Traefik | v3.6.11

Traefik v3 6 11: OTel trace context in logs, Kubernetes ingress and gateway fixes, HTTP TLS and auth hardening, Web UI license and docs cleanup

Traefik v3.6.11 released on 19-03-2026


Traefik v3.6.11 is out now. It adds OpenTelemetry‑conformant trace context attributes to access logs and includes a number of Kubernetes, HTTP/TLS and authentication fixes that improve interoperability and resilience for users sending logs to OTEL-compatible tracing pipelines or running Traefik on Kubernetes.

See the Traefik GitHub release for full details and downloads.

What’s in this release

  • Adds OTel-conformant trace context attributes to access logs so tracing fields exported in logs match OpenTelemetry expectations (PR #12801).
  • Fixes Kubernetes integration issues: incorrect hostname matching between GatewayAPI listeners and routes, a corrected Ingress router rule, and proxy-ssl-verify annotation handling for ingress-nginx (PRs #12599, #12808, #12825).
  • HTTP/TLS and auth improvements: maxResponseBodySize configuration on the HTTP provider, support for fragmented TLS ClientHello messages, and constant-time basic auth checks to reduce timing-attack risk (PRs #12788, #12787, #12803).

Upgrade notes

  • No breaking changes are listed in the release notes; review the GitHub release for any migration guidance before upgrading.
  • If you need to roll back, download and reinstall an earlier release from the project’s GitHub releases page.

Share your experience after upgrading — report issues or leave feedback on Traefik’s GitHub or community channels.