IMPORTANT: This release brings the latest fixes on v2.11 (see the Migration Guide).

CVE's:

• GHSA-7f4j-64p6-5h5v (related to CVE-2023-45288)
• CVE-2024-28869

Misc:

• Merge current v2.11 into v3.0 (#10604 by ldez)

IMPORTANT: Please read the Migration Guide.

CVE's:

• GHSA-7f4j-64p6-5h5v (related to CVE-2023-45288)
• CVE-2024-28869

Bug fixes:

• [server] Revert LingeringTimeout and change default value for ReadTimeout (#10599 by kevinpollet)
• [server] Set default ReadTimeout value to 60s (#10602 by rtribotte)

Enhancements:

• [k8s/gatewayapi] Add option to set Gateway status address (#10582 by kevinpollet)
• [k8s/gatewayapi] Handle middlewares in filters extension reference (#10511 by youkoulayley)
• [k8s/gatewayapi] Toggle support for experimental channel (#10435 by SantoDE)
• [k8s/ingress,k8s/crd,k8s,k8s/gatewayapi] Use runtime.Object in routerTransform (#10523 by juliens)
• [nomad] Allow empty services (#10375 by chrispruitt)
• [webui,middleware,k8s/gatewayapi] Support RequestHeaderModifier filter (#10521 by rtribotte)

Bug fixes:

• [docker] Fix struct names in comment (#10503 by hishope)
• [logs] Avoid cumulative send anonymous usage log (#10579 by mmatur)
• [rules] Support regexp in path/pathprefix in matcher v2 (#10546 by youkoulayley)
• [webui] Add missing Docker Swarm logo (#10529 by ldez)

Documentation:

• Fix typo and improve explanation on internal resources (#10563 by mloiseleur)
• Fix typo in dialer_test.go (#10552 by eltociear)

Misc:

• Merge branch v2.11 into v3.0 (#10587 by kevinpollet)
• Merge current v2.11 into v3.0 (#10566 by mmatur)
• Merge current v2.11 into v3.0 (#10564 by ldez)

Bug fixes:

• [acme,tls] Enforce handling of ACME-TLS/1 challenges (#10536 by rtribotte)
• [acme] Update go-acme/lego to v4.16.1 (#10508 by ldez)
• [acme] Close created file in ACME local store CheckFile func (#10574 by testwill)
• [docker,http3] Update to quic-go v0.42.0 and docker/cli v24.0.9 (#10572 by mloiseleur)
• [docker,marathon,rancher,ecs,tls,nomad] Allow to configure TLSStore default generated certificate with labels (#10439 by kevinpollet)
• [ecs] Adjust ECS network interface detection logic (#10550 by amaxine)
• [logs,tls] Fix log when default TLSStore and TLSOptions are defined multiple times (#10499 by rtribotte)
• [middleware] Allow empty replacement with ReplacePathRegex middleware (#10538 by rtribotte)
• [plugins] Update Yaegi to v0.16.1 (#10565 by ldez)
• [provider,rules] Don't allow routers higher than internal ones (#10428 by ldez)
• [rules] Reserve priority range for internal routers (#10541 by youkoulayley)
• [server,tcp] Introduce Lingering Timeout (#10569 by rtribotte)
• [tcp] Enforce failure for TCP HostSNI with hostname (#10540 by youkoulayley)
• [tracing] Bump Elastic APM to v2.4.8 (#10512 by rtribotte)
• [webui] Fix dashboard exposition through a router (#10518 by mmatur)
• [webui] Display IPAllowlist middleware configuration in dashboard (#10459 by youkoulayley)
• [webui] Make text more readable in dark mode (#10473 by hood)
• [webui] Migrate to Quasar 2.x and Vue.js 3.x (#10416 by andsarr)
• [webui] Add a horizontal scroll for the mobile view (#10480 by framebassman)

Documentation:

• [acme] Update gandiv5 env variable in providers table (#10506 by dominiwe)
• [acme] Fix multiple dns provider documentation (#10496 by mmatur)
• [docker] Fix paragraph in entrypoints and Docker docs (#10491 by luigir-it)
• [k8s] Improve middleware example (#10532 by mloiseleur)
• [metrics] Fix host header mention in prometheus metrics doc (#10502 by MorphBonehunter)
• [metrics] Fix typo in statsd metrics docs (#10437 by xpac1985)
• [middleware] Improve excludedIPs example with IPWhiteList and IPAllowList middleware (#10554 by mloiseleur)
• [nomad] Improve documentation about Nomad ACL minimum rights (#10482 by Thadir)
• [server] Add specification for TCP TLS routers in documentation (#10510 by shivanipawar00)
• [tls] Fix default value for peerCertURI option (#10470 by marcmognol)
• Update releases page (#10449 by ldez)
• Update releases page (#10443 by ldez)
• Add youkoulayley to maintainers (#10517 by emilevauge)
• Add sdelicata to maintainers (#10515 by emilevauge)

Misc:

• [webui] Modify the Hub Button (#10583 by mdeliatf)

Misc:

• Merge branch v2.11 into v3.0 (#10519 by rtribotte)

Enhancements:

• [consul] ConsulCatalog StrictChecks (#10388 by djenriquez)
• [metrics,tracing] Upgrade opentelemetry dependencies (#10472 by mmatur)
• [middleware,authentication,tracing] Add captured headers options for tracing (#10457 by rtribotte)
• [middleware,metrics] Semconv OTLP stable HTTP metrics (#10421 by mmatur)
• [plugins] Upgrade http-wasm host to v0.6.0 to support clients using v0.4.0 (#10475 by jcchavezs)
• [tracing] Support OTEL_PROPAGATORS to configure tracing propagation (#10465 by youkoulayley)

Bug fixes:

• Fix a regression on flags using spaces between key and value (#10445 by ldez)

Documentation:

• [k8s,k8s/gatewayapi] Add ReferenceGrants to Gateway API Traefik controller RBAC (#10462 by rtribotte)
• [k8s] Fix invalid version in docs about Gateway API on Traefik v3 (#10474 by mloiseleur)
• [rules] Improve ruleSyntax option documentation (#10441 by rtribotte)
• Fix typo in migration docs (#10478 by Eisberge)

Misc:

• Merge v2.11 into v3.0 (#10513 by mmatur)

Enhancements:

• [docker,service] Adds weight on ServersLoadBalancer (#10372 by juliens)
• [file] Reload provider file configuration on SIGHUP (#9993 by sokoide)
• [k8s,k8s/gatewayapi] Upgrade gateway api to v1.0.0 (#10205 by mmatur)
• [k8s,k8s/gatewayapi] Support for cross-namespace references / GatewayAPI ReferenceGrants (#10346 by pascal-hofmann)
• [logs] Introduce static config hints (#10351 by rtribotte)
• [metrics,tracing,accesslogs] Remove observability for internal resources (#9633 by rtribotte)
• [metrics] Add support for sending DogStatsD metrics over Unix Socket (#10199 by liamvdv)
• [middleware,authentication] Add forwardAuth.addAuthCookiesToResponse (#8924 by tgunsch)
• [middleware] Implements the includedContentTypes option for the compress middleware (#10207 by rjsocha)
• [middleware] Feat re introduce IpWhitelist middleware as deprecated (#10341 by mmatur)
• [middleware] Add ResponseCode to CircuitBreaker (#10147 by fahhem)
• [middleware] Add rejectStatusCode option to IPAllowList middleware (#10130 by jfly)
• [plugins] Add http-wasm plugin support to Traefik (#10189 by zetaab)
• [rules] Bring back v2 rule matchers (#10339 by rtribotte)
• [server] Add SO_REUSEPORT support for EntryPoints (#9834 by aofei)
• [sticky-session] Support setting sticky cookie max age (#10176 by Patrick0308)
• [tracing,otel] Migrate to opentelemetry (#10223 by zetaab)
• Reintroduce dropped v2 dynamic config (#10355 by rtribotte)

Bug fixes:

• [k8s/crd,k8s] Delete warning in Kubernetes CRD provider about the supported version (#10414 by nmengin)
• [metrics] Fix OpenTelemetry unit tests (#10380 by mmatur)
• [middleware,authentication,metrics,tracing] Align OpenTelemetry tracing and metrics configurations (#10404 by rtribotte)
• [middleware] Fix brotli response status code when compression is disabled (#10396 by rtribotte)
• [tls,server] Compute priority for https forwarder TLS routes (#10288 by rtribotte)

Documentation:

• Update version comment in quick-start.md (#10383 by matthieuwerner)
• Improve migration guide (#10319 by rtribotte)

Misc:

• [k8s/crd,k8s] Support file path as input param for Kubernetes token value (#10232 by sssash18)
• [middleware] Disable br compression when no Accept-Encoding header is present (#10178 by robin-moser)
• Merge current v2.11 into v3.0 (#10382 by mmatur)
• Merge back v2.11 into v3.0 (#10377 by mmatur)
• Merge back v2.11 into v3.0 (#10353 by youkoulayley)
• Merge current v2.11 into v3.0 (#10328 by mmatur)
• Merge v2.11 into v3.0 (#10417 by mmatur)

Enhancements:

• [middleware] Deprecate IPWhiteList middleware in favor of IPAllowList (#10249 by lbenguigui)
• [redis] Add Redis Sentinel support (#10245 by youkoulayley)
• [server] Add KeepAliveMaxTime and KeepAliveMaxRequests features to entrypoints (#10247 by juliens)
• [sticky-session] Hash WRR sticky cookies (#10243 by youkoulayley)

Bug fixes:

• [acme] Update go-acme/lego to v4.15.0 (#10392 by ldez)
• [authentication] Fix NTLM and Kerberos (#10405 by juliens)
• [file] Fix file watcher (#10420 by juliens)
• [file] Update github.com/fsnotify/fsnotify to v1.7.0 (#10313 by ldez)
• [http3] Update quic-go to v0.40.1 (#10296 by ldez)
• [middleware,tcp] Add missing TCP IPAllowList middleware constructor (#10331 by youkoulayley)
• [nomad] Update the Nomad API dependency to v1.7.2 (#10327 by jrasell)
• [server] Fix ReadHeaderTimeout for PROXY protocol (#10320 by juliens)
• [webui] Fixes the Header Button (#10395 by mdeliatf)
• [webui] Fix URL encode resource's id before calling API endpoints (#10292 by andsarr)

Documentation:

• [acme] Fix TLS challenge explanation (#10293 by cavokz)
• [docker] Update wording of compose example (#10276 by svx)
• [docker,acme] Fix typo (#10294 by youpsla)
• [ecs] Mention ECS as supported backend (#10393 by aleyrizvi)
• [k8s/crd] Adjust deprecation notice for Kubernetes CRD provider (#10317 by rtribotte)
• [middleware] Update the documentation for RateLimit to provide a better example (#10298 by rmburton)
• [server] Fix the keepAlive options for the CLI examples (#10398 by immanuelfodor)
• Prepare release v2.11.0-rc2 (#10384 by rtribotte)
• Improve Concepts documentation page (#10315 by oliver-dvorski)
• Prepare release v2.11.0-rc1 (#10326 by mmatur)
• Fix description for anonymous usage statistics references (#10287 by ariyonaty)
• Documentation enhancements (#10261 by svx)

Bug fixes:

• [middleware,tcp] Add missing TCP IPAllowList middleware constructor (#10331 by youkoulayley)
• [nomad] Update the Nomad API dependency to v1.7.2 (#10327 by jrasell)

Documentation:

• Improve Concepts documentation page (#10315 by oliver-dvorski)

Enhancements:

• [middleware] Deprecate IPWhiteList middleware in favor of IPAllowList (#10249 by lbenguigui)
• [redis] Add Redis Sentinel support (#10245 by youkoulayley)
• [server] Add KeepAliveMaxTime and KeepAliveMaxRequests features to entrypoints (#10247 by juliens)
• [sticky-session] Hash WRR sticky cookies (#10243 by youkoulayley)

Bug fixes:

• [file] Update github.com/fsnotify/fsnotify to v1.7.0 (#10313 by ldez)
• [http3] Update quic-go to v0.40.1 (#10296 by ldez)
• [server] Fix ReadHeaderTimeout for PROXY protocol (#10320 by juliens)

Documentation:

• [acme] Fix TLS challenge explanation (#10293 by cavokz)
• [docker,acme] Fix typo (#10294 by youpsla)
• [docker] Update wording of compose example (#10276 by svx)
• [k8s/crd] Adjust deprecation notice for Kubernetes CRD provider (#10317 by rtribotte)
• Fix description for anonymous usage statistics references (#10287 by ariyonaty)
• Documentation enhancements (#10261 by svx)