# Traefik v3.7.18 releases with middleware performance fixes and Kubernetes improvements

> **Key takeaway:** Traefik v3.7.18 introduces memory limits for zstd compression, enhanced Kubernetes Ingress NGINX compatibility, and security hardening for authentication.

**Published:** 2026-11-10T08:33:25+00:00 
**Source:** Traefik Cloud Native Edge Router 
**Category:** cloud-native 
**Canonical URL:** https://fosswire.org/news/traefik-v3718-releases-with-middleware-performance-fixes-and.html 

## Summary
Traefik has released version 3.7.18 of its cloud-native edge router, addressing several bugs across its middleware, server, and Kubernetes integration components. This update focuses on improving the stability of the routing engine and refining how the software interacts with Kubernetes environments.

Key technical improvements include performance optimizations for the compression middleware and enhanced support for specific authentication schemes. The release also includes critical fixes for WASM plugin determinism and path parameter resolution within the server component.

## Technical improvements in Traefik v3.7.18
- **Middleware Performance:** The Compress middleware now implements memory limits for the zstd encoder to prevent excessive resource consumption.
- **Kubernetes Integration:** Improvements were made to Ingress NGINX compatibility, specifically regarding CORS annotation ordering, host-less auth-tls annotations, and SSL client header handling when Ingresses share a host.
- **Security and Authentication:** The update adds a length limit to BasicAuth passwords and introduces support for connection-bound authentication schemes within Proxy-Authorization headers.
- **Server and Protocol Handling:** The server now validates HTTP Host matcher values and correctly resolves dot-segments and empty segments when using path parameters.
- **Plugin and Runtime Updates:** The release bumps the yaegi interpreter to v0.16.3 and fixes issues regarding deterministic randomness in WASM-based plugins.

## Why it matters
This release is significant for DevOps engineers managing Kubernetes clusters, as it refines the behavior of Ingress NGINX annotations and improves resource predictability via zstd memory limits. The security hardening of authentication schemes and path parameter resolution also enhances the reliability of edge routing in production environments.