477 Commits

Author SHA1 Message Date
qwerty8811 2391520b50 Add optional X-Forwarded-Scheme and X-Scheme headers in forwarded headers middleware 2026-06-12 11:16:07 +02:00
kevinpollet cb9e8ab510 Merge branch v3.6 into v3.7 2026-06-10 16:16:05 +02:00
kevinpollet e53a37b869 Merge branch v2.11 into v3.6 2026-06-10 15:34:13 +02:00
Romain 0209f984eb Fix snicheck for routers with no hosts
Co-authored-by: Gina A. <70909035+gndz07@users.noreply.github.com>
2026-06-10 15:16:06 +02:00
Julien Salleyron 4ef4c09300 Fix routers with same host, different tlsoptions on different entryPoint
Co-authored-by: Romain <rtribotte@users.noreply.github.com>
2026-06-09 17:08:07 +02:00
kevinpollet 708aa38f36 Merge branch v3.6 into v3.7 2026-06-05 15:26:12 +02:00
kevinpollet 15c47f9cb4 Merge branch v2.11 into v3.6 2026-06-05 14:51:59 +02:00
Julien Salleyron b6bb80f8ff Fix snicheck with keepalive 2026-06-05 14:36:05 +02:00
romain 48ba249ba7 Merge branch v3.6 into v3.7 2026-06-04 14:06:26 +02:00
romain 4c71ee3d18 Merge branch v2.11 into v3.6 2026-06-04 11:00:28 +02:00
Romain a664812e9c Compute resolved tlsOptions after applying models
Co-authored-by: Gina A. <70909035+gndz07@users.noreply.github.com>
2026-06-04 10:16:05 +02:00
romain 4aa82efc76 Merge branch v3.6 into v3.7 2026-06-03 14:53:03 +02:00
romain d468a3e4d0 Merge branch v2.11 into v3.6 2026-06-03 09:14:04 +02:00
Julien Salleyron 5026ca97d0 Move snicheck to ctx instead of simulated routing 2026-05-28 10:30:07 +02:00
mmatur da808bda43 Merge branch v3.6 into v3.7 2026-04-22 11:27:30 +02:00
mmatur 4aea15feea Merge v2.11 into v3.6 2026-04-20 11:19:04 +02:00
Julien Salleyron 5e1de22584 Fix trustForwardHeader on forward auth middleware 2026-04-17 15:42:05 +02:00
Michael 211ec53661 Restore default cipher suites when serversTransport has no explicit cipherSuites 2026-04-17 10:40:06 +02:00
Michael eb22d72b48 Resolve NGINX variables in ingress-nginx upstream-vhost annotation 2026-04-16 12:14:10 +02:00
Murat Aslan 091d13b5e4 Make SameSite cookie value case-insensitive 2026-04-09 17:10:13 +02:00
Romain 64495e424c Add Kubernetes Ingress logs fields
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2026-04-07 11:23:10 +02:00
holomekc 8b17fc1667 Add certificates menu and overview 2026-04-07 10:10:05 +02:00
Julien Salleyron 9d9f0d465d Add providers routing precedence configuration
Co-authored-by: Mathis Urien <contact.lbf38@gmail.com>
2026-04-02 09:08:05 +02:00
Julien Salleyron ea92a3e150 Add wildcard host in Host and HostSNI matchers 2026-03-31 16:14:06 +02:00
kevinpollet b4aa35e0fb Merge branch v3.6 into v3.7 2026-03-26 11:19:51 +01:00
Michael 30d5258c75 Fix postgres STARTTLS with TLS termination 2026-03-24 11:18:05 +01:00
Harold Ozouf 6c7c056b28 Preserve health check status updater when service has middlewares 2026-03-19 14:16:07 +01:00
kevinpollet 86db5c2777 Merge branch v3.6 into v3.7 2026-03-19 11:29:37 +01:00
romain b1b520b186 Merge branch v2.11 into v3.6 2026-03-18 15:51:33 +01:00
Julien Salleyron a06eca2b99 Add support for auth-snippet
Co-authored-by: Mathis Urien <contact.lbf38@gmail.com>
2026-03-18 09:06:05 +01:00
Romain 832f48d9bf Support fragmented TLS client hello
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2026-03-11 13:56:06 -03:00
Nándor Kollár ee07a31ae3 Nginx x-forwarded-prefix annotation 2026-03-06 13:16:04 -03:00
mmatur efcc60fbdb Merge branch v3.6 into master 2026-03-06 16:13:25 +01:00
Jesper Noordsij c7d5507462 Use modern WaitGroup.Go function in additional places 2026-03-06 11:22:06 -03:00
LBF38 b643cd1508 Add support for upstream-hash-by NGINX annotation 2026-03-04 11:10:05 -03:00
Julien Salleyron d680fef7f1 Implement server-snippet and configuration-snippet annotations
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2026-03-04 06:24:05 -03:00
Mathieu Parent 734cc21fb4 Remove unused context import from test file 2026-03-03 05:26:04 -03:00
LBF38 b9525e53a8 Add support for proxy-read-timeout and proxy-send-timeout NGINX annotations
Co-authored-by: Romain Tribotte <rtribotte@users.noreply.github.com>
2026-02-24 14:38:05 +01:00
Gina A. 0664dadfbd Support auth-tls-pass-certificate-to-upstream annotation 2026-02-24 11:34:05 +01:00
mmatur ff1a6786cd Merge branch v3.6 into master 2026-02-23 19:24:54 +01:00
mmatur 13dc9a6892 Merge v2.11 into v3.6 2026-02-23 17:34:52 +01:00
Julien Salleyron 7a3ffcc3d9 Fix TLS handshake error handling 2026-02-23 14:06:05 +01:00
kevinpollet f0da74e641 Merge branch v3.6 into master 2026-02-13 16:04:04 +01:00
mmatur a28da8a226 Merge v2.11 into v3.6 2026-02-11 14:45:21 +01:00
Romain 31e566e9f1 Remove conn deadline after STARTTLS negociation
Co-authored-by: Michael <michael.matur@gmail.com>
2026-02-11 09:48:05 +01:00
Michael 72e2454e42 Cap TLS record length to RFC 8446 limit in ClientHello peeking 2026-02-11 09:22:04 +01:00
Romain 0beed101ec Validate healthcheck path configuration
Co-authored-by: Michael <michael.matur@gmail.com>
2026-02-10 14:52:05 +01:00
mmatur 4a4be524bb Merge v3.6 into master 2026-02-10 09:07:34 +01:00
Landry Benguigui 34ae66b9ab Failover according to response status code
Co-authored-by: juliens <julien.salleyron@gmail.com>
2026-02-09 14:10:06 +01:00
mmatur f2b68f29a1 Merge v2.11 into v3.6 2026-02-02 05:33:16 +01:00