v3.3.0-rc2

Bug fixes:

• [k8s/ingress,k8s/crd] Fix fenced server status computation (#11361 by kevinpollet)

v3.3.0-rc1

Enhancements:

• [acme] Add options to control ACME propagation checks (#11241 by ldez)
• [api] Add support dump API endpoint (#11328 by mmatur)
• [http] Set Host header in HTTP provider request (#11237 by nikonhub)
• [k8s/crd,k8s] Make the IngressRoute kind optional (#11177 by skirtan1)
• [logs,accesslogs] OpenTelemetry Logs and Access Logs (#11319 by rtribotte)
• [logs,accesslogs] Add experimental flag for OTLP logs integration (#11335 by kevinpollet)
• [metrics,tracing,accesslogs] Manage observability at entrypoint and router level (#11308 by rtribotte)
• [middleware,authentication] Add an option to preserve the ForwardAuth Server Location header (#11318 by Nelwhix)
• [middleware,authentication] Only calculate basic auth hashes once for concurrent requests (#11143 by michelheusschen)
• [middleware,authentication] Send request body to authorization server for forward auth (#11097 by kyo-ke)
• [plugins] Add AbortOnPluginFailure option to abort startup on plugin load failure (#11228 by bmagic)
• [sticky-session] Configurable path for sticky cookies (#11166 by IIpragmaII)
• [sticky-session,k8s/ingress,k8s/crd,k8s] Support serving endpoints (#11121 by BZValoche)
• [webui,api] Configurable API & Dashboard base path (#11250 by rtribotte)

Misc:

• Merge branch v3.2 into master (#11340 by kevinpollet)
• Merge branch v3.2 into master (#11293 by kevinpollet)
• Merge branch v3.2 into master (#11239 by kevinpollet)
• Merge branch v3.2 into master (#11187 by kevinpollet)

v3.2.3

Documentation:

• Update reference install documentation with current chart default (#11332 by mloiseleur)

Misc:

• Merge branch v2.11 into v3.2 (#11346 by kevinpollet)
• Merge branch v2.11 into v3.2 (#11337 by kevinpollet)

v2.11.16

Bug fixes:

• [server] Update golang.org/x dependencies (#11336 by rtribotte)

v3.2.2

CVE: CVE-2024-53259 (Advisory GHSA-hxr6-2p24-hf98)

Bug fixes:

• [docker,docker/swarm] Rename traefik.docker.* labels for Docker Swarm to traefik.swarm.* (#11247 by anchal00)
• [k8s/gatewayapi] Update sigs.k8s.io/gateway-api to v1.2.1 (#11314 by kevinpollet)
• [plugins] Fix WASM settings (#11321 by juliens)
• [rules] Fix models mechanism for default rule syntax (#11300 by rtribotte)

Documentation:

• Move callout to the entrypoint page footer (#11305 by kevinpollet)
• Fix incorrect links in v3 migration sections (#11297 by kevinpollet)
• New Install Reference Documentation (#11213 by sheddy-traefik)

v2.11.15

CVE: CVE-2024-53259 (Advisory GHSA-hxr6-2p24-hf98)

Bug fixes:

• [acme] Update go-acme/lego to v4.20.4 (#11295 by ldez)
• [http3] Update github.com/quic-go/quic-go to v0.48.2 (#11320 by kevinpollet)

v3.2.1

CVE: CVE-2024-45410 (Advisory GHSA-h924-8g65-j9wg)

Important: Please read the migration guide.

Bug fixes:

• [k8s/ingress,k8s] Fix HostRegexp config for rule syntax v2 (#11288 by kevinpollet)
• [logs] Change level of peeking first byte error log to DEBUG for Postgres (#11270 by rtribotte)
• [service,fastproxy] Fix case problem for websocket upgrade (#11246 by juliens)

Documentation:

• [acme,tls] Document how to use Certificates of cert-manager (#11053 by mloiseleur)
• [docker/swarm] Add tips about the use of docker in dynamic configuration for swarm provider (#11207 by webash)
• [middleware] Add Compress middleware to migration guide (#11229 by logica0419)

Misc:

• Merge branch v2.11 into v3.2 (#11290 by kevinpollet)
• Merge branch v2.11 into v3.2 (#11287 by rtribotte)
• Merge branch v2.11 into v3.2 (#11285 by juliens)
• Merge branch v2.11 into v3.2 (#11268 by kevinpollet)

v2.11.14

CVE: CVE-2024-45410 (Advisory GHSA-h924-8g65-j9wg)

Important: Please read the migration guide.

Bug fixes:

• [acme] Update go-acme/lego to v4.20.2 (#11263 by ldez)
• [logs,server] Change level of peeking first byte error log to DEBUG (#11254 by rtribotte)
• [middleware,server] Drop untrusted X-Forwarded-Prefix header (#11253 by rtribotte)
• [server] Apply keepalive config to h2c entrypoints (#11276 by davefu113)
• [service] Fix internal handlers ServiceBuilder composition (#11281 by juliens)

Documentation:

• [accesslogs] Update access-logs.md, add examples for accesslog.format (#11275 by bluepuma77)
• Fix the defaultRule CLI examples (#11282 by kevinpollet)
• Fix spelling, grammar, and rephrase sections for clarity in some documentation pages (#11280 by AntoineDeveloper)
• Fix absolute link in the migration guide (#11269 by kevinpollet)
• Add X-Forwarded-Prefix to the migration guide (#11267 by kevinpollet)
• Fix a small typo in entrypoints documentation (#11261 by quiode)
• Add a warning about environment variables casing for static configuration (#11226 by anchal00)
• Improve documentation on dashboard (#11220 by mloiseleur)

v3.2.0

Important: Please read the migration guide.

Enhancements:

• [acme] Remove same email requirement for certresolvers (#11019 by Emrio)
• [acme] Add support for custom CA certificates by certificate resolver (#10816 by ldez)
• [acme] Add 30 day certificatesDuration step (#10970 by luker983)
• [docker] Support HTTP BasicAuth for docker and swarm endpoint (#10776 by 985492783)
• [k8s,k8s/gatewayapi] Add supported features to the Gateway API GatewayClass status (#11056 by rtribotte)
• [k8s,k8s/gatewayapi] Update sigs.k8s.io/gateway-api to v1.2.0-rc1 (#11124 by rtribotte)
• [k8s,k8s/gatewayapi] Add support for backend protocol selection in HTTP and GRPC routes (#11051 by rtribotte)
• [k8s,k8s/gatewayapi] Improve Kubernetes GatewayAPI TCPRoute and TLSRoute support (#11042 by rtribotte)
• [k8s,k8s/gatewayapi] Support HTTPRoute destination port matching (#11134 by kevinpollet)
• [k8s,k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.2.0-rc2 (#11131 by kevinpollet)
• [k8s,k8s/gatewayapi] Add support for Gateway API BackendTLSPolicies (#11009 by rtribotte)
• [k8s,k8s/gatewayapi] Support NativeLB option in GatewayAPI provider (#11147 by rtribotte)
• [k8s,k8s/gatewayapi] Support ResponseHeaderModifier filter (#10987 by kevinpollet)
• [k8s,k8s/gatewayapi] Support GRPC routes (#10975 by kevinpollet)
• [k8s,k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.2.0 (#11167 by rtribotte)
• [metrics,otel] Allow setting service.name for OTLP metrics (#10917 by cmartell-at-ocp)
• [middleware,accesslogs] Record trace id and EntryPoint span id into access log (#10921 by weijiany)
• [middleware,authentication] Support LogUserHeader with forwardAuth middleware (#10833 by GaleHuang)
• [middleware] Add encodings option to the compression middleware (#10943 by wollomatic)
• [middleware] Add support for ipv6 subnet in ipStrategy (#9747 by michal-kralik)
• [nomad] Support for watching instead of polling Nomad (#10997 by deverton-godaddy)
• [server,performance] Introduce a fast proxy mode to improve HTTP/1.1 performances with backends (#11122 by kevinpollet)
• [server] Configurable max request header size (#10995 by lucasrod16)
• [service] Add mirrorBody option to HTTP mirroring (#11032 by MatteoPaier)
• [service] Add an option to preserve server path (#11193 by mmatur)

Bug fixes:

• [k8s,k8s/gatewayapi] Ensuring Gateway API reflected Traefik resource name unicity (#11222 by rtribotte)
• [k8s,k8s/gatewayapi] Preserve GRPCRoute filters order (#11199 by kevinpollet)
• [k8s,k8s/gatewayapi] Support http and https appProtocol for Kubernetes Service (#11176 by WillDaSilva)
• [k8s,k8s/gatewayapi] Avoid updating Accepted status for routes matching no Gateways (#11170 by rtribotte)
• [k8s,k8s/gatewayapi] Do not update gateway status when not selected by a gateway class (#11169 by kevinpollet)
• [service] Detect and drop broken conns in the fastproxy pool (#11212 by kevinpollet)

Documentation:

• [k8s,k8s/gatewayapi] Document nativeLBByDefault annotation on Kubernetes Gateway provider (#11209 by mloiseleur)
• [k8s/crd,k8s] Detail CRD update with v3.2 in the migration guide (#11164 by mloiseleur)
• [k8s/gatewayapi] Add missing RBAC in the migration guide (#11189 by mloiseleur)
• [k8s] Fix instructions for downloading CRDs of Gateway API v1.2 (#11191 by mloiseleur)
• Prepare release v3.2.0-rc2 (#11182 by kevinpollet)
• Prepare Release v3.2.0-rc1 (#11154 by rtribotte)

Misc:

• Merge branch v3.1 into v3.2 (#11219 by kevinpollet)
• Merge branch v3.1 into v3.2 (#11181 by kevinpollet)
• Merge branch v3.1 into master (#11153 by kevinpollet)
• Merge branch v3.1 into master (#11110 by kevinpollet)
• Merge branch v3.1 into master (#11066 by mmatur)
• Merge branch v3.1 into master (#11047 by mmatur)
• Merge branch v3.1 into master (#10980 by kevinpollet)
• Merge branch v3.1 into master (#10952 by mmatur)
• Merge branch v3.1 into master (#10906 by rtribotte)

v3.1.7

Bug fixes:

• [k8s,k8s/gatewayapi] Preserve HTTPRoute filters order (#11198 by kevinpollet)

Documentation:

• [k8s,k8s/gatewayapi] Fix broken links in Kubernetes Gateway provider page (#11188 by mloiseleur)

Misc:

• Merge branch v2.11 into v3.1 (#11232 by kevinpollet)
• Merge branch v2.11 into v3.1 (#11218 by kevinpollet)