentation ( by ldez)
other[k8s,k8s/gatewayapi] Update Gateway API link from v1alpha1 to v1alpha2 ( by tomMoulard)
other[k8s,k8s/gatewayapi] Update Gateway API links ( by tomMoulard)
other[middleware] Fix typo in stripPrefix middleware docs ( by rbarbey)
other[rules] Fix rule expression rendering ( by ldez)
otherUpdate the link for contributor swag ( by tfny)
fixFix Traefik version s/2.6/2.7/ ( by mpl)
otherUpdate the contributing docs for clarity and to encourage community activity ( by tfny)
feature[consulcatalog] Watch for Consul events to rebuild the dynamic configuration ( by JasonWangA)
feature[healthcheck] Add Failover service ( by tomMoulard)
feature[http3] Configure advertised port using h3 server option ( by kevinpollet)
feature[http3] Upgrade quic-go to v0.25.0 ( by sylr)
feature[hub] Add Traefik Hub Integration (Experimental Feature) ( by jbdoumenjou)
feature[k8s/crd,k8s] Allow empty services in Kubernetes CRD ( by tomMoulard)
feature[metrics] Support InfluxDB v2 metrics backend ( by sh7dm)
feature[plugins] Remove Pilot token setup constraint to use plugins ( by ldez)
feature[provider] Refactor configuration reload/throttling ( by rkojedzinszky)
feature[rules,tcp] Add HostSNIRegexp rule matcher for TCP ( by rtribotte)
feature[tcp] Add muxer for TCP Routers ( by dtomcej)
feature[webui,pilot] Add Traefik Hub access and remove Pilot access ( by tomMoulard)
feature[webui] Add a link to service on router detail view ( by Tchoupinax)
fix[hub] Skip Provide when TLS is nil ( by ldez)
fix[tcp] Fix TCP-TLS/HTTPS routing precedence ( by rtribotte)
fix[webui,hub] Use dedicated entrypoint for the tunnels ( by youkoulayley)
other[hub] Fix Traefik Hub TLS documentation ( by jbdoumenjou)
deprecatedAdd a Feature Deprecation page ( by ddtmachado)
otherPrepare release v2.7.0-rc1 ( by tomMoulard)
otherPrepare release v2.7.0-rc2 ( by rtribotte)
otherMerge current v2.6 into v2.7 ( by kevinpollet)
otherMerge current v2.6 into v2.7 ( by tomMoulard)
otherMerge current v2.6 into v2.7 ( by rtribotte)
otherMerge current v2.6 into master ( by rtribotte)
otherMerge current v2.6 into master ( by tomMoulard)
otherMerge current v2.6 into master ( by kevinpollet)
fix[logs,k8s/crd] Fix log statement for ExternalName misconfig ( by kruton)
fix[plugins] Update Yaegi to v0.12.0 ( by mpl)
fix[tcp,service] Fix initial tcp lookup when address is not available ( by ddtmachado)
fix[tls] Fix panic when getting certificates with non-existing store ( by moutoum)
fix[tracing] Update jaeger-client-go to v2.30.0 ( by moutoum)
other[middleware] Updated browserXssFilter key to camel case ( by karlosmunjos)
fixFix the default priority for the entrypoint redirection ( by ldez)
fixFix typo in maintainers guidelines ( by eltociear)
fix[acme] Fix RenewInterval computation in ACME provider ( by smasset-orange)
fix[ecs,logs] Remove duplicate error logs ( by rtribotte)
fix[ecs] Filter out ECS anywhere instance IDs ( by JohnPreston)
fix[middleware] Re-add missing writeheader call in flush ( by mpl)
fix[middleware] Fix bug for when custom page is large enough ( by mpl)
fix[middleware] Fix regexp handling in redirect middleware ( by tomMoulard)
fix[plugins] Update Yaegi to v0.11.3 ( by kevinpollet)
other[k8s/gatewayapi] Fix certificateRefs in dynamic configuration ( by kahirokunn)
other[logs] Move accessLog.fields example to TOML section ( by major)
feature[logs] Add default mode for fields.names to access log ( by aleksvujic)
other[middleware] Fix default for buffering middleware ( by rtribotte)
other[middleware] Preflight requests are not forwarded to services ( by sizief)
featureAdd title and description metadata to documentation pages ( by ldez)
otherUpdate dynamic and static configuration references ( by ldez)
fix[plugins] Fix slice parsing for plugins ( by ldez)
fix[tls] Return TLS unrecognized_name error when no certificate is available ( by rtribotte)
fix[file] Bump paerser to v0.1.5 ( by ldez)
other[acme] Fix certificates resolver typo ( by NReilingh)
fix[docker] doc: fix, docker uses Label(), not Tag() ( by mpl)
other[http3] Fix CLI syntax in HTTP/3 documentation ( by nstankov-bg)
other[kv] Fix small typo in Redis provider documentation ( by lczw)
other[marathon] Fix brand typo ( by 0xflotus)
other[middleware] Fix fenced code block typo in Buffering middleware page ( by Wingysam)
other[rules] Adjust rule length in routers documentation ( by rtribotte)
other[rules] Fix HostRegexp examples ( by kevinpollet)
feature[tls,k8s/crd,k8s] Add default certificate definition example for Kubernetes ( by jwausle)
other[tls,k8s] Clarify TLS Option documentation ( by mloiseleur)
otherClarify concepts documentation page ( by NReilingh)
otherSpelling ( by jsoref)
fixFix routing overview examples ( by NReilingh)
deprecatedAdd a deprecation notices section ( by ddtmachado)
securityFixes CVE-2022-23632: Wrong TLS configuration choice
fix[acme] Add domain to HTTP challenge errors ( by ldez)
fix[metrics] Fix metrics bucket key high cardinality ( by tomMoulard)
fix[middleware,tls] Use CNAME for SNI check on host header ( by ldez)
fix[middleware,tracing] Rename Datadog span tags ( by luckielordie)
fix[tls] Apply the same approach as the rules system on the TLS configuration choice ( by ldez)
feature[acme] Add Hurricane Electric to acme documentation ( by vladshub)
other[acme] Clarify that ACME challenge is mandatory ( by mpl)
other[http3] Explain a bit more around enabling HTTP3 ( by SantoDE)
other[metrics] Fix mixups in metrics documentation ( by tomMoulard)
other[middleware,k8s/crd] Fix Kubernetes TCP examples ( by sylr)
feature[acme] Allow configuration of ACME certificates duration ( by pmontepagano)
feature[consul,consulcatalog] Support consul enterprise namespaces in consul catalog provider ( by kevinpollet)
feature[k8s,k8s/gatewayapi] Update gateway api provider to v1alpha2 ( by kevinpollet)
feature[k8s,k8s/gatewayapi] Support gateway api RouteNamespaces ( by tomMoulard)
feature[k8s/crd] Support Kubernetes basic-auth secrets ( by dtomcej)
feature[metrics] Add configurable tags to influxdb metrics ( by Tetha)
feature[metrics] Add prefix to datadog metrics ( by fredwangwang)
feature[middleware,tcp] Add in flight connection middleware ( by tomMoulard)
feature[middleware] Add Organizational Unit to passtlscert middleware ( by FernFerret)
feature[middleware] Allow configuration of minimum body size for compress middleware ( by lus)
feature[middleware] Ceil Retry-After value in the rate-limit middleware ( by pyaillet)
feature[middleware] Refactor Exponential Backoff ( by danieladams456)
feature[server,k8s/crd,k8s] Allow configuration of HTTP/2 readIdleTimeout and pingTimeout ( by tomMoulard)
feature[server] Allow configuration of advertised port for HTTP/3 ( by valerauko)
feature[tracing] Upgrade Instana tracer and make process profiling configurable ( by andriikushch)
fix[consul,kv] Support Consul KV Enterprise namespaces ( by kevinpollet)
fix[consul] Support token authentication for Consul KV ( by kevinpollet)
fix[consulcatalog] Configure Consul Catalog namespace at client level ( by kevinpollet)
fix[tracing] Upgrade Instana tracer dependency ( by andriikushch)
fix[logs] Redact credentials before logging ( by ibrahimalihc)
otherMerge current v2.5 into v2.6 ( by tomMoulard)
otherMerge current v2.5 into v2.6 ( by rtribotte)
otherMerge current v2.5 into master ( by tomMoulard)
otherMerge current v2.5 into master ( by kevinpollet)
otherMerge current v2.5 into master ( by jbdoumenjou)
otherMerge current v2.5 into master ( by rtribotte)
fix[acme] Update go-acme/lego to v4.6.0 ( by ldez)
fix[logs] Adjust log level from info to debug ( by tomMoulard)
fix[plugins] Fix middleware plugins memory leak ( by ldez)
fix[server] Mitigate memory leak ( by mpl)
fix[webui,middleware] Fix middleware regexp's display ( by tomMoulard)
other[http] Fix HTTP provider endpoint config example ( by kevinpollet)
other[k8s] Remove typo in Kubernetes providers labelSelector examples ( by colinwilson)
other[rules] Improve regexp matcher documentation ( by Hades32)
other[tracing] Fix broken jaeger documentation link ( by tomMoulard)
otherUpdate copyright for 2022 ( by kevinpollet)
fix[middleware] Process all X-Forwarded-For headers in the request ( by kevinpollet)
fix[plugins] Update Yaegi to v0.11.2 ( by ldez)
fix[server] Update golang.org/x/net dependency version ( by kevinpollet)
feature[api] Add missing API endpoints documentation ( by ichxxx)
other[middleware] Fix passTLSClientCert CRD example name ( by ddtmachado)
other[middleware] Correct documentation in middleware overview ( by Alestrix)
fix[acme] Update go-acme/lego to v4.5.3 ( by lippertmarkus)
fix[k8s/crd,k8s] fix: propagate source criterion config to RateLimit middleware in Kubernetes CRD ( by rbailly-talend)
fix[plugins] plugins: start the go routine before calling Provide ( by ldez)
fix[plugins] Update yaegi to v0.11.1 ( by tomMoulard)
fix[plugins] Update yaegi v0.11.0 ( by ldez)
fix[udp] fix: increase UDP read buffer length to max datagram size ( by kevinpollet)
other[consul] docs: removing typo in consul-catalog provider doc ( by tomMoulard)
breaking[metrics] docs: remove misleading metrics overview configuration ( by gsilvapt)
other[middleware] docs: align docker configuration example notes in basicauth HTTP middleware ( by tomMoulard)
other[service] docs: health check use readiness probe in k8s ( by Vampouille)
other[tls] docs: uniformize client TLS config documentation ( by kevinpollet)
otherUpdate CODE_OF_CONDUCT.md ( by tfny)
fixfixed minor spelling error in Regexp Syntax section ( by kerrsmith)
fix[acme] Update go-acme/lego to v4.5.0 ( by ldez)
fix[k8s/crd,k8s] fix: add missing RequireAnyClientCert value to TLSOption CRD ( by kevinpollet)
fix[k8s/crd,k8s] fix: normalize middleware names in ingress route config ( by aaronraff)
fix[middleware,provider,tls] fix: do not require a TLS client cert when InsecureSkipVerify is false ( by kevinpollet)
fix[middleware,tls] fix: use host's root CA set if ClientTLS ca is not defined ( by kevinpollet)
fix[middleware] fix: forward request Host to errors middleware service ( by kevinpollet)
fix[middleware] fix: use EscapedPath as header value when RawPath is empty ( by dtomcej)
fix[tcp,udp] fix: TCP/UDP wrr when all servers have a weight set to 0 ( by tomMoulard)
fix[webui] fix: bug parsing weighted service provider name ( by cocoanton)
breaking[acme] docs: remove quotes in certificatesresolvers CLI examples ( by rdxmb)
other[k8s/ingress,k8s] docs: clarify usage for cross provider references in Kubernetes ingress annotations ( by rtribotte)
other[k8s/ingress] docs: networking.k8s.io/v1beta1 to networking.k8s.io/v1 ( by pmareke)
other[k8s] docs: replace links to French translation of k8s docs with English ones ( by FoseFx)
breaking[k8s] docs: remove non-working kind config in IngressRouteTCP/UDP examples ( by kevinpollet)
fix[kv] docs: fix typo in KV providers documentation ( by rondoe)
fix[metrics] docs: fix typo in addRoutersLabels option title ( by kevinpollet)
other[middleware] fix: sourceCriterion documentation for InFlightReq and RateLimit middlewares ( by pmareke)
other[middleware] Mention escaping escape characters in YAML for regex usage ( by JackMorganNZ)
feature[rules] docs: add named groups details to Regexp Syntax section ( by kerrsmith)
other[tracing] docs: reword tracing config descriptions to be consistent ( by kevinpollet)
otherdocs: remove link to microbadger.com ( by CrispyBaguette)
otherdocs: remove http scheme urls in documentation ( by tomMoulard)
otherdocs: update traefik image version ( by tomMoulard)
fix[consulcatalog] Fix certChan defaulting on consul catalog provider ( by tomMoulard)
fix[k8s/crd,k8s] Fix peerCertURI config for k8s crd provider ( by kevinpollet)
fix[k8s/crd,k8s] Ensure disableHTTP2 works with k8s crd ( by ssboisen)
fix[k8s/crd,k8s] Fix ServersTransport reference from IngressRoute service definition ( by rtribotte)
fix[k8s/crd,k8s] Add cross namespace verification in Kubernetes CRD ( by tomMoulard)
fix[metrics] Fix Prometheus router's metrics ( by tomMoulard)
fix[plugins] Update yaegi to v0.10.0 ( by ldez)
other[middleware,file] Fix TCP middleware whitelist example ( by tribal2)
feature[middleware] Add default proxy headers list ( by aaronraff)
featureAdd Tom Moulard in maintainers team ( by jbdoumenjou)
fixFix golang doc URLs ( by jbdoumenjou)
fix[http3] Upgrade github.com/lucas-clemente/quic-go to v0.23.0 ( by sylr)
fix[middleware] Fix empty body error for mirroring middleware ( by antgubarev)
fix[tracing] Bump go.elastic.co/apm version to v1.13.1 ( by rtribotte)
fixUpdate x/sys to support go 1.17 ( by roopakv)
fixBump Alpine docker image version from 3.11 to 3.14 for official Traefik images
feature[k8s/ingress,k8s] Adds pathType for v1 ingresses examples ( by rtribotte)
fixFix http scheme urls in documentation ( by rtribotte)
fix[middleware,http3] Conditional CloseNotify in header middleware ( by juliens)
fix[tls,tcp,k8s/crd,k8s] Makes ALPN protocols configurable ( by rtribotte)
feature[k8s] Adds MiddlewareTCP CRD documentation ( by perosb)
feature[middleware] Adds ContentType to middleware's overview table ( by euidong)
feature[consulcatalog] Add Support for Consul Connect ( by Gufran)
featureUpdate Go version ( by mpl)
feature[file] Update sprig to v3.2.0 ( by sirlatrom)
feature[healthcheck] Healthcheck: add support at the load-balancers of services level ( by mpl)
feature[http3] Upgrade github.com/lucas-clemente/quic-go ( by sylr)
feature[http3] Add HTTP3 support (experimental) ( by juliens)
feature[k8s,k8s/gatewayapi] Add wildcard hostname rule to kubernetes gateway ( by jberger)
feature[k8s,k8s/gatewayapi] Add support for TCPRoute and TLSRoute ( by tomMoulard)
feature[k8s,k8s/gatewayapi] Allow crossprovider service reference ( by jbdoumenjou)
feature[k8s/crd,k8s] Add named port support to Kubernetes IngressRoute CRDs ( by Cirrith)
feature[k8s/crd,k8s] Improve kubernetes external name service support for UDP ( by kevinpollet)
feature[k8s/crd,k8s] Upgrade the CRD version from apiextensions.k8s.io/v1beta1 to apiextensions.k8s.io/v1 ( by jbdoumenjou)
feature[k8s/ingress,k8s/crd,k8s] Ignore empty endpoint changes ( by hensur)
feature[k8s/ingress,k8s] Upgrade Ingress Handling to work with networkingv1/Ingress ( by SantoDE)
feature[k8s/ingress,k8s] Filter ingress class resources by name ( by tomMoulard)
feature[k8s/ingress,k8s] Add k8s provider option to create services without endpoints ( by Lucaber)
feature[k8s/ingress,k8s] Upgrade IngressClass to use v1 over v1Beta on Kube 1.19+ ( by SantoDE)
feature[k8s/ingress,k8s] Add ServersTransport annotation to k8s ingress provider ( by wdullaer)
feature[logs,middleware] Add TLS version and cipher to the accessLog ( by na4ma4)
feature[metrics] Add TLS certs expiration metric ( by sylr)
feature[metrics] Allow to define datadogs metrics endpoint with env vars ( by sylr)
feature[middleware,metrics] Add router metrics ( by jorge07)
feature[middleware,tcp] Add TCP Middlewares support ( by rtribotte)
feature[middleware] Removes headers middleware options ( by tomMoulard)
feature[middleware] Headers: add permissionsPolicy and deprecate featurePolicy ( by WLun001)
feature[middleware] Deprecates ssl redirect headers middleware options ( by tomMoulard)
feature[plugins] Local private plugins. ( by ldez)
feature[provider,plugins] Add plugin's support for provider ( by ldez)
feature[rules] Support not in rules definition ( by juliens)
feature[rules] Add routing IP rule matcher ( by tomMoulard)
feature[server] Improve host name resolution for TCP proxy ( by H-M-H)
feature[server] Add ability to disable HTTP/2 in dynamic config ( by jcuzzi)
feature[sticky-session] Add a mechanism to format the sticky cookie value ( by tomMoulard)
feature[tls] Mutualize TLS version and cipher code ( by rtribotte)
feature[tls,k8s/crd,k8s] Improve CA certificate loading from kubernetes secret ( by rio)
feature[tls] Do not build a default certificate for ACME challenges store ( by rkojedzinszky)
feature[tracing] Use Datadog tracer environment variables to setup default config ( by GianOrtiz)
feature[tracing] Update Elastic APM from 1.7.0 to 1.11.0 ( by afitzek)
feature[tracing] Override jaeger configuration with env variables ( by mmatur)
feature[udp] Add udp timeout configuration ( by Lindenk)
+23 more items in the release notesfix[k8s/crd,k8s] Avoid unauthorized middleware cross namespace reference ( by jbdoumenjou)
fix[kv] Remove unwanted trailing slash in key ( by jbdoumenjou)
fix[middleware] Redirect: fix comparison when explicit port request and implicit redirect port ( by tcolgate)
fix[kv] Fix a router's entryPoint definition example for KV provider ( by avtion)
securityFixes CVE-2021-32813: Drop Headers via Malicious Connection Header
fix[authentication,middleware] Remove hop-by-hop headers define in connection header before some middleware ( by ldez)
fix[k8s,k8s/ingress] Get Kubernetes server version early ( by rtribotte)
fix[k8s,k8s/ingress] Don't remove ingress config on API call failure ( by dtomcej)
fix[middleware] Ratelimiter: use correct ttlSeconds value, and always call Set ( by mpl)
fix[tls] Check if defaultcertificate is defined in store ( by dtomcej)
fix[k8s,k8s/crd,k8s/ingress] Disable ExternalName Services by default on Kubernetes providers ( by dtomcej)
fix[k8s,k8s/crd,k8s/ingress] Fix: malformed Kubernetes resource names and references in tests ( by rtribotte)
fix[k8s,k8s/crd] Disable Cross-Namespace by default for IngressRoute provider ( by dtomcej)
fix[logs,middleware] Accesslog: support multiple values for a given header ( by ldez)
fix[logs] Ignore http 1.0 request host missing errors ( by dtomcej)
fix[middleware] Headers Middleware: support http.CloseNotifier interface ( by dtomcej)
fix[tls] Detect certificates content modifications ( by jbdoumenjou)
other[middleware,k8s] Fix invalid subdomain ( by WLun001)
featureAdd the list of available provider names ( by WLun001)
fixFix maintainers-guidelines page title ( by kubopanda)
otherTypos in contributing section ( by kubopanda)
fix[acme] Update go-acme/lego to v4.4.0 ( by ldez)
fix[acme] Fix: ACME preferred chain. ( by ldez)
fix[k8s,k8s/gatewayapi] Remove error when HTTProutes is empty ( by tomMoulard)
fix[k8s,k8s/ingress] Fix incorrect behaviour with multi-port endpoint subsets ( by coufalja)
fix[k8s,k8s/ingress] Kubernetes ingress provider to search via all endpoints ( by martinvizvary)
fix[plugins,windows] Fix plugin unzip call on windows ( by ddtmachado)
fix[plugins] Update Yaegi to v0.9.17 ( by ldez)
fix[provider] Bump paerser to v0.1.4 ( by ldez)
fix[server] Create buffered signals channel ( by dtomcej)
fix[server] Fix: use defaultEntryPoints when no entryPoint is defined in a TCPRouter ( by LandryBe)
fix[tls] Use a dynamic buffer to handle client Hello SNI detection ( by ldez)
fix[tracing] Error span on 5xx only ( by kevtainer)
other[k8s,k8s/crd] Fix ingressRouteTCP external name service examples in documentation ( by rtribotte)
other[k8s,k8s/gatewayapi] Fix Kubernetes Gateway API documentation links ( by jbdoumenjou)
other[k8s,k8s/gatewayapi] Fix: k8s gateway api link ( by tomMoulard)
fix[k8s,k8s/gatewayapi] Fix the "values" field in the example of httproute ( by maelvls)
other[k8s/crd] Fix ServersTransport documentation ( by tomMoulard)
other[k8s] Correct annotation option ( by cbergmann)
feature[metrics] Add metrics documentation ( by rtribotte)
feature[middleware] Docs: add examples for removing headers ( by SuperSandro2000)
other[middleware] Doc: clarify usage for ratelimit's excludedIPs ( by mpl)
other[middleware] Elaborate on possible use of status codes with the errors middleware ( by Midnighter)
fix[middleware] Doc: fix a syntax error in ratelimit TOML configuration sample ( by mvertes)
feature[pilot] Docs: add pilot dashboard flag to static configuration file reference ( by danshilm)
otherAdding Maintainers Guidelines ( by jakubhajek)
otherExplains Traefik HTTP response status codes ( by rtribotte)
otherDoc: typo fix ( by mpl)
otherAdding formatting to the document. ( by jakubhajek)
otherChanging default file format for the snippets from TOML to YAML ( by tomMoulard)
fix[acme] Update go-acme/lego to v4.3.1 ( by ldez)
fix[acme] Update go-acme/lego to v4.3.0 ( by ldez)
fix[k8s,k8s/gatewayapi] Update to gateway-api v0.2.0 ( by jbdoumenjou)
fix[pilot,webui] Adding an option to (de)activate Pilot integration into the Traefik dashboard ( by tomMoulard)
fix[rules] Raise errors for non-ASCII domain names in a router's rules ( by rtribotte)
fix[server] Update pires/go-proxyproto to v0.5.0 ( by mschneider82)
other[middleware] Improve basic auth middleware httpasswd example ( by d3473r)
feature[middleware] Add missing traefik. prefix across sample configuration ( by deepyaman)
other[middleware] Remove a no longer needed note ( by cmcga1125)
fix[acme] Fix: double close chan on TLS challenge ( by ldez)
fix[provider] Bump paerser to v0.1.2 ( by jbdoumenjou)
fix[server] Feature: tune transport buffer size to increase performance ( by mvertes)
other[service] Fix ServersTransport documentation ( by rtribotte)
fix[plugins] Update Yaegi to v0.9.13 ( by ldez)
fix[provider] Fix: wait for file and internal before applying configurations ( by juliens)
other[file] Fix reflink typo in file provider documentation ( by vgerak)
other[k8s/serviceapi] Fix Kubernetes Gateway API documentation links ( by kevinpollet)
other[service] Fix typo in routing/services/index.md ( by snikch)
otherFixing doc for default value of checknewversion ( by tomMoulard)
fix[webui] Only allow iframes to be loaded from our domain ( by SantoDE)
fix[acme] Fix TLS challenge timeout and validation error ( by ldez)
fix[consulcatalog] Fixed typo in consul catalog tests ( by apollo13)
fix[middleware] Apply content type exclusion on response ( by jbdoumenjou)
feature[middleware] Add HEAD as available option for Method ( by mlandauer)
other[middleware] Middleware documentation fixes ( by Ullaakut)
feature[provider] Add missing doc about servers transport ( by ldez)
other[provider] Provider documentation fixes ( by Ullaakut)
fixFix the static reference documentation for the internal redirection router ( by jbdoumenjou)
fix[acme] Fix the redirect entrypoint default priority ( by jbdoumenjou)
fix[middleware] Fix the infinite loop in forwarded header middleware. ( by ldez)
fixFix the static configuration generation for environment variables ( by jbdoumenjou)
fix[acme,provider] Fix HTTP challenge router unexpected delayed creation ( by jspdown)
fix[acme] Update go-acme/lego to v4.2.0 ( by ldez)
fix[api,plugins] Fix plugin type on middleware endpoint response ( by jspdown)
fix[authentication,middleware] Forward Proxy-Authorization header to authentication server ( by Scapal)
fix[k8s,k8s/ingress] Add support for multiple ingress classes ( by LandryBe)
fix[middleware] Improve forwarded header and recovery middlewares performances ( by juliens)
fix[pilot] Reduce pressure of pilot services when errors occurs ( by darkweaver87)
fix[provider] Fix aggregator test comment ( by rtribotte)
fix[provider] Fix servers transport not found ( by jspdown)
other[consulcatalog] Fix refresh interval option description in consulcatalog provider ( by GabeL7r)
fix[docker] Fix missing serverstransport documentation ( by kevinpollet)
other[k8s] Fix YAML syntax in providers docs ( by 4ops)
other[service] Fix typo in server transports documentation ( by obezuk)
feature[acme] New HTTP and TLS challenges implementations ( by ldez)
feature[acme] Add external account binding support ( by ldez)
feature[authentication,middleware] Middlewares: add forwardAuth.authResponseHeadersRegex ( by iamolegga)
feature[authentication,middleware] Filter ForwardAuth request headers ( by nkonev)
feature[k8s,k8s/ingress] Update more than one LoadBalancer IP ( by iameli)
feature[k8s,k8s/ingress] Set kubernetes client User-Agent to something meaningful ( by sylr)
feature[k8s] Add Kubernetes Gateway Provider ( by rtribotte)
feature[k8s] Bump k8s client to v0.19.2 ( by rtribotte)
feature[kv] Allows multi-level KV prefixes ( by niki-timofe)
feature[logs,middleware,docker] Support configuring a HTTP client timeout in the Docker provider ( by sirlatrom)
feature[marathon] Extend marathon port discovery to allow port names as identifier ( by basert)
feature[metrics] Re-add server up metrics ( by coder-hugo)
feature[middleware] Feature: Exponential Backoff in Retry Middleware ( by danieladams456)
feature[middleware] Allow to use regular expressions for AccessControlAllowOriginList ( by jodosha)
feature[pilot] Enable stats collection when pilot is enabled ( by mmatur)
feature[pilot] Send anonymized dynamic configuration to Pilot ( by jspdown)
feature[server] Added support for tcp proxyProtocol v1&v2 to backend ( by mschneider82)
feature[service,tls] Add ServersTransport on services ( by juliens)
feature[webui] Display Proxy Protocol version for backend services in web dashboard ( by 95ulisse)
featureImprove setup readability ( by juliens)
fix[docker] Fix default value of docker client timeout ( by kevinpollet)
fix[middleware,k8s/crd] Add AccessControlAllowOriginListRegex field to deepcopy ( by kevinpollet)
other[middleware] Rephrase forwardauth.authRequestHeaders documentation ( by Beanow)
otherUpdate copyright year for 2021 ( by kevinpollet)
otherPrepare release v2.4.0-rc2 ( by kevinpollet)
other[kv] KV doc reference ( by rtribotte)
featureAdd jspdown to maintainers ( by emilevauge)
featureAdd kevinpollet to maintainers ( by SantoDE)
securityAdd security policies ( by ldez)
otherMerge current v2.3 branch into v2.4 ( by ldez)
otherMerge current v2.3 branch into v2.4 ( by rtribotte)
otherMerge current v2.3 branch into v2.4 ( by mmatur)
otherMerge current v2.3 branch into v2.4 ( by kevinpollet)
otherMerge current v2.3 branch into master ( by rtribotte)
otherMerge current v2.3 branch into master ( by kevinpollet)
otherMerge current v2.3 branch into master ( by ldez)
otherMerge current v2.3 branch into master ( by jbdoumenjou)
fix[k8s,k8s/ingress] Fix wildcard hostname issue ( by avdhoot)
fix[k8s,k8s/ingress] Compile kubernetes ingress annotation regex only once ( by hensur)
fix[middleware,webui] webui: fix missing custom request and response header names ( by kevinpollet)
fix[middleware] Fix log level on error pages middleware ( by Nowheresly)
fix[docker] docs: fix broken links to docker-compose documentation ( by kevinpollet)
feature[ecs] Add ECS to supported providers list ( by anilmaurya)
otherUpdate copyright year for 2021 ( by kevinpollet)
fix[logs] Update Logrus to v1.7.0 ( by jspdown)
fix[plugins] Update Yaegi to v0.9.8 ( by ldez)
fix[rules] Disable router when a rule has an error ( by ldez)
feature[logs] Add configuration example for access log filePath ( by wernerfred)
feature[middleware] Add missing quotes in errorpages k8s example yaml ( by icelynjennings)
fix[acme] Update go-acme/lego to v4.1.3 ( by ldez)
fix[k8s,k8s/crd] IngressRoute: add an option to disable cross-namespace routing ( by rtribotte)
fix[k8s/crd,k8s/ingress] Fix concatenation of IPv6 addresses and ports ( by jspdown)
fix[tcp,tls] Fix TLS options fallback when domain and options are the same ( by jspdown)
fix[webui] Fix UI bug on long service name ( by ipinak)
feature[docker] Add example for multiple service per container ( by notsureifkevin)
featureDocumentation: Add spacing to sidebars so the last item is always visible ( by paulocfjunior)
fixFix typos in migration guide ( by marsavela)
fix[acme] Update go-acme/lego to v4.1.2 ( by ldez)
fix[k8s,k8s/crd,k8s/ingress] Apply labelSelector as a TweakListOptions for Kubernetes informers ( by rtribotte)
fix[middleware] Do not evaluate templated URL in redirectRegex middleware ( by jspdown)
fix[provider] fix: invalid slice parsing. ( by ldez)
other[ecs] Fix clusters option in ECS provider documentation ( by skapin)
fix[acme] Update go-acme/lego to v4.1.0 ( by ldez)
fix[consulcatalog,ecs] Fix missing allow-empty tag on ECS and Consul Catalog providers ( by jspdown)
fix[consulcatalog] consulcatalog to update before the first interval ( by greut)
fix[consulcatalog] Fix consul catalog panic when health and services are not in sync ( by jspdown)
fix[ecs] Translate configured server port into correct mapped host port ( by alekitto)
fix[k8s,k8s/crd,k8s/ingress] Filter out Helm secrets from informer caches ( by jspdown)
fix[plugins] Update Yaegi to v0.9.5 ( by ldez)
fix[plugins] Update Yaegi to v0.9.7 ( by kevinpollet)
fix[plugins] Update Yaegi to v0.9.4 ( by ldez)
fix[tcp] Ignore errors when setting keepalive period is not supported by the system ( by tristan-weil)
fix[tcp] Improve service name lookup on TCP routers ( by ddtmachado)
fixImprove anonymize configuration ( by mmatur)
feature[ecs] Add ECS menu to dynamic config reference ( by kevinpollet)
other[k8s,k8s/ingress] Fix ingress documentation ( by rtribotte)
other[k8s] fix documentation ( by jbdoumenjou)
other[k8s] Fix grammar in kubernetes ingress controller documentation ( by ivorscott)
other[logs] Clarify time-based field units ( by tomtastic)
other[middleware] Forwardauth headers ( by w4tsn)
other[provider] fix typo in providers overview documentation ( by pirey)
other[tls] Fix docs for TLS ( by james426759)
fixfix: exclude protected link from doc verify ( by jbdoumenjou)
featureAdd missed tls config for yaml example ( by andrew-demb)
otherResolve broken URLs causing make docs to fail ( by tomtastic)
fixFix Traefik Proxy product nav in docs ( by PCM2)
featureadd links to contributors guide ( by notsureifkevin)
fix[acme] fix: restrict protocol for TLS Challenge. ( by ldez)
fix[acme] fix: use provider keytype instead of account keytype. ( by mmatur)
fix[acme] acme: Fix race condition in LocalStore during saving. ( by walkline)
fix[plugins] fix: update Yaegi to v0.9.4 ( by ldez)
fix[udp] fix: udp json struct tag ( by mschneider82)
other[consulcatalog] fix: Consul Catalog address documentation. ( by ldez)
other[middleware] Moving Provider Namespace documentation topic to Configuration Discovery section ( by AndrewSav)
other[pilot] fix: pilot static configuration documentation ( by jbdoumenjou)
other[plugins] Revise Traefik Pilot documentation section ( by PCM2)
other[tls] Adding details about the default TLS options to the documentation ( by AndrewSav)
featuredoc: add YAML sample. ( by ldez)
fixFix containous links in readme ( by kevinpollet)
fixFix broken logo ( by Bencey)
fix[webui] Fix blank webui on some browsers ( by matthieuh)
other[k8s/helm] Update of the helm repo localisation ( by dgoujard)
otherrestore traefik logo ( by notsureifkevin)
breakingRemoves invalid items in the changelog. ( by ldez)
feature[api] Add custom ping http code when Traefik is terminating ( by L3o-pold)
feature[ecs] Add AWS ECS provider ( by alekitto)
feature[file] feat: use parser to load dynamic config from file. ( by ldez)
feature[k8s,k8s/crd,k8s/ingress] Upgrade Client-go to 0.18.2 ( by dtomcej)
feature[k8s,k8s/ingress] Add new ingressClass support to ingress provider ( by dtomcej)
feature[k8s,k8s/ingress] Add example for the IngressClass usage ( by SantoDE)
feature[metrics,pilot] Pilot metrics provider ( by rtribotte)
feature[pilot] Moves pilot outside the experimental section. ( by ldez)
feature[pilot,plugins] Traefik Pilot: plugins support and alert system (EXPERIMENTAL FEATURES) ( by ldez)
feature[plugins] Improve plugins builder. ( by ldez)
feature[provider] Add HTTP Provider ( by kevinpollet)
feature[webui] Add iOS specific icons ( by Heisenberg74)
fix[acme] fix: precheck function. ( by ldez)
fix[ecs] Improve region resolution for ECS provider ( by kevinpollet)
fix[k8s,k8s/ingress] Delete an unnecessary warning log ( by jbdoumenjou)
fix[k8s,k8s/ingress] Support Kubernetes Ingress pathType ( by rtribotte)
fix[k8s,k8s/ingress] Use semantic versioning to enable ingress class support ( by kevinpollet)
fix[metrics] fix: uint64 alignment in go-kit. ( by ldez)
fix[middleware] Allow multiple secure middlewares to operate independently ( by dtomcej)
fix[pilot,webui] Avoid Traefik Pilot iframe code in Traefik webui regarding notifications ( by matthieuh)
fix[pilot,webui] Add ability to dismiss pilot notification ( by matthieuh)
fix[pilot] fix: pilot metrics unit for req duration. ( by ldez)
fix[pilot] fix: start of Traefik Pilot ( by ldez)
fix[provider] file parser: skip nil value. ( by ldez)
fix[tracing] Update jaeger-client-go dependency to v2.25.0 ( by kevinpollet)
other[consul] Fix consul catalog router tag example ( by rtribotte)
other[ecs] Fix documentation for ECS ( by mmatur)
feature[k8s] docs: add missing apigroup to Kubernetes RBAC ( by kevinpollet)
feature[k8s] Add the ingressclass resource in the ingress RBAC documentation ( by jbdoumenjou)
feature[k8s] Add migration documentation for IngressClass ( by kevinpollet)
other[middleware] Fixes config samples regarding forceSlash option ( by volkerw00)
other[plugins] Update availability info ( by PCM2)
fixFix yaml documentation ( by rtribotte)
otherMerge current v2.2 branch into v2.3 ( by rtribotte)
otherMerge current v2.2 branch into v2.3 ( by ldez)
otherMerge current v2.2 branch into v2.3 ( by jbdoumenjou)
otherMerge current v2.2 branch into master ( by ldez)
otherMerge current v2.2 branch into master ( by jbdoumenjou)
otherMerge current v2.2 branch into master ( by mmatur)
fix[middleware] fix: header middleware response writer. ( by ldez)
other[healthcheck] Clarified hostname documentation for load balancer healthcheck ( by AndrewSav)