-
feat(gateway): route features — aliases, upstream shaping, multi-upstream LB, headers/HSTS/compress, forward auth, redirect + TCP/UDP stream routes
Release / version (push) Canceled after 0sRelease / frontend (push) Canceled after 0sRelease / linux (amd64) (push) Canceled after 0sRelease / linux (arm64) (push) Canceled after 0sRelease / windows (push) Canceled after 0sRelease / macos (push) Canceled after 0sRelease / release (push) Canceled after 0sBuild and Push Docker Image / build-and-push (push) Canceled after 0sreleased this
2026-09-02 15:31:46 +03:00 - aliases: extra hostnames OR-ed into the rule (SANs on the same cert); conflicts checked across all hostnames
- upstream shaping (http): strip_prefix / add_prefix, host_header_mode client|upstream|custom (+ value),
target_server_name (SNI on the serversTransport) - several upstreams: extra_targets (host:port lines) → loadBalancer.servers, health_check_path/interval,
sticky cookie, retry_attempts - headers: request_headers / response_headers lines, security_headers preset, hsts (+subdomains, TLS only),
compress; one ns--headers middleware - forward_auth_url (+ response headers, trustForwardHeader, 1 MiB response cap) — SSO in front of a route
- mode=redirect: hostnames → redirect_url via redirectRegex on noop@internal (301/302, keep path), tls optional
- mode=stream: tcp|udp listen_port → target(s); enabled streams' ports become GatewayProvision.stream_ports →
per-port entrypoints published 1:1 (compose flags+ports, native traefik.yml), Traefik restarts on change - raft payload/applier carry the new fields; UI: route type select, aliases, upstream options, access control
forward auth, headers & compression sections, stream/redirect rows - verified: rendered full-feature config loads in traefik:v3.7 with every router/middleware/service enabled
Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com
Downloads