Traefik | v3.7.0

Traefik v3.7.0 released on 05-05-2026


Traefik v3.7.0 is out now. Kubernetes users — especially those using the ingress‑nginx provider or the Gateway API — and operators concerned with middleware, TLS and observability will see much wider NGINX annotation coverage, Gateway API/CRD improvements and a long list of fixes and stability work.

Read the release notes on Traefik’s GitHub and consult the updated documentation and migration guides for configuration details and examples.

What’s in this release

  • Ingress‑NGINX provider: new metamodel for dynamic configuration plus broad support for NGINX annotations (limit‑connections, limit‑rps/rpm, limit‑burst‑multiplier, proxy timeouts, buffering, canary, custom headers, upstream‑vhost, server‑alias, proxy‑http‑version, x‑forwarded‑prefix, rewrite‑targets, auth‑signin, auth‑snippet, auth‑tls and more), and improved handling of rewrite‑targets and SSL redirect behaviour.
  • Kubernetes Gateway API and CRDs: support for multiple certificateRefs on Gateway listeners, secret support for BackendTLSPolicy caCertificateRefs, bump to gateway‑api v1.5.1, addition of ingressClassName in CRD specs, service failover in TraefikService CRD, providers routing precedence configuration and wildcard Host/HostSNI matchers.
  • Middleware, server and observability: new encodedCharacters middleware and opt‑in reject behavior, retries configurable by HTTP status/timeout/non‑idempotent methods, authSignInURL and auth‑snippet support, ACME and TLS robustness improvements, and Web UI polish including server weight and a certificates menu.

Upgrade notes

  • ForwardAuth.TrustForwardHeader has been deprecated — review ForwardAuth settings and consult the changelog and authentication docs before upgrading.
  • If you rely on the experimental ingress‑nginx provider flag or are migrating from ingress‑nginx, follow the documented migration steps and the new ingress‑nginx ConfigMap migration guidance in the docs; keep a tested rollback plan.

Tell the Traefik community about your experience with v3.7.0 — report any issues you hit and share migration notes so others can learn from your setup.

Related posts

Vector | vdev-v0.3.3

Vector vdev v0 3 3: patch release with crash, leak and parsing fixes, connector and tooling improvements, upgrade notes on prechecks, rolling updates, compat

Loki | v3.7.2

Loki v3 7 2: security and CVE fixes, updated S3 client to aws sdk v1 97 3, ruler panic fix for unset validation scheme, S3 Object Lock sends SHA256 checksum

Loki | v3.7.2

Loki v3 7 2: Patch release with CVE fixes, AWS S3 SDK update, ruler panic fix, S3 Object Lock SHA256 checksum support