Traefik v3.7.3 released on 04-06-2026
Traefik v3.7.3 is out now. It patches a range of routing, TLS, middleware and server issues and updates several dependencies — useful for operators running Traefik on Kubernetes, alongside Ingress‑NGINX or using the Gateway API.
Consult the v3→v3.7 migration guide and the GitHub release notes for full details: v3→v3.7 migration guide.
What’s in this release
- Corrected TLS options resolution after models are applied, and moved SNI checking into the proper request context.
- Kubernetes / Ingress‑NGINX / Gateway API fixes: prevents ingress path matcher injection, trims quotes from proxy_set_header names, clears Ssl-Client-* headers when no client certificate exists, and exposes/changes defaults for Kubernetes client QPS/Burst for Gateway API.
- Logging, dashboard and middleware fixes: escape double quotes in quoted access-log fields and allow dropping query parameters from RequestPath; fix TCP router → service resolution in the dashboard flow diagram; and reject requests whose paths diverge after StripPrefix / StripPrefixRegex normalisation.
Upgrade notes
- Read and follow the v3→v3.7 migration guide before upgrading: migration guide.
- Several dependencies were bumped (github.com/moby/spdystream, github.com/bytedance/sonic, golang.org/x/net, golang.org/x/crypto). If you need to roll back, revert to your previous v3 release using your normal rollback process and the GitHub releases.
Share your experience after upgrading — report any issues or observations on the Traefik GitHub or the project’s community channels.
