traefik

v3.6.24 Breaking

This release includes 2 breaking changes for platform teams planning a safe upgrade.

Published 2d Reverse Proxies & Load Balancers

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

consul docker etcd go kubernetes letsencrypt

+7 more

load-balancing marathon mesos microservice proxy traefik zookeeper

Affected surfaces

breaking_upgrade

Summary

AI summary

Updates https://github.com/traefik/traefik/pull/13498, https://github.com/traefik/traefik/pull/13469, and https://github.com/traefik/traefik/pull/13533 across a mixed release.

Full changelog

Important: Please read the migration guide.

Bug fixes:

[middleware, k8s/crd] Add missing ErrorRequestHeaders field to CRDs (#13498 @kevinpollet)
[logs] Remove unrelated error from nonexistent cert resolver log (#13469 @ArthurHlt)
[middleware] Disable Zstd support in the gzhttp wrapper (#13533 @kevinpollet)
[server] Defer the CONNECT payload until the backend accepts the tunnel (#13542 @sdelicata)
[server] Discard CONNECT body in forwardauth and reject CONNECT requests with fast proxy (#13543 @sdelicata)
[server] Bump google.golang.org/grpc to v1.82.1 (#13551 @piscue)
[server] Do not add back CONNECT requests to the pool (#13556 @kevinpollet)

Documentation:

[k8s] Align certificateRef and indicate ports (#13473 @veenoise)
[rules] Fix syntax notes in routing rule documentation (#13501 @stevenlele)
Add a migration note for CONNECT requests (#13554 @kevinpollet)

Breaking Changes

Middleware K8s/Crd schema now requires ErrorRequestHeaders field (add missing field).
Server CONNECT request handling altered: payload deferred until backend accepts, bodies discarded in forwardauth, and requests are no longer added back to the pool.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track traefik

Get notified when new releases ship.

About traefik

The Cloud Native Application Proxy

All releases →