traefik

Bug fixes:

• [middleware,oxy] Update vulcand/oxy to be5cf38 (#9874 by rtribotte)

Documentation:

• Fix v2.10 migration guide (#9863 by rtribotte)

Note: For Kubernetes users, the migration to Traefik v2.10 requires updating the CRDs and the RBAC in the cluster before upgrading Traefik. More information in the migration guide.

Enhancements:

• [docker] Expose ContainerName in Docker provider (#9770 by quinot)
• [hub] Remove hub configuration out of experimental (#9792 by mpl)
• [k8s/crd] Introduce traefik.io API Group CRDs (#9765 by rtribotte)
• [k8s/ingress,k8s/crd,k8s] Native Kubernetes service load-balancing (#9740 by rtribotte)
• [middleware,metrics] Add prometheus metric requests_total with headers (#9783 by rtribotte)
• [nomad] Support multiple namespaces in the Nomad Provider (#9794 by rtribotte)
• [tracing] Add support to send DataDog traces via Unix Socket (#9714 by der-eismann)
• [webui] Modify the Hub Button (#9851 by mdeliatf)
• [webui] Display period setting of the RateLimit middleware in the webui (#9822 by smatyas)

Bug fixes:

• [docker] Only warn about missing docker network when network_mode is not host or container (#9799 by sentriz)
• [k8s/ingress,k8s] Bump k8s.io/client-go from v0.22.1 to v0.26.3 (#9808 by ldez)
• [plugins] Improve DeepCopy of PluginConf (#9846 by ldez)
• [plugins] Update Yaegi to v0.15.1 (#9815 by ldez)
• [server] Update vulcand/oxy to 03de175b3822 (#9849 by longit644)

Documentation:

• Prepare release v2.10.0-rc1 (#9802 by ldez)
• Fix order of log levels (#9791 by svx)
• [docker] Update wording - add link descriptions (#9816 by svx)
• [middleware] Add accessControlAllowHeaders example (#9810 by yingshaoxo)
• [tls] More details on Kubernetes options for mTLS (#9835 by mloiseleur)
• Prepare release v2.10.0-rc2 (#9830 by mpl)
• Update Call To Actions (#9824 by svx)
• Improve concepts page (#9813 by svx)
• Update wording (#9811 by svx)

Misc:

• Merge branch v2.9 into v2.10 (#9798 by ldez)
• Merge branch v2.9 into v2.10 (#9829 by mpl)

CVE-2023-29013
Related to CVE-2023-24534

v2.10.0-rc2 (2023-04-07)

All Commits

Enhancements:

• [webui] Display period setting of the RateLimit middleware in the webui (#9822 by smatyas)

Bug fixes:

• [docker] Only warn about missing docker network when network_mode is not host or container (#9799 by sentriz)
• [k8s/ingress,k8s] chore: bump k8s.io/client-go from v0.22.1 to v0.26.3 (#9808 by ldez)
• [plugins] Update Yaegi to v0.15.1 (#9815 by ldez)

Documentation:

• [docker] Update wording - add link descriptions (#9816 by svx)
• [middleware] Add accessControlAllowHeaders example (#9810 by yingshaoxo)
• Update Call To Actions (#9824 by svx)
• Improve concepts page (#9813 by svx)
• Update wording (#9811 by svx)

CVE-2023-29013
Related to CVE-2023-24534

Enhancements:

• [docker] Expose ContainerName in Docker provider (#9770 by quinot)
• [hub] hub: get out of experimental. (#9792 by mpl)
• [k8s/crd] Introduce traefik.io API Group CRDs (#9765 by rtribotte)
• [k8s/ingress,k8s/crd,k8s] Native Kubernetes service load-balancing (#9740 by rtribotte)
• [middleware,metrics] Add prometheus metric requests_total with headers (#9783 by rtribotte)
• [nomad] Support multiple namespaces in the Nomad Provider (#9794 by rtribotte)
• [tracing] Add support to send DataDog traces via Unix Socket (#9714 by der-eismann)

Documentation:

• docs: update order of log levels (#9791 by svx)

Misc:

• Merge current v2.9 into v2.10 (#9798 by ldez)

Bug fixes:

• [acme] Update go-acme/lego to v4.10.2 (#9749 by ldez)
• [http3] Update quic-go to v0.33.0 (#9737 by ldez)
• [metrics] Include user-defined default cert for traefik_tls_certs_not_after metric (#9742 by rtribotte)
• [middleware] Update vulcand/oxy to a0e9f7ff1040 (#9750 by ldez)
• [nomad] Fix default configuration settings for Nomad Provider (#9758 by aofei)
• [nomad] Fix Nomad client TLS defaults (#9795 by rtribotte)
• [server] Remove User-Agent header removal from ReverseProxy director func (#9752 by rtribotte)

Documentation:

• [middleware] Clarify ratelimit middleware (#9777 by mpl)
• [tcp] Correcting variable name 'server address' in TCP Router (#9743 by ralphg6)

Bug fixes:

• [server] Update golang.org/x/net to v0.7.0 (#9716 by ldez)

fix CVE-2022-41724

Bug fixes:

• [acme] Update go-acme/lego to v4.10.0 (#9705 by ldez)
• [ecs] Prevent panicking when a container has no network interfaces (#9661 by rtribotte)
• [file] Make file provider more resilient wrt first configuration (#9595 by mpl)
• [logs] Differentiate UDP stream and TCP connection in logs (#9687 by rtribotte)
• [middleware] Prevent from no rate limiting when average is zero (#9621 by witalisoft)
• [middleware] Prevents superfluous WriteHeader call in the error middleware (#9620 by tomMoulard)
• [middleware] Sanitize X-Forwarded-Proto header in RedirectScheme middleware (#9598 by ldez)
• [plugins] Update paerser to v0.2.0 (#9671 by ldez)
• [plugins] Update Yaegi to v0.15.0 (#9700 by ldez)
• [tls,http3] Bump quic-go to 89769f409f (#9685 by mpl)
• [tls,tcp] Adds the support for IPv6 in the TCP HostSNI matcher (#9692 by rtribotte)

Documentation:

• [acme] Add CNAME support and gotchas (#9698 by mpl)
• [acme] Further Let's Encrypt ratelimit warnings (#9627 by hcooper)
• [k8s] Add info admonition about routing to k8 services (#9645 by svx)
• [k8s] Improve TLSStore CRD documentation (#9579 by mloiseleur)
• [middleware] doc: add note about remoteaddr strategy (#9701 by mpl)
• Update copyright to match new standard (#9651 by paulocfjunior)
• Update copyright for 2023 (#9631 by kevinpollet)
• Update submitting pull requests to include language about drafts (#9609 by tfny)

Enhancements:

• [http3] Moves HTTP/3 outside the experimental section (#9570 by @sdelicata)

Bug fixes:

• [logs] Change traefik cmd error log to error level (#9569 by @tomMoulard)
• [rules] Rework Host and HostRegexp matchers (#9559 by @tomMoulard)

Misc:

• Merge current v2.9 into master (#9586 by @tomMoulard)

CVEs:

• https://www.cve.org/CVERecord?id=CVE-2022-23469
• https://www.cve.org/CVERecord?id=CVE-2022-46153
• https://www.cve.org/CVERecord?id=CVE-2022-41717

Bug fixes:

• [acme] Update go-acme/lego to v4.9.1 (#9550 by @ldez)
• [k8s/crd] Support of allowEmptyServices in TraefikService (#9424 by @jeromeguiard)
• [logs] Remove logs of the request (#9574 by @ldez)
• [plugins] Increase the timeout on plugin download (#9529 by @ldez)
• [server] Update golang.org/x/net (#9582 by @ldez)
• [tls] Handle broken TLS conf better (#9572 by @mpl)
• [tracing] Update DataDog tracing dependency to v1.43.1 (#9526 by @rtribotte)
• [webui] Add missing serialNumber passTLSClientCert option to middleware panel (#9539 by @rtribotte)

Documentation:

• [docker] Add networking example (#9542 by @Janik)
• [hub] Add information about the Hub Agent (#9560 by @nmengin)
• [k8s/helm] Update Helm installation section (#9564 by @mloiseleur)
• [middleware] Clarify PathPrefix matcher greediness (#9519 by @mpl)

Enhancements:

• [ecs] Add option to keep only healthy ECS tasks (#8027 by @Michampt)
• [healthcheck] Support gRPC healthcheck (#8583 by @jjacque)
• [healthcheck] Add a status option to the service health check (#9463 by @guoard)
• [http] Support custom headers when fetching configuration through HTTP (#9421 by @kevinpollet)
• [logs,performance] New logger for the Traefik logs (#9515 by @ldez)
• [logs,plugins] Retry on plugin API calls (#9530 by @ldez)
• [logs,provider] Improve provider logs (#9562 by @ldez)
• [logs] Improve test logger assertions (#9533 by @ldez)
• [metrics] Support gRPC and gRPC-Web protocol in metrics (#9483 by @longit644)
• [middleware,accesslogs] Log TLS client subject (#9285 by @xmessi)
• [middleware,metrics,tracing] Add OpenTelemetry tracing and metrics support (#8999 by @tomMoulard)
• [middleware] Disable Content-Type auto-detection by default (#9546 by @sdelicata)
• [middleware] Add gRPC-Web middleware (#9451 by @juliens)
• [middleware] Add support for Brotli (#9387 by @glinton)
• [middleware] Renaming IPWhiteList to IPAllowList (#9457 by @wxmbugu)
• [nomad] Support multiple namespaces in the Nomad Provider (#9332 by @0teh)
• [rules] Update routing syntax (#9531 by @skwair)
• [server] Rework servers load-balancer to use the WRR (#9431 by @juliens)
• [server] Allow default entrypoints definition (#9100 by @jilleJr)
• [tls,service] Support SPIFFE mTLS between Traefik and Backend servers (#9394 by @jlevesy)
• [tls] Add Tailscale certificate resolver (#9237 by @kevinpollet)
• [tls] Support SNI routing with Postgres STARTTLS connections (#9377 by @rtribotte)
• Remove deprecated options (#9527 by @sdelicata)

Bug fixes:

• [logs] Fix log level (#9545 by @ldez)
• [metrics] Fix ServerUp metric (#9534 by @kevinpollet)
• [tls,service] Enforce default servers transport SPIFFE config (#9444 by @jlevesy)

Documentation:

• [metrics] Update and publish official Grafana Dashboard (#9493 by @mloiseleur)

Misc:

• Merge branch v2.9 into master (#9554 by @ldez)
• Merge branch v2.9 into master (#9536 by @ldez)
• Merge branch v2.9 into master (#9532 by @ldez)
• Merge branch v2.9 into master (#9482 by @kevinpollet)
• Merge branch v2.9 into master (#9464 by @ldez)
• Merge branch v2.9 into master (#9449 by @kevinpollet)
• Merge branch v2.9 into master (#9419 by @kevinpollet)
• Merge branch v2.9 into master (#9351 by @rtribotte)

Bug fixes:

• [logs,middleware] Create a new capture instance for each incoming request (#9510 by sdelicata)

Documentation:

• [k8s/helm] Update helm repository (#9506 by charlie-haley)
• Enhance wording of building-testing page (#9509 by svx)
• Add link descriptions and update wording (#9507 by svx)
• Removes the experimental tag on the Traefik Hub header (#9498 by tfny)

Bug fixes:

• [acme] Update go-acme/lego to v4.9.0 (#9413 by tony-defa)
• [kv,redis] Fix Redis configuration type (#9435 by ldez)
• [logs,middleware,metrics] Handle capture on redefined http.responseWriters (#9440 by rtribotte)
• [middleware,k8s] Remove raw cert escape in PassTLSClientCert middleware (#9412 by rtribotte)
• [plugins] Update Yaegi to v0.14.3 (#9468 by ldez)
• Remove side effect on default transport tests (#9460 by sdelicata)

Documentation:

• [k8s] Fix links to gateway API guides (#9445 by kevinpollet)
• Simplify dashboard rule example (#9454 by sosoba)
• Add v2.9 to release page (#9438 by kevinpollet)

Enhancements:

• [acme,tls] ACME Default Certificate (#9189 by rtribotte)
• [consul,etcd,zk,kv,redis] Update valkeyrie to v1.0.0 (#9316 by ldez)
• [consulcatalog,nomad] Support Nomad canary deployment (#9216 by rtribotte)
• [consulcatalog] Move consulcatalog provider to only use health apis (#9140 by kevinpollet)
• [docker] Add support for reaching containers using host networking on Podman (#9190 by freundTech)
• [docker] Use IPv6 address (#9183 by tomMoulard)
• [docker] Add allowEmptyServices for Docker provider (#8690 by jvasseur)
• [ecs] Add support for ECS Anywhere (#9324 by tuxpower)
• [healthcheck] Add a method option to the service Health Check (#9165 by ddtmachado)
• [http3] Upgrade quic-go to v0.28.0 (#9187 by tomMoulard)
• [http] Start polling HTTP provider at the beginning (#9116 by moutoum)
• [k8s/crd,plugins] Load plugin configuration field value from Kubernetes Secret (#9103 by rtribotte)
• [logs,tcp] Quiet down TCP RST packet error on read operation (#9007 by rtribotte)
• [metrics] Add traffic size metrics (#9208 by tomMoulard)
• [middleware,pilot] Remove Pilot support (#9330 by ldez)
• [rules,tcp] Support ALPN for TCP + TLS routers (#8913 by sh7dm)
• [tcp,service,udp] Make the loadbalancers servers order random (#9037 by qmloong)
• [tls] Change default TLS options for more security (#8951 by ddtmachado)
• [tracing] Add Datadog GlobalTags support (#9266 by sdelicata)

Bug fixes:

• [acme] Fix ACME panic (#9365 by ldez)

Documentation:

• Prepare release v2.9.0 (#9409 by tomMoulard)
• [metrics] Rework metrics overview page (#9366 by ddtmachado)
• Prepare release v2.9.0-rc5 (#9402 by ldez)
• Prepare release v2.9.0-rc4 (#9372 by kevinpollet)
• Prepare release v2.9.0-rc3 (#9344 by kevinpollet)
• Prepare release v2.9.0-rc2 (6c2c561 by ldez)
• Prepare release v2.9.0-rc1 (#9334 by rtribotte)

Misc:

• Merge current v2.8 into v2.9 (#9400 by ldez)
• Merge current v2.8 into v2.9 (#9371 by ldez)
• Merge current v2.8 into v2.9 (#9367 by ldez)
• Merge current v2.8 into v2.9 (#9350 by ldez)
• Merge current v2.8 into v2.9 (#9343 by kevinpollet)
• Merge v2.8.5 into master (#9329 by rtribotte)
• Merge current v2.8 into master (#9291 by rtribotte)
• Merge current v2.8 into master (#9265 by kevinpollet)
• Merge current v2.8 into master (#9209 by kevinpollet)
• Merge current v2.8 into master (#9146 by kevinpollet)
• Merge current v2.8 into master (#9135 by kevinpollet)

Misc:

• Merge current v2.8 into v2.9 (#9400 by ldez)

Bug fixes:

• [server] Update golang.org/x/net to latest version (#9398 by tspearconquest)

Documentation:

• [docker] Fix watch option description for Docker provider (#9391 by bhuisgen)
• [ecs] Fix autoDiscoverClusters option documentation for ECS provider (#9392 by johnpekcan)
• [k8s] Improve documentation for publishedService and IP options (#9380 by samip5)

Bug fixes:

• [consulcatalog] Fix UDP loadbalancer tags not being used with Consul Catalog (#9357 by t3hchipmunk)
• [docker,rancher,ecs,provider] Simplify AddServer algorithm (#9358 by ldez)
• [plugins] Allow empty plugin configuration (#9338 by ldez)
• [rules] Fix query parameter matching with equal (#9369 by ldez)
• [server] Optimize websocket headers handling (#9360 by juliens)

Documentation:

• [ecs] Add documentation for ECS constraints option (#9354 by rtribotte)
• [k8s/gatewayapi] Fix link to RouteNamespaces (#9349 by ldez)
• Add documentation for json schema usage to validate config in the FAQ (#9340 by rtribotte)
• Add a note on case insensitive regex matching (#9322 by NEwa-05)

Bug fixes:

• [acme] Fix ACME panic (#9365 by ldez)

Documentation:

• [metrics] Rework metrics overview page (#9366 by ddtmachado)

Misc:

• Merge current v2.8 into v2.9 (#9371 by ldez)
• Merge current v2.8 into v2.9 (#9367 by ldez)
• Merge current v2.8 into v2.9 (#9350 by ldez)

Misc:

• Merge current v2.8 into v2.9 (#9343 by kevinpollet)

Enhancements:

• [acme,tls] ACME Default Certificate (#9189 by rtribotte)
• [consul,etcd,zk,kv,redis] Update valkeyrie to v1.0.0 (#9316 by ldez)
• [consulcatalog,nomad] Support Nomad canary deployment (#9216 by rtribotte)
• [consulcatalog] Move consulcatalog provider to only use health apis (#9140 by kevinpollet)
• [docker] Add support for reaching containers using host networking on Podman (#9190 by freundTech)
• [docker] Use IPv6 address (#9183 by tomMoulard)
• [docker] Add allowEmptyServices for Docker provider (#8690 by jvasseur)
• [ecs] Add support for ECS Anywhere (#9324 by tuxpower)
• [healthcheck] Add a method option to the service Health Check (#9165 by ddtmachado)
• [http3] Upgrade quic-go to v0.28.0 (#9187 by tomMoulard)
• [http] Start polling HTTP provider at the beginning (#9116 by moutoum)
• [k8s/crd,plugins] Load plugin configuration field value from Kubernetes Secret (#9103 by rtribotte)
• [logs,tcp] Quiet down TCP RST packet error on read operation (#9007 by rtribotte)
• [metrics] Add traffic size metrics (#9208 by tomMoulard)
• [middleware,pilot] Remove Pilot support (#9330 by ldez)
• [rules,tcp] Support ALPN for TCP + TLS routers (#8913 by sh7dm)
• [tcp,service,udp] Make the loadbalancers servers order random (#9037 by qmloong)
• [tls] Change default TLS options for more security (#8951 by ddtmachado)
• [tracing] Add Datadog GlobalTags support (#9266 by sdelicata)

Misc:

• Merge v2.8.5 into master (#9329 by rtribotte)
• Merge current v2.8 into master (#9291 by rtribotte)
• Merge current v2.8 into master (#9265 by kevinpollet)
• Merge current v2.8 into master (#9209 by kevinpollet)
• Merge current v2.8 into master (#9146 by kevinpollet)
• Merge current v2.8 into master (#9135 by kevinpollet)