Important: Please read the migration guide.

Enhancements:

• [acme] Add acme.profile and acme.emailAddresses options (#11597 by ldez)
• [docker,ecs,docker/swarm,consulcatalog,nomad] Allow configuring server URLs with label providers (#11374 by yelvert)
• [k8s/crd,k8s] Improve CEL validation on Ingress CRD resources (#11311 by mloiseleur)
• [k8s/gatewayapi] Set rule priority in Gateway API TLSRoute (#11443 by augustozanellato)
• [k8s/ingress] Add ingress status for ClusterIP and NodePort Service Type (#11100 by mlec1)
• [middleware,authentication] Add option to preserve request method in forwardAuth (#11473 by an09mous)
• [middleware] Support rewriting status codes in error page middleware (#11520 by sevensolutions)
• [middleware] Add Redis rate limiter (#10211 by longquan0104)
• [service] Add p2c load-balancing strategy for servers load-balancer (#11547 by rtribotte)
• [sticky-session] Support domain configuration for sticky cookies (#11556 by jleal52)
• [tls,k8s/crd,service] Allow root CA to be added through config maps (#11475 by Nelwhix)
• [tls] Add support to disable session ticket (#11609 by avdhoot)
• [udp] Add support for UDP routing in systemd socket activation (#11022 by tsiid)
• [webui] Add auto webui theme option and default to it (#11455 by zizzfizzix)
• Replace experimental maps and slices with stdlib (#11350 by Juneezee)

Documentation:

• Deprecate defaultRuleSyntax and ruleSyntax options (#11619 by rtribotte)

Misc:

• Merge branch v3.3 into master (#11653 by kevinpollet)
• Merge branch v3.3 into master (#11595 by kevinpollet)
• Merge branch v3.3 into master (#11541 by kevinpollet)
• Merge branch v3.3 into master (#11504 by kevinpollet)
• Merge branch v3.3 into master (#11420 by kevinpollet)
• Merge branch v3.3 into master (#11394 by mmatur)

Important: Please read the migration guide.

Bug fixes:

• [k8s/gatewayapi] Set scheme to https with BackendTLSPolicy (#11586 by rtribotte)
• [middleware] Revert compress middleware algorithms priority to v2 behavior (#11641 by rtribotte)
• [middleware] Do not abort request when response content-type is malformed (#11628 by kevinpollet)
• [middleware] Compress data on flush when compression is not started (#11583 by kevinpollet)

Documentation:

• [middleware] Add back forwarded headers section in FAQ (#11606 by kevinpollet)
• New Routing Reference Documentation (#11330 by sheddy-traefik)

Misc:

• Merge branch v2.11 into v3.3 (#11644 by kevinpollet)
• Merge branch v2.11 into v3.3 (#11594 by rtribotte)

Bug fixes:

• [ecs,logs] Bump AWS SDK to v2 (#11359 by Juneezee)
• [logs,tls] Error level log for configuration-related TLS errors with backends (#11611 by rtribotte)
• [rules] Allow underscore character in HostSNI matcher (#11557 by rohitlohar45)
• [server] Bump github.com/vulcand/oxy/v2 to v2.0.3 (#11649 by adamvduke)
• [server] Bump golang.org/x/net to v0.37.0 (#11632 by kevinpollet)
• [webui] Change boolean module properties default value to undefined (#11639 by rtribotte)
• Bump github.com/golang-jwt/jwt to v4.5.2 and v5.2.2 (#11634 by kevinpollet)
• Bump github.com/redis/go-redis/v9 to v9.6.3 (#11633 by kevinpollet)
• Bump golang.org/x/net to v0.36.0 (#11608 by kevinpollet)
• Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#11571 by kevinpollet)

Documentation:

• [accesslogs] Remove documentation for OriginStatusLine and DownstreamStatusLine accessLogs fields (#11599 by rtribotte)
• [middleware] Clarifies that retry middleware uses TCP, not HTTP status codes (#11603 by geraldcroes)
• [redis] Add tip for dynamic configuration updates of Redis (#11577 by Alanxtl)
• Add Security Support (#11610 by nmengin)

Important: Please read the migration guide.

Bug fixes:

• [fastproxy] Bump github.com/valyala/fasthttp to v1.58.0 (#11526 by kevinpollet)
• [fastproxy] Add WebSocket headers if they are present in the request (#11522 by kevinpollet)
• [fastproxy] Chunked responses does not have a Content-Length header (#11514 by kevinpollet)
• [metrics,otel] Change request duration metric unit from millisecond to second (#11523 by rtribotte)
• [sticky-session] Fix double hash in sticky cookie (#11518 by juliens)
• [tracing] Use ResourceAttributes instead of GlobalAttributes (#11515 by bruno-de-queiroz)
• [tracing] Fix panic when calling Tracer (#11479 by basgys)

Documentation:

• [acme] Update ACME provider configuration options (#11564 by sheddy-traefik)
• [acme] Fix incorrect grammar in ACME documentation (#11553 by Peter-Maguire)
• [metrics,tracing,accesslogs] Add missing options in entrypoints page (#11524 by sheddy-traefik)
• [tracing] Replace globalAttributes with resourceAttributes in tracing reference (#11531 by rtribotte)

Misc:

• Merge branch v2.11 into v3.3 (#11567 by kevinpollet)

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.22.2 (#11537 by ldez)
• [cli] Bump github.com/traefik/paerser to v0.2.2 (#11530 by kevinpollet)
• [middleware] Enable the retry middleware in the proxy (#11536 by kevinpollet)
• [middleware] Retry should send headers on Write (#11534 by kevinpollet)

Bug fixes:

• [api] Do not create observability model by default (#11476 by rtribotte)
• [fastproxy] Fix content-length header assertion (#11498 by kevinpollet)
• [fastproxy] Handle responses without content length header (#11458 by rtribotte)
• [k8s/crd,k8s] Add missing headerField in Middleware CRD (#11499 by jspdown)
• [tracing,accesslogs] Bring back TraceID and SpanID fields in access logs (#11450 by rtribotte)

Misc:

• Merge branch v2.11 into v3.3 (#11502 by rtribotte)
• Merge branch v2.11 into v3.3 (#11491 by rtribotte)

Bug fixes:

• [acme] Graceful shutdown for ACME JSON write operation (#11497 by juliens)

Documentation:

• Change docker-compose to docker compose (#11496 by khai-pi)

Bug fixes:

• [middleware] Changing log message when client cert is not available to debug (#11453 by Nelwhix)
• [service] Do not create a logger instance for each proxy (#11487 by kevinpollet)
• [webui] Fix auto refresh not clearing on component unmount (#11477 by DoubleREW)

Documentation:

• Remove awesome.traefik.io reference in documentation section (#11435 by kevinpollet)

Bug fixes:

• [fastproxy] Do not read response body for HEAD requests (#11442 by kevinpollet)
• [metrics,tracing,accesslogs] Fix observability configuration on EntryPoints (#11446 by rtribotte)
• [webui] Set content-type when serving webui index (#11428 by kevinpollet)

Documentation:

• [acme] Fix deprecated dnsChallenge propagation logging and documentation (#11433 by thomscode)
• [acme] Add missing trailing s to propagation.delayBeforeCheck option (#11417 by jspiers)

Misc:

• Merge branch v2.11 into v3.3 (#11419 by kevinpollet)

Bug fixes:

• [websocket,server] Disable http2 connect setting for websocket by default (#11408 by rtribotte)