Traefik | v3.7.0

Traefik v3.7.0 released on 05-05-2026


Traefik v3.7.0 is out now. Kubernetes users — especially those using the ingress‑nginx provider or the Gateway API — and operators concerned with middleware, TLS and observability will see much wider NGINX annotation coverage, Gateway API/CRD improvements and a long list of fixes and stability work.

Read the release notes on Traefik’s GitHub and consult the updated documentation and migration guides for configuration details and examples.

What’s in this release

  • Ingress‑NGINX provider: new metamodel for dynamic configuration plus broad support for NGINX annotations (limit‑connections, limit‑rps/rpm, limit‑burst‑multiplier, proxy timeouts, buffering, canary, custom headers, upstream‑vhost, server‑alias, proxy‑http‑version, x‑forwarded‑prefix, rewrite‑targets, auth‑signin, auth‑snippet, auth‑tls and more), and improved handling of rewrite‑targets and SSL redirect behaviour.
  • Kubernetes Gateway API and CRDs: support for multiple certificateRefs on Gateway listeners, secret support for BackendTLSPolicy caCertificateRefs, bump to gateway‑api v1.5.1, addition of ingressClassName in CRD specs, service failover in TraefikService CRD, providers routing precedence configuration and wildcard Host/HostSNI matchers.
  • Middleware, server and observability: new encodedCharacters middleware and opt‑in reject behavior, retries configurable by HTTP status/timeout/non‑idempotent methods, authSignInURL and auth‑snippet support, ACME and TLS robustness improvements, and Web UI polish including server weight and a certificates menu.

Upgrade notes

  • ForwardAuth.TrustForwardHeader has been deprecated — review ForwardAuth settings and consult the changelog and authentication docs before upgrading.
  • If you rely on the experimental ingress‑nginx provider flag or are migrating from ingress‑nginx, follow the documented migration steps and the new ingress‑nginx ConfigMap migration guidance in the docs; keep a tested rollback plan.

Tell the Traefik community about your experience with v3.7.0 — report any issues you hit and share migration notes so others can learn from your setup.

Related posts

Weekly Tech Digest | 12 Oct 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

Removed SSRF beta detections in Cloudflare WAF

Cloudflare WAF Managed Rules have a habit of changing underneath you, and old SSRF names can linger long after the protection has gone. I prefer to check the live block logs, then test the ugly...

Weekly Tech Digest | 28 Sep 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.