Important: Please read the migration guide before upgrading.
Traefik v3.7.9 delivers a set of targeted bug fixes and documentation improvements to enhance stability and clarify migration steps. This release addresses several issues across the IngressNGINX provider, middleware, and server components, ensuring smoother operation in self-hosted environments.
Bug Fixes
The IngressNGINX provider received a fix for redirect handling when the use-regex annotation is enabled, restoring expected behavior for regex-based routing. On the middleware side, Zstd support has been disabled in the gzhttp wrapper to avoid compatibility problems with certain clients.
Server-side improvements focus heavily on CONNECT request handling, which is critical for WebSocket and tunneling scenarios. The proxy now defers sending the CONNECT payload until the backend accepts the tunnel, preventing premature data transmission. In addition, CONNECT bodies are properly discarded in forward authentication contexts, and CONNECT requests are explicitly rejected when using the fast proxy. To further tighten reliability, CONNECT requests are no longer returned to the connection pool after use. Lastly, the gRPC dependency has been bumped to v1.82.1, bringing in upstream stability fixes.
Documentation
The migration guide now includes a note about the change in Gateway API generated service names, helping users transition smoothly. A typo in the NGINX annotation proxy-buffer-numbers has been corrected, and a dedicated migration note explains the new CONNECT request behavior for those relying on tunneling features.
