Commit graph

234 commits

Author SHA1 Message Date
romain f81ceaef8a Merge current v2.5 into master 2021-08-30 14:51:57 +02:00
Julien Salleyron fa53f7ec85
Conditional CloseNotify in header middleware 2021-08-19 18:02:07 +02:00
romain 2bd60f9e60 Merge current v2.4 into v2.5 2021-08-17 10:05:22 +02:00
Tristan Colgate-McFarlane e73dd31619
redirect: fix comparison when explicit port request and implicit redirect port
Co-authored-by: Julien Salleyron <julien.salleyron@gmail.com>
Co-authored-by: Ludovic Fernandez <ldez@users.noreply.github.com>
2021-08-11 17:10:12 +02:00
Jean-Baptiste Doumenjou e78f172f02 Merge current v2.4 into v2.5 2021-08-03 17:04:58 +02:00
Ludovic Fernandez b386964abc
fix: remove hop-by-hop headers define in connection header beore some middleware
Co-authored-by: Julien Salleyron <julien.salleyron@gmail.com>
2021-07-30 12:20:07 +02:00
Eric 817ac8f256
Add organizationalUnit to passtlscert middleware 2021-07-28 17:42:09 +02:00
romain 4b456f3b76 Merge current v2.4 into v2.5 2021-07-28 14:40:49 +02:00
mpl d9fc775084
ratelimiter: use correct ttlSeconds value, and always call Set
Co-authored-by: Romain <rtribotte@users.noreply.github.com>
Co-authored-by: Daniel Tomcej <daniel.tomcej@gmail.com>
2021-07-26 17:20:27 +02:00
Tom Moulard c515ace328
Library change for compress middleware to increase performance 2021-07-19 10:22:14 +02:00
romain 3a180e2afc Merge current v2.4 into v2.5 2021-07-13 18:12:29 +02:00
Daniel Tomcej 10ab39c33b
Add *headers.responseModifier CloseNotify() 2021-07-13 12:28:07 +02:00
Ludovic Fernandez 5d3dc3348e
accesslog: multiple times the same header name. 2021-07-09 14:22:13 +02:00
mpl 838a8e18d3
healthcheck: add support at the load-balancers of services level
Co-authored-by: Dmitry Sharshakov <d3dx12.xx@gmail.com>
Co-authored-by: Julien Salleyron <julien.salleyron@gmail.com>
Co-authored-by: Jean-Baptiste Doumenjou <925513+jbdoumenjou@users.noreply.github.com>
Co-authored-by: Romain <rtribotte@users.noreply.github.com>
Co-authored-by: Tom Moulard <tom.moulard@traefik.io>
2021-06-25 21:08:11 +02:00
romain ce2e02b690 Merge current v2.4 into master 2021-06-22 14:44:56 +02:00
Daniel Tomcej 03b08d67f0
chore: upgrade linter 2021-06-22 00:08:06 +02:00
Wei Lun dca348359b
add permissionsPolicy and deprecate featurePolicy 2021-06-21 15:16:13 +02:00
Romain fc9f41b955
Add TCP Middlewares support 2021-06-11 15:30:05 +02:00
Tom Moulard 526f493e12
Removes headers middleware options 2021-05-28 09:24:14 +02:00
Tom Moulard 5632ee6378
Deprecates ssl redirect headers middleware options 2021-05-28 08:50:09 +02:00
Jorge Arco 080cf98e51
Add router metrics 2021-04-30 10:22:04 +02:00
Jean-Baptiste Doumenjou 702e301990 Merge current branch v2.4 into master 2021-03-09 12:05:08 +01:00
Julien Salleyron 3c8675bb8b
Fix flaky tests.
Co-authored-by: Ludovic Fernandez <ldez@users.noreply.github.com>
2021-03-08 09:58:04 +01:00
Romain bdba7d3adf
Update to go1.16 2021-03-04 20:08:03 +01:00
Ludovic Fernandez 2e7833df49
chore: update linter. 2021-03-04 09:02:03 +01:00
romain 1b21f0723f Merge v2.4 into master 2021-02-16 11:12:09 +01:00
Jean-Baptiste Doumenjou 951d61bfcd
Apply content type exclusion on response
Co-authored-by: kevinpollet <pollet.kevin@gmail.com>
2021-02-12 12:12:03 +01:00
Jean-Baptiste Doumenjou d211437d6c Merge v2.4 into master 2021-02-04 10:40:53 +01:00
Ludovic Fernandez bf4a578bbb
fix: infinite loop in forwarded header middleware.
Co-authored-by: kevinpollet <pollet.kevin@gmail.com>
2021-02-02 11:40:04 +01:00
Ludovic Fernandez a371f971fb
chore: update linter. 2021-01-28 09:00:03 +01:00
kevinpollet 2461e36ed4
Merge branch v2.4 into master 2021-01-25 12:42:23 +01:00
Pascal Fautré f0d78471af
Forward Proxy-Authorization header to authentication server 2021-01-21 18:34:04 +01:00
Julien Salleyron a90b2a672e
perf: improve forwarded header and recovery middlewares
Co-authored-by: Ludovic Fernandez <ldez@users.noreply.github.com>
2021-01-21 10:04:04 +01:00
Romain 4b370930b5
Mutualize TLS version and cipher code 2021-01-20 04:08:03 +01:00
na4ma4 b05a5c818d
Add TLS version and cipher to the accessLog 2021-01-19 09:52:06 +01:00
romain 92886c46ea Merge branch v2.3 into v2.4 2021-01-11 16:26:53 +01:00
Sylvere Richard 83fa3f4cc8
Discrepancy in Traefik log levels 2021-01-11 15:42:04 +01:00
Ludovic Fernandez f54136b602
chore: update linter. 2020-12-29 10:54:03 +01:00
kevinpollet eebbe64b36
Merge branch v2.3 into master 2020-12-11 10:58:00 +01:00
Harold Ozouf e9cccf6504
Do not evaluate templated URL in redirectRegex middleware 2020-11-24 14:16:03 +01:00
Fernandez Ludovic 520fcf82ae Merge branch v2.3 into master. 2020-11-09 00:07:28 +01:00
Ludovic Fernandez 267d0b7b5a
chore: update linter. 2020-11-06 09:26:03 +01:00
Daniel Adams 74d1d55051
Feature: Exponential Backoff in Retry Middleware 2020-11-05 16:14:04 +01:00
iamolegga 49cdb67ddc
Middlewares: add forwardAuth.authResponseHeadersRegex 2020-10-29 15:10:04 +01:00
Luca Guidi b5198e63c4
Allow to use regular expressions for AccessControlAllowOriginList 2020-10-29 10:52:03 +01:00
Jean-Baptiste Doumenjou 4fccde84bd Merge current v2.3 branch into master 2020-10-23 14:29:22 +02:00
Romain fc97ea7ee0
Use timezone without daylight saving time for logger formatter tests
Co-authored-by: jbdoumenjou <925513+jbdoumenjou@users.noreply.github.com>
2020-10-22 19:52:04 +02:00
Romain 3e61d1f233
Prepare release v2.3.2 2020-10-19 20:22:04 +02:00
Nikita Konev 326be29568
Filter ForwardAuth request headers 2020-10-07 16:36:04 +02:00
Jean-Baptiste Doumenjou c0f1e74bed
chore: move to Traefik organization.
Co-authored-by: Romain <rtribotte@users.noreply.github.com>
2020-09-16 15:46:04 +02:00
Ludovic Fernandez 230c2e5cc2
chore: update linter. 2020-09-15 13:08:03 +02:00
Fernandez Ludovic 8474a61f21 Merge branch v2.2 into v2.3 2020-09-07 16:30:17 +02:00
Ludovic Fernandez eb7a6d925b
fix: header middleware response writer. 2020-09-07 09:26:03 +02:00
Fernandez Ludovic 3678bd5a93 Merge branch v2.2 into v2.3 2020-09-04 21:06:11 +02:00
Julien Salleyron 52790d3c37
Headers response modifier is directly applied by headers middleware
Co-authored-by: Ludovic Fernandez <ldez@users.noreply.github.com>
2020-09-01 18:16:04 +02:00
Ludovic Fernandez b67a7215f6
chore: update linter. 2020-08-21 11:12:04 +02:00
Ludovic Fernandez 1502d20def
chore: move the parser to a dedicated package. 2020-08-17 18:04:03 +02:00
Ludovic Fernandez eecc2f4dd7
Update to go1.15 2020-08-17 12:02:03 +02:00
jb doumenjou 207d0bec78 Merge v2.2 into v2.3 2020-07-22 15:49:28 +02:00
Mickael Jeanroy 45f52ca29c
fix: access logs header names filtering is case insensitive 2020-07-16 17:36:04 +02:00
jb doumenjou 73ca7ad0c1 Merge remote-tracking branch 'upstream/v2.2' into mrg-current-v2.2 2020-07-10 11:23:49 +02:00
Ludovic Fernandez a20e90aa17
chore: update linter. 2020-07-07 14:42:03 +02:00
Daniel Tomcej 73513f8371
Allow multiple secure middlewares to operate independently 2020-07-01 10:42:04 +02:00
Romain 8d3d5c068c
Provide username in log data on auth failure 2020-06-18 16:02:04 +02:00
Romain e5e46bf4ed
Fix ipv6 handling in redirect middleware 2020-06-17 01:10:04 +02:00
mpl 9f32292473
internal handlers: support for response modifiers
Co-authored-by: Julien Salleyron <julien@containo.us>
Co-authored-by: Romain <rtribotte@users.noreply.github.com>
Co-authored-by: Jean-Baptiste Doumenjou <jb.doumenjou@gmail.com>
2020-06-15 12:20:05 +02:00
Jan Christian Grünhage b0f7b71453
refactor X-Forwarded-Proto 2020-06-10 14:32:03 +02:00
Ludovic Fernandez 328611c619
Update linter 2020-05-11 12:06:07 +02:00
Julien Salleyron e22c62baba
Fix wss in x-forwarded-proto 2020-04-30 18:00:04 +02:00
mpl 4da63c9237
ratelimit: do not default to ipstrategy too early 2020-04-29 18:32:05 +02:00
mpl 69de5bb828
digest auth: use RequireAuthStale when appropriate 2020-03-25 14:28:04 +01:00
Fernandez Ludovic f54b8d8847 Merge branch v2.1 into v2.2 2020-03-19 17:53:34 +01:00
Julien Salleyron b40fa61783
Fix memory leak in metrics
Co-authored-by: Ludovic Fernandez <ldez@users.noreply.github.com>
2020-03-19 13:48:04 +01:00
Fernandez Ludovic 2b28607a4e Merge remote-tracking branch 'upstream/v2.1' into v2.2 2020-03-18 18:16:08 +01:00
Ludovic Fernandez 09224e4b04
fix: custom Host header. 2020-03-18 00:54:04 +01:00
Ludovic Fernandez 62c3025a76
Access log field quotes. 2020-03-17 12:36:04 +01:00
Fernandez Ludovic 09c07f45ee Merge v2.1 into master. 2020-03-05 16:10:23 +01:00
Traefiker Bot b5d205b78c
fix statsd scale for duration based metrics 2020-03-05 15:10:07 +01:00
Traefiker Bot ad6bf936d5
Add metrics about TLS 2020-03-05 13:30:05 +01:00
Traefiker Bot 082fb166a2
Rework access control origin configuration 2020-03-05 08:18:04 +01:00
robotte 353bd3d06f
Added support for replacement containing escaped characters
Co-authored-by: Ludovic Fernandez <ldez@users.noreply.github.com>
2020-03-03 16:20:05 +01:00
Felipe 1c764052f7
Add http request scheme to logger 2020-02-17 10:46:04 +01:00
Sylvain Rabot 8762e5160d
Let metrics libs handle the atomicity 2020-02-11 16:40:05 +01:00
Fernandez Ludovic aa21351d0d Merge branch v2.1 into master 2020-02-10 16:47:13 +01:00
Julien Salleyron 349ce004f8
don't create http client for each request in forwardAuth middleware 2020-02-03 18:44:03 +01:00
mpl 6f4aefffe7 Add period for rate limiter middleware 2020-01-08 11:44:04 +01:00
Sylvain Rabot 377c219fd9 Rename the non-exposed field "count" to "size" 2020-01-07 20:00:05 +01:00
Fernandez Ludovic da3d814c8b Merge branch 'v2.1' into master 2020-01-07 19:13:48 +01:00
José Carlos Chávez 49356cadd4 fix(tracing): makes sure tracing headers are being propagated when using forwardAuth 2020-01-07 15:48:07 +01:00
mpl 61e59d74e0 CloseNotifier: return pointer instead of value 2019-12-12 15:12:05 +01:00
David 5f50d2e230 Add serial number certificate to forward headers 2019-12-12 00:32:03 +01:00
mpl bdf4c6723f detect CloseNotify capability in accesslog and metrics 2019-12-10 18:18:04 +01:00
Fernandez Ludovic 5c091a1871 Merge branch 'v2.0' into v2.1 2019-12-09 18:48:20 +01:00
Ludovic Fernandez 39a3cefc21 fix: PassClientTLSCert middleware separators and formatting 2019-12-09 12:20:06 +01:00
Fernandez Ludovic 89919dbe36 Merge branch 'v2.0' into v2.1 2019-12-02 18:20:29 +01:00
José Carlos Chávez 78097b96c9 Fix extraction for zipkin tracing 2019-12-02 14:18:07 +01:00
mpl 2af8589afd Do not give responsewriter or its headers to asynchronous logging goroutine
Co-authored-by: Julien Salleyron <julien.salleyron@gmail.com>
2019-12-02 03:14:04 +01:00
Daniel Tomcej a87c104172 Remove Request Headers CORS Preflight Requirement 2019-11-28 15:24:06 +01:00
Fernandez Ludovic ca9eaf383a Merge branch 'v2.0' into master 2019-11-15 13:34:41 +01:00
Ludovic Fernandez 42a8d84a1f X-Forwarded-Proto must not skip the redirection. 2019-11-15 12:36:04 +01:00
Ludovic Fernandez 7afd2dbd20 fix: stripPrefix middleware with empty resulting path. 2019-11-14 10:32:05 +01:00
Sylvain Rabot e6e026f420 Fix rate limiting and SSE 2019-11-12 11:06:05 +01:00
Ludovic Fernandez 3410541a2f Conditionnal compression based on Content-Type 2019-10-31 11:36:05 +01:00
Nicholas Wiersma 770a7f11a7 Avoid closing stdout when the accesslog handler is closed
Co-authored-by: Ludovic Fernandez <ldez@users.noreply.github.com>
Co-authored-by: jlevesy <julien.levesy@containo.us>
2019-10-28 11:52:04 +01:00
mpl a239e3fba6 error pages: do not buffer response when it's not an error 2019-10-28 11:52:04 +01:00
Ludovic Fernandez 3884a68889 fix: add stacktrace when recover. 2019-10-18 11:30:05 +02:00
Ludovic Fernandez 33a1499bdd fix: panic with metrics recorder. 2019-09-30 14:42:04 +02:00
Ludovic Fernandez 29efac3e5e fix: update linter. 2019-09-26 11:00:06 +02:00
Ludovic Fernandez 8e18d37b3d fix: logger and context. 2019-09-13 19:28:04 +02:00
Julien Salleyron 401b3afa3b Add passHostHeader and responseForwarding in IngressRoute
Co-authored-by: Mathieu Lonjaret <mathieu.lonjaret@gmail.com>
2019-09-13 16:46:04 +02:00
Ludovic Fernandez 7357d5eae2 fix: services configuration documentation. 2019-09-12 10:18:04 +02:00
mpl 2b828765e3 Improve rate limiter tests
Co-authored-by: Julien Salleyron <julien.salleyron@gmail.com>
2019-09-09 20:02:04 +02:00
mpl 605a9b2817 Default to CLF when accesslog format is unsupported 2019-09-09 09:24:03 +02:00
Julien Salleyron 1959e1fd44 Auth middlewares in kubernetes CRD uses secrets 2019-09-05 13:42:04 +02:00
Ludovic Fernandez f843f260ee fix: stripPrefix and stripPrefixRegex. 2019-09-03 20:32:03 +02:00
mpl 4ec90c5c0d Add rate limiter, rename maxConn into inFlightReq
Co-authored-by: Julien Salleyron <julien.salleyron@gmail.com>
Co-authored-by: Jean-Baptiste Doumenjou <jb.doumenjou@gmail.com>
2019-08-26 03:20:06 -07:00
Ludovic Fernandez 5731ae7f47 Fix url.Parse due to go1.12.8 changes. 2019-08-14 09:16:04 -07:00
Fernandez Ludovic 4c5e7a238d chore: go module 2019-08-12 05:06:04 -07:00
Daniel Tomcej cd164de776 Add Feature-Policy header support 2019-07-29 07:12:05 -07:00
Michael 8e97af8dc3 Add Metrics 2019-07-18 21:36:05 +02:00
Damien Duportal 8b08f89d2c Allows logs to use local time zone instead of UTC
Co-authored-by: Ludovic Fernandez <ldez@users.noreply.github.com>
2019-07-17 20:12:04 +02:00
Jean-Baptiste Doumenjou 2c7cfd1c68 Expand Client Auth Type configuration 2019-07-12 17:50:04 +02:00
Daniel Tomcej 3f6ea04048 Properly add response headers for CORS 2019-07-12 11:46:04 +02:00
Ludovic Fernandez c8bf8e896a Move dynamic config into a dedicated package. 2019-07-10 09:26:04 +02:00
stffabi cc4258bf9d Remove X-Forwarded-(Uri, Method, Tls-Client-Cert and Tls-Client-Cert-Info) from untrusted IP 2019-07-08 17:56:04 +02:00
Ludovic Fernandez 8d7eccad5d New static configuration loading system.
Co-authored-by: Mathieu Lonjaret <mathieu.lonjaret@gmail.com>
2019-06-17 11:48:05 +02:00
ctas582 3d7633f4a6 Forward all header values from forward auth response 2019-04-17 10:38:04 +02:00
mpl b0b8b75258 Fix doc about removing headers 2019-04-05 15:18:04 +02:00
mpl 336135c392 Set X-Forwarded-* headers
Co-authored-by: Julien Salleyron <julien.salleyron@gmail.com>
2019-04-02 16:56:04 +02:00
Daniel Tomcej d2b38e6ac4 Enable CORS configuration 2019-04-02 10:40:04 +02:00
Ludovic Fernandez da20db862d fix: validation system 2019-04-01 15:30:07 +02:00
Ludovic Fernandez 72ffa91fe0 Clean old 2019-03-18 11:30:07 +01:00
Ludovic Fernandez e271378a97 Clean files during tests. 2019-03-18 09:34:03 +01:00
Ludovic Fernandez f1b085fa36 Move code to pkg 2019-03-15 09:42:03 +01:00