Commit Graph

1290 Commits

Author SHA1 Message Date
Romain f9fbcfbb42 Send proxy protocol header before TLS handshake
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2025-08-29 12:30:04 +02:00
romain 3f1b5216f0 Merge branch v2.11 into v3.5 2025-08-27 09:40:51 +02:00
Romain 4ff8eca572 Fix Swarm unit test for the nodeIP property 2025-08-27 09:40:05 +02:00
romain c2db9db1aa Merge branch v2.11 into v3.5 2025-08-26 17:35:37 +02:00
Maurus Cuelenaere 90702d93ab Fix HTTP headers not being canonicalized in tracing 2025-08-26 15:55:05 +02:00
Alex Waring fcae39bf13 Follow OTel semantic conventions for root span naming 2025-08-22 16:45:04 +02:00
Nicolas fd8a64ca95 Errors on receving sigterm 2025-08-22 11:30:09 +02:00
cui 86422af988 Refactor to use reflect.TypeFor 2025-08-21 16:10:07 +02:00
shreealt 3b33ffa245 Make app protocol case insensitive 2025-08-20 16:00:08 +02:00
Kevin Pollet 5cc2a8344c Bump github.com/docker/docker to v28.3.3 2025-08-20 15:52:06 +02:00
Ludovic Fernandez c820d18ada Bump github.com/go-acme/lego/v4 to v4.25.2 2025-08-11 14:44:05 +02:00
Tom Moulard 5d85e6d088 Provide Log Body in OTEL access Log 2025-07-24 11:52:04 +02:00
Ludovic Fernandez c0edcc09bb Bump github.com/go-acme/lego/v4 to v4.25.1 2025-07-24 09:54:05 +02:00
romain 2dcc1c16b7 Merge branch v3.4 into v3.5 2025-07-23 14:38:33 +02:00
romain 6486cf95d8 Merge branch v2.11 into v3.4 2025-07-22 16:11:58 +02:00
Jesper Noordsij 50931813f2 Remove all mentions of ordering for TLSOption CurvePreferences field 2025-07-22 15:44:05 +02:00
Zeroday BYTE 5ef853a0c5 Fix client arbitrary file access during archive extraction zipslip 2025-07-22 14:24:05 +02:00
Romain b2b4b66b08 Disable MPTCP by default
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2025-07-22 11:10:05 +02:00
Kevin Pollet 78cc85283c Add k8s resource attributes automatically
Co-authored-by: Romain <rtribotte@users.noreply.github.com>
2025-07-21 12:06:04 +02:00
Kevin Pollet 7b78128d4e Add resourceAttributes option to OTel metrics
Co-authored-by: Romain <rtribotte@users.noreply.github.com>
2025-07-18 17:08:04 +02:00
Romain 8c23eb6833 Introduce trace verbosity config and produce less spans by default 2025-07-18 15:32:05 +02:00
kevinpollet ff992fb7f9 Merge branch v3.4 into v3.5 2025-07-11 10:29:18 +02:00
Kevin Pollet ba595bfa98 Fix concurrent access to balancer status map in WRR and P2C strategies 2025-07-10 16:08:04 +02:00
Simon Delicata cdacf0bca8 Respect service.nativelb=false annotation when nativeLBByDefault is enabled 2025-07-08 11:58:04 +02:00
Romain 91331415ce Add missing resource attributes detectors 2025-07-07 15:36:04 +02:00
Romain 9862cd6780 Prepare release v3.5.0-rc1 2025-06-26 16:44:04 +02:00
romain cbfecc5d49 Merge branch v3.4 into master 2025-06-25 11:14:51 +02:00
Romain 9bd5c61782 NGINX Ingress Provider
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2025-06-23 18:06:04 +02:00
romain 74eafcd044 Merge branch v2.11 into v3.4 2025-06-11 10:03:28 +02:00
Romain b0d8e08e2b Fix typo in redirect middleware documentation 2025-06-11 09:46:05 +02:00
Alessandro Chitolina b39ee8ede5 OCSP stapling 2025-06-06 17:44:04 +02:00
Ben 2949995abc Handle context canceled in ForwardAuth middleware 2025-06-04 15:38:04 +02:00
Kevin Pollet ae79d4e5f0 Do not log redis sentinel username and password 2025-06-04 12:08:04 +02:00
Zoltán Farkas bf72b9768c Introduce X25519MLKEM768 for Post-Quantum-Secure TLS 2025-06-03 11:44:05 +02:00
kevinpollet 289d6e5dca Merge branch v3.4 into master 2025-06-02 17:01:46 +02:00
romain bd4bfd8919 Merge branch v2.11 into v3.4 2025-06-02 15:50:06 +02:00
Romain 2fdee25bb3 Attempt to fix TestProxyFromEnvironment test
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2025-06-02 10:46:04 +02:00
Kevin Pollet cd16321dd9 Bump to go1.24
Co-authored-by: Romain <rtribotte@users.noreply.github.com>
2025-06-02 10:36:05 +02:00
Kevin Pollet 859f4e8868 Use routing path in v3 matchers
Co-authored-by: Romain <rtribotte@users.noreply.github.com>
2025-05-27 11:06:05 +02:00
Julien Salleyron fa18c35a9a Refactor new muxer to have only one parser instance 2025-05-26 17:12:08 +02:00
kevinpollet be0b54bade Merge branch v2.11 into v3.4 2025-05-23 16:16:18 +02:00
aromeyer ab3234e458 Scope the rate limit counter key by source AND by middleware 2025-05-23 15:38:04 +02:00
Kevin Pollet 08d5dfee01 Normalize request path
Co-authored-by: Romain <rtribotte@users.noreply.github.com>
2025-05-23 15:10:05 +02:00
Romain b669981018 Fix panic for ingress with backend resource
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2025-05-23 14:56:05 +02:00
Romain 76153acac6 Fix CEL validation for RootCA in ServersTransport
Co-authored-by: Kevin Pollet <pollet.kevin@gmail.com>
2025-05-23 11:34:05 +02:00
Charlie Chiang 4790e4910f Make the behavior of prefix matching in Ingress consistent with Kubernetes doc 2025-05-20 14:40:05 +02:00
Landry Benguigui 3deea566ac Make P2C strategy thread-safe 2025-05-19 09:52:05 +02:00
Patrick Evans 79fde2b6dd Do not warn network missing if connected to a container network 2025-05-19 09:26:09 +02:00
mmatur 8c6ed23c5f Merge branch v3.4 into master 2025-05-14 09:55:58 +02:00
Michael 3ee316c5bb Fix incorrect case and missing rbac in documentation 2025-05-13 11:04:05 +02:00