[major] Prefer multi-layer routing for v2#99
Merged
Conversation
fd81787 to
5b22073
Compare
Breaking changes: - Requires Traefik v3.6 or newer so deployments can use multi-layer routing parentRefs. - Removes `ipv4subnetMask`, `ipv6subnetMask`, and `rateLimit`. Given the distributed nature of bots these config values have become additional config/logic that adds no real value. Most crawlers at this point are issuing a small amount of requests per IP across a wide range of subnets. - Removes `enableStateReconciliation` and all state reconciliation code. `persistentStateFile` is now restart persistence only, not multi-instance coordination. - Makes Traefik multi-layer routing the preferred multi-service protection model: attach captcha-protect to one parent router and route accepted traffic through child routers. Implementation notes: - Adds first-class CI coverage for the documented file-provider multi-layer routing config across Traefik v3.6, v3.7, and latest. - Drops older Traefik integration targets below v3.6. - Keeps Docker label smoke coverage for single-router provider configuration. - Updates README and plugin metadata for the v2 behavior and Traefik baseline. Closes #95
5b22073 to
eaebac8
Compare
Codecov Report❌ Patch coverage is
🚀 New features to boost your workflow:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Breaking changes
Requires Traefik v3.6 or newer so deployments can use multi-layer routing parentRefs.
Removes
ipv4subnetMask,ipv6subnetMask, andrateLimit. Given the distributed nature of bots these config values have become additional config/logic that adds no real value. Most crawlers at this point are issuing a small amount of requests per IP across a wide range of subnets.Removes
enableStateReconciliationand all state reconciliation code.persistentStateFileis now restart persistence only, not multi-instance coordination. This functionality is superseded by Multi-Layer Routing, which is the preferred multi-service protection model: attach captcha-protect to one parent router and route accepted traffic through child routers.Implementation notes
Adds first-class CI coverage for the documented file-provider multi-layer routing config across Traefik v3.6, v3.7, and latest.
Drops older Traefik integration targets below v3.6.
Keeps Docker label smoke coverage for single-router provider configuration.
Updates README and plugin metadata for the v2 behavior and Traefik baseline.
Closes #95