Traefik, a well-known name in cloud-native open-source proxies, released version 3.5, “Chabichou,” bringing a mix of migration tools, a sleek new dashboard, and next-gen security features.
Release’s highlight is the brand-new experimental Ingress NGINX Provider. With ingress-nginx shifting into maintenance mode and its successor, InGate, Traefik steps in with a timely solution. The new provider enables teams to migrate from ingress-nginx without operational headaches—no need to rewrite manifests or retrain staff.
However, keep in mind that it doesn’t aim for 100% NGINX annotation compatibility. Instead, it covers the most common use cases, providing teams with a drop-in replacement while leaving room to adopt modern standards, such as the Gateway API, gradually.
The other notable change is that Traefik’s dashboard has undergone a full-scale makeover, now powered by React. The new dashboard is sleek, intuitive, and responsive, enhancing both usability and the development experience.
On the Kubernetes front, this update brings full support for Gateway API v1.3. Regarding security, Traefik 3.5 introduces post-quantum cryptography with X25519MLKEM768, safeguarding communications against emerging quantum threats.
Certificate management also receives a boost, with enhanced ACME capabilities such as OCSP Stapling support, HTTP Challenge Delay Configuration, and refined HTTP timeout settings.
Additional refinements include sophisticated health monitoring with customizable unhealthy intervals, improved Kubernetes prefix matching consistency, and middleware enhancements that offer better context handling and error visualization. Lastly, plugin developers also get new tools to manage operations safely.
Check out the release announcement or look at the changelog for the full list of all novelties in Traefik 3.5 Proxy.
