• feat(gateway): route features — aliases, upstream shaping, multi-upstream LB, headers/HSTS/compress, forward auth, redirect + TCP/UDP stream routes
    Release / version (push) Canceled after 0s
    Release / frontend (push) Canceled after 0s
    Release / linux (amd64) (push) Canceled after 0s
    Release / linux (arm64) (push) Canceled after 0s
    Release / windows (push) Canceled after 0s
    Release / macos (push) Canceled after 0s
    Release / release (push) Canceled after 0s
    Build and Push Docker Image / build-and-push (push) Canceled after 0s

    LastSkywalker released this 2026-09-02 15:31:46 +03:00

    • aliases: extra hostnames OR-ed into the rule (SANs on the same cert); conflicts checked across all hostnames
    • upstream shaping (http): strip_prefix / add_prefix, host_header_mode client|upstream|custom (+ value),
      target_server_name (SNI on the serversTransport)
    • several upstreams: extra_targets (host:port lines) → loadBalancer.servers, health_check_path/interval,
      sticky cookie, retry_attempts
    • headers: request_headers / response_headers lines, security_headers preset, hsts (+subdomains, TLS only),
      compress; one ns--headers middleware
    • forward_auth_url (+ response headers, trustForwardHeader, 1 MiB response cap) — SSO in front of a route
    • mode=redirect: hostnames → redirect_url via redirectRegex on noop@internal (301/302, keep path), tls optional
    • mode=stream: tcp|udp listen_port → target(s); enabled streams' ports become GatewayProvision.stream_ports →
      per-port entrypoints published 1:1 (compose flags+ports, native traefik.yml), Traefik restarts on change
    • raft payload/applier carry the new fields; UI: route type select, aliases, upstream options, access control
      forward auth, headers & compression sections, stream/redirect rows
    • verified: rendered full-feature config loads in traefik:v3.7 with every router/middleware/service enabled

    Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com

    Downloads