Important: Please read the migration guide.

Bug fixes:

• [k8s/ingress,k8s] Fix HostRegexp config for rule syntax v2 (#11288 by kevinpollet)
• [logs] Change level of peeking first byte error log to DEBUG for Postgres (#11270 by rtribotte)
• [service,fastproxy] Fix case problem for websocket upgrade (#11246 by juliens)

Documentation:

• [acme,tls] Document how to use Certificates of cert-manager (#11053 by mloiseleur)
• [docker/swarm] Add tips about the use of docker in dynamic configuration for swarm provider (#11207 by webash)
• [middleware] Add Compress middleware to migration guide (#11229 by logica0419)

Misc:

• Merge branch v2.11 into v3.2 (#11290 by kevinpollet)
• Merge branch v2.11 into v3.2 (#11287 by rtribotte)
• Merge branch v2.11 into v3.2 (#11285 by juliens)
• Merge branch v2.11 into v3.2 (#11268 by kevinpollet)

Important: Please read the migration guide.

Bug fixes:

• [acme] Update go-acme/lego to v4.20.2 (#11263 by ldez)
• [logs,server] Change level of peeking first byte error log to DEBUG (#11254 by rtribotte)
• [middleware,server] Drop untrusted X-Forwarded-Prefix header (#11253 by rtribotte)
• [server] Apply keepalive config to h2c entrypoints (#11276 by davefu113)
• [service] Fix internal handlers ServiceBuilder composition (#11281 by juliens)

Documentation:

• [accesslogs] Update access-logs.md, add examples for accesslog.format (#11275 by bluepuma77)
• Fix the defaultRule CLI examples (#11282 by kevinpollet)
• Fix spelling, grammar, and rephrase sections for clarity in some documentation pages (#11280 by AntoineDeveloper)
• Fix absolute link in the migration guide (#11269 by kevinpollet)
• Add X-Forwarded-Prefix to the migration guide (#11267 by kevinpollet)
• Fix a small typo in entrypoints documentation (#11261 by quiode)
• Add a warning about environment variables casing for static configuration (#11226 by anchal00)
• Improve documentation on dashboard (#11220 by mloiseleur)

Important: Please read the migration guide.

Enhancements:

• [acme] Remove same email requirement for certresolvers (#11019 by Emrio)
• [acme] Add support for custom CA certificates by certificate resolver (#10816 by ldez)
• [acme] Add 30 day certificatesDuration step (#10970 by luker983)
• [docker] Support HTTP BasicAuth for docker and swarm endpoint (#10776 by 985492783)
• [k8s,k8s/gatewayapi] Add supported features to the Gateway API GatewayClass status (#11056 by rtribotte)
• [k8s,k8s/gatewayapi] Update sigs.k8s.io/gateway-api to v1.2.0-rc1 (#11124 by rtribotte)
• [k8s,k8s/gatewayapi] Add support for backend protocol selection in HTTP and GRPC routes (#11051 by rtribotte)
• [k8s,k8s/gatewayapi] Improve Kubernetes GatewayAPI TCPRoute and TLSRoute support (#11042 by rtribotte)
• [k8s,k8s/gatewayapi] Support HTTPRoute destination port matching (#11134 by kevinpollet)
• [k8s,k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.2.0-rc2 (#11131 by kevinpollet)
• [k8s,k8s/gatewayapi] Add support for Gateway API BackendTLSPolicies (#11009 by rtribotte)
• [k8s,k8s/gatewayapi] Support NativeLB option in GatewayAPI provider (#11147 by rtribotte)
• [k8s,k8s/gatewayapi] Support ResponseHeaderModifier filter (#10987 by kevinpollet)
• [k8s,k8s/gatewayapi] Support GRPC routes (#10975 by kevinpollet)
• [k8s,k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.2.0 (#11167 by rtribotte)
• [metrics,otel] Allow setting service.name for OTLP metrics (#10917 by cmartell-at-ocp)
• [middleware,accesslogs] Record trace id and EntryPoint span id into access log (#10921 by weijiany)
• [middleware,authentication] Support LogUserHeader with forwardAuth middleware (#10833 by GaleHuang)
• [middleware] Add encodings option to the compression middleware (#10943 by wollomatic)
• [middleware] Add support for ipv6 subnet in ipStrategy (#9747 by michal-kralik)
• [nomad] Support for watching instead of polling Nomad (#10997 by deverton-godaddy)
• [server,performance] Introduce a fast proxy mode to improve HTTP/1.1 performances with backends (#11122 by kevinpollet)
• [server] Configurable max request header size (#10995 by lucasrod16)
• [service] Add mirrorBody option to HTTP mirroring (#11032 by MatteoPaier)
• [service] Add an option to preserve server path (#11193 by mmatur)

Bug fixes:

• [k8s,k8s/gatewayapi] Ensuring Gateway API reflected Traefik resource name unicity (#11222 by rtribotte)
• [k8s,k8s/gatewayapi] Preserve GRPCRoute filters order (#11199 by kevinpollet)
• [k8s,k8s/gatewayapi] Support http and https appProtocol for Kubernetes Service (#11176 by WillDaSilva)
• [k8s,k8s/gatewayapi] Avoid updating Accepted status for routes matching no Gateways (#11170 by rtribotte)
• [k8s,k8s/gatewayapi] Do not update gateway status when not selected by a gateway class (#11169 by kevinpollet)
• [service] Detect and drop broken conns in the fastproxy pool (#11212 by kevinpollet)

Documentation:

• [k8s,k8s/gatewayapi] Document nativeLBByDefault annotation on Kubernetes Gateway provider (#11209 by mloiseleur)
• [k8s/crd,k8s] Detail CRD update with v3.2 in the migration guide (#11164 by mloiseleur)
• [k8s/gatewayapi] Add missing RBAC in the migration guide (#11189 by mloiseleur)
• [k8s] Fix instructions for downloading CRDs of Gateway API v1.2 (#11191 by mloiseleur)
• Prepare release v3.2.0-rc2 (#11182 by kevinpollet)
• Prepare Release v3.2.0-rc1 (#11154 by rtribotte)

Misc:

• Merge branch v3.1 into v3.2 (#11219 by kevinpollet)
• Merge branch v3.1 into v3.2 (#11181 by kevinpollet)
• Merge branch v3.1 into master (#11153 by kevinpollet)
• Merge branch v3.1 into master (#11110 by kevinpollet)
• Merge branch v3.1 into master (#11066 by mmatur)
• Merge branch v3.1 into master (#11047 by mmatur)
• Merge branch v3.1 into master (#10980 by kevinpollet)
• Merge branch v3.1 into master (#10952 by mmatur)
• Merge branch v3.1 into master (#10906 by rtribotte)

Bug fixes:

• [k8s,k8s/gatewayapi] Preserve HTTPRoute filters order (#11198 by kevinpollet)

Documentation:

• [k8s,k8s/gatewayapi] Fix broken links in Kubernetes Gateway provider page (#11188 by mloiseleur)

Misc:

• Merge branch v2.11 into v3.1 (#11232 by kevinpollet)
• Merge branch v2.11 into v3.1 (#11218 by kevinpollet)

Bug fixes:

• [middleware,service] Panic on aborted requests to properly close the connection (#11129 by tonybart1337)

Documentation:

• Update business callouts (#11217 by tomatokoolaid)

Important: Please read the migration guide.

Enhancements:

• [k8s,k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.2.0 (#11167 by rtribotte)

Bug fixes:

• [k8s,k8s/gatewayapi] Support http and https appProtocol for Kubernetes Service (#11176 by WillDaSilva)
• [k8s,k8s/gatewayapi] Avoid updating Accepted status for routes matching no Gateways (#11170 by rtribotte)
• [k8s,k8s/gatewayapi] Do not update gateway status when not selected by a gateway class (#11169 by kevinpollet)

Documentation:

• Detail CRD update with v3.2 in the migration guide (#11164 by mloiseleur)

Misc:

• Merge branch v3.1 into v3.2 (#11181 by kevinpollet)

Bug fixes:

• [middleware] Reuse compression writers (#11168 by michelheusschen)
• [middleware] Use correct default weight in Accept-Encoding (#11084 by michelheusschen)
• [plugins] Close wasm middleware to prevent memory leak (#11151 by ttys3)

Misc:

• Merge branch v2.11 into v3.1 (#11179 by kevinpollet)
• Merge branch v2.11 into v3.1 (#11174 by mmatur)

Bug fixes:

• [middleware] Bump github.com/klauspost/compress to dbd6c381492a (#11162 by kevinpollet)
• [webui] Upgrade to node 22.9 and yarn lock to fix vulnerabilities (#11173 by kevinpollet)
• [webui] Adopt a layout for the large amount of entrypoint port numbers (#11157 by framebassman)

Documentation:

• [accesslogs] Clarify that only header fields may be redacted in access-logs (#11139 by mattbnz)
• Update business callout (#11172 by tomatokoolaid)

Important: Please read the migration guide.

Enhancements:

• [acme] Remove same email requirement for certresolvers (#11019 by Emrio)
• [acme] Add support for custom CA certificates by certificate resolver (#10816 by ldez)
• [acme] Add 30 day certificatesDuration step (#10970 by luker983)
• [docker] Support HTTP BasicAuth for docker and swarm endpoint (#10776 by 985492783)
• [k8s,k8s/gatewayapi] Add supported features to the Gateway API GatewayClass status (#11056 by rtribotte)
• [k8s,k8s/gatewayapi] Update sigs.k8s.io/gateway-api to v1.2.0-rc1 (#11124 by rtribotte)
• [k8s,k8s/gatewayapi] Add support for backend protocol selection in HTTP and GRPC routes (#11051 by rtribotte)
• [k8s,k8s/gatewayapi] Improve Kubernetes GatewayAPI TCPRoute and TLSRoute support (#11042 by rtribotte)
• [k8s,k8s/gatewayapi] Support HTTPRoute destination port matching (#11134 by kevinpollet)
• [k8s,k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.2.0-rc2 (#11131 by kevinpollet)
• [k8s,k8s/gatewayapi] Add support for Gateway API BackendTLSPolicies (#11009 by rtribotte)
• [k8s,k8s/gatewayapi] Support NativeLB option in GatewayAPI provider (#11147 by rtribotte)
• [k8s,k8s/gatewayapi] Support ResponseHeaderModifier filter (#10987 by kevinpollet)
• [k8s,k8s/gatewayapi] Support GRPC routes (#10975 by kevinpollet)
• [metrics,otel] Allow setting service.name for OTLP metrics (#10917 by cmartell-at-ocp)
• [middleware,accesslogs] Record trace id and EntryPoint span id into access log (#10921 by weijiany)
• [middleware,authentication] Support LogUserHeader with forwardAuth middleware (#10833 by GaleHuang)
• [middleware] Add encodings option to the compression middleware (#10943 by wollomatic)
• [middleware] Add support for ipv6 subnet in ipStrategy (#9747 by michal-kralik)
• [nomad] Support for watching instead of polling Nomad (#10997 by deverton-godaddy)
• [server,performance] Introduce a fast proxy mode to improve HTTP/1.1 performances with backends (#11122 by kevinpollet)
• [server] Configurable max request header size (#10995 by lucasrod16)
• [service] Add mirrorBody option to HTTP mirroring (#11032 by MatteoPaier)

Bug fixes:

• [k8s/ingress,k8s] Disable IngressClass lookup when disableClusterScopeResources is enabled (#11111 by jnoordsij)
• [server] Rework condition to not log on timeout (#11132 by rtribotte)

Misc:

• Merge branch v2.11 into v3.1 (#11149 by kevinpollet)
• Merge branch v2.11 into v3.1 (#11142 by rtribotte)