Traefik v3.7.9 released on 24-07-2026
Traefik v3.7.9 is out now. Operators and cluster administrators will see fixes to HTTP CONNECT and tunnelling, Kubernetes provider and documentation updates, and a change to middleware compression behaviour.
Check the Traefik GitHub release notes and the v3.7 migration guide for full details and migration steps: https://doc.traefik.io/traefik/v3.7/migrate/v3/#v379
What’s in this release
- CONNECT and tunnel handling fixes: the CONNECT payload is deferred until the backend accepts the tunnel; CONNECT request bodies are discarded when using forwardauth; CONNECT requests routed through the fast proxy are rejected; CONNECT requests are no longer re-added to connection pools.
- Kubernetes provider fixes and docs: a redirect bug in the Ingress-NGINX provider when use-regex is enabled is fixed; Gateway API generated service name changes are documented in the migration guide; typo fix for the nginx annotation proxy-buffer-numbers.
- Middleware and server updates: Zstd support disabled in the gzhttp wrapper; google.golang.org/grpc bumped to v1.82.1; miscellaneous reliability fixes improving tunnel and request-pooling behaviour.
Upgrade notes
- CONNECT behaviour and Gateway API service-name changes may affect forward-auth and proxy setups — read the v3.7 migration guide for CONNECT-specific changes: https://doc.traefik.io/traefik/v3.7/migrate/v3/#v379
- If you need to roll back, verify forward-auth, tunnel handling and any automation referencing generated service names as part of your downgrade testing.
Share any comments on your upgrade experience, especially issues around CONNECT, forwardauth, or generated service names.
