Traefik | v3.7.0

Traefik v3.7.0 released on 05-05-2026


Traefik v3.7.0 is out now. Kubernetes users — especially those using the ingress‑nginx provider or the Gateway API — and operators concerned with middleware, TLS and observability will see much wider NGINX annotation coverage, Gateway API/CRD improvements and a long list of fixes and stability work.

Read the release notes on Traefik’s GitHub and consult the updated documentation and migration guides for configuration details and examples.

What’s in this release

  • Ingress‑NGINX provider: new metamodel for dynamic configuration plus broad support for NGINX annotations (limit‑connections, limit‑rps/rpm, limit‑burst‑multiplier, proxy timeouts, buffering, canary, custom headers, upstream‑vhost, server‑alias, proxy‑http‑version, x‑forwarded‑prefix, rewrite‑targets, auth‑signin, auth‑snippet, auth‑tls and more), and improved handling of rewrite‑targets and SSL redirect behaviour.
  • Kubernetes Gateway API and CRDs: support for multiple certificateRefs on Gateway listeners, secret support for BackendTLSPolicy caCertificateRefs, bump to gateway‑api v1.5.1, addition of ingressClassName in CRD specs, service failover in TraefikService CRD, providers routing precedence configuration and wildcard Host/HostSNI matchers.
  • Middleware, server and observability: new encodedCharacters middleware and opt‑in reject behavior, retries configurable by HTTP status/timeout/non‑idempotent methods, authSignInURL and auth‑snippet support, ACME and TLS robustness improvements, and Web UI polish including server weight and a certificates menu.

Upgrade notes

  • ForwardAuth.TrustForwardHeader has been deprecated — review ForwardAuth settings and consult the changelog and authentication docs before upgrading.
  • If you rely on the experimental ingress‑nginx provider flag or are migrating from ingress‑nginx, follow the documented migration steps and the new ingress‑nginx ConfigMap migration guidance in the docs; keep a tested rollback plan.

Tell the Traefik community about your experience with v3.7.0 — report any issues you hit and share migration notes so others can learn from your setup.

Related posts

Weekly Tech Digest | 06 Jul 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

wolfCOSE zero-allocation parsing in embedded C

wolfCOSE looks sensible only if you care about what your firmware actually has to carry. I like that, because on small targets the wrong crypto feature can cost more than the message itself, and there...

restic | v0.19.1

restic v0 19 1: safer FUSE mounts and mountpoint checks, robust backup source and exclude handling, clearer CLI JSON output, Windows SFTP deletion fixes