Traefik Proxy v3.7 "Langres" is out: ingress-nginx drop-in, 80+ annotations, Gateway API v1.5, and more

Traefik Proxy 3.7, codenamed "Langres", is now generally available.

This is the biggest release we've shipped this year: 283 PRs merged, contributions from over 80 community members, and the most consequential step yet in our work to make the ingress-nginx migration a non-event.

Highlights

  • ingress-nginx provider out of experimental. 80+ NGINX annotations natively supported, covering more than 90% of real-world usage patterns. Snippets included (parsed against a curated allowlist, safe by design). Details in the release blog post.
  • Middlewares on services. Attach forwardAuth, rate limits, and other middlewares directly to a Service definition. Less duplication, cleaner semantics. (#12544)
  • Full Gateway API v1.5.1 support. Multiple certificateRefs on Gateway listeners, secret support for BackendTLSPolicy.caCertificateRefs, and Gateway API filters on HTTP backends. (Kubernetes v1.5 announcement)
  • Retries and failover driven by HTTP status codes. The Retry middleware and Failover service now react to 502/503/504 responses, not just connection failures. Real production resilience.
  • TLS Certificates view in the dashboard. A long-requested feature, contributed by @holomekc. See every cert in use, its domains, expiration, and where it's attached.

Several security advisories were also addressed across the v3.7 cycle. The full list is on the Security Advisories page.

ingress-nginx migration series

For teams running ingress-nginx, v3.7 ships alongside a 3-part migration guide:

  1. Audit your cluster: ingress-nginx Migration: Measure Twice, Cut Once
  2. Install Traefik side by side: Two Controllers, One Cluster: The Safest Way to Migrate from ingress-nginx to Traefik (publishing this week)
  3. Progressive migration: coming next week

Get it

Thank you

This release belongs to the community. Whether you opened an issue, reviewed a PR, sent us migration data through the audit tool, contributed an annotation, or shared a production war story, thank you.

Want to add yours to v3.8? The tracking issue traefik/traefik#12631 lists the remaining ingress-nginx annotations and is a great on-ramp for first-time contributors. Contributions are welcome across the entire codebase, on any topic.

Happy routing :rocket: