The Traefik team has released v3.7.9, a patch version focusing on bug fixes, especially around CONNECT request handling and the IngressNGINX provider. This release also includes important documentation updates for the Gateway API migration.
Key changes in this release:
- IngressNGINX: Fixed a redirect issue when
use-regexis enabled in theIngressNGINXprovider (#13476). - Middleware: Disabled Zstd support in the
gzhttpwrapper to prevent compatibility issues (#13533). - CONNECT requests:
- Deferred the CONNECT payload until the backend accepts the tunnel (
#13542). - Discard CONNECT body in
forwardauthand reject CONNECT requests with fast proxy (#13543). - Do not add back CONNECT requests to the connection pool (
#13556).
- Deferred the CONNECT payload until the backend accepts the tunnel (
- Dependency: Bumped
google.golang.org/grpcto v1.82.1 (#13551). - Documentation:
- Documented Gateway API generated service names change in the migration guide (
#13541). - Fixed typo in nginx annotation
proxy-buffer-numbers(#13545). - Added a migration note for CONNECT requests (
#13554).
- Documented Gateway API generated service names change in the migration guide (
This release is crucial for developers using Traefik as a reverse proxy, especially those handling CONNECT methods (e.g., for tunneling) or relying on the IngressNGINX provider. The fixes ensure more robust handling of CONNECT requests, preventing potential memory leaks or misrouting. Additionally, the Gateway API migration guide update helps users transitioning to newer versions. It is recommended to review the migration guide before upgrading, as noted in the release.
Source: https://github.com/traefik/traefik/releases/tag/v3.7.9