Traefik has released v2.11.56, a patch version that addresses several bugs and brings a few notable enhancements. Users upgrading from any previous version are advised to consult the migration guide to ensure a smooth transition.
This release includes the following concrete changes:
- HTTP/3 improvements: The [http3] package now properly applies read timeout, idle timeout, and max header bytes settings to HTTP/3 connections (PR #13717). This aligns HTTP/3 behavior with HTTP/2, providing more predictable performance and security.
- Header aliasing option: A new entry point option has been added to handle request headers with aliasing names (PR #13720). This allows you to define multiple header names that map to the same internal value, which can be useful when migrating services that expect different header spellings.
- Weight validation: Negative weights in TCP and UDP weighted services are now rejected (PR #13749). This prevents misconfiguration that could lead to undefined behavior in load balancing.
- Dependency update: The etcd client modules have been bumped to v3.5.33 (PR #13756), incorporating upstream fixes and improvements.
For developers, the HTTP/3 timeouts are particularly important because they ensure that HTTP/3 clients are subject to the same resource limits as HTTP/2 clients, avoiding potential denial-of-service vectors. The header aliasing option adds flexibility in handling legacy clients or headers with inconsistent casing. Rejecting negative weights at configuration time helps catch errors early, reducing runtime surprises. The etcd bump keeps Traefik's service discovery integrations robust.
While these are bug fixes, they notably improve stability and configuration correctness. Test your configurations against the new validation rules and consider setting the new header aliasing option if you've used workarounds before.
Source: https://github.com/traefik/traefik/releases/tag/v2.11.56