Traefik v2.11.53 is now available, focusing on bug fixes for CONNECT request handling and Kubernetes CRD completeness. This release includes important changes for developers managing TCP tunnels or using Traefik with Kubernetes.
Concrete Changes
- Kubernetes CRD fix: Added missing
ErrorRequestHeadersfield to CRDs for the middleware. Previously, custom error response headers were not propagated when usingk8s/crdproviders. (PR #13498, @kevinpollet) - Deferred CONNECT payload: The
CONNECTrequest payload is now deferred until the backend accepts the tunnel. This prevents data loss when the backend is slow to establish the tunnel. (PR #13542, @sdelicata) - gRPC bump: Upgraded
google.golang.org/grpcto v1.82.1 for improved stability and security. (PR #13551, @piscue) - Pool removal fix: CONNECT requests are no longer added back to the connection pool after tunnel closure, preventing stale connections. (PR #13556, @kevinpollet)
- Migration note: Added documentation to the migration guide explaining the CONNECT request behavior changes. (PR #13554, @kevinpollet)
Why This Matters
If you use Traefik as a reverse proxy for TCP tunnels, the CONNECT fixes ensure more reliable tunnel establishment and resource cleanup. The CRD addition improves custom error handling for Kubernetes deployments. Upgrading is recommended to avoid potential data corruption or connection leaks.
Source: https://github.com/traefik/traefik/releases/tag/v2.11.53