On October 14, 2026, NGINX released versions 1.30.6 and 1.31.7 to fix five vulnerabilities, including a TLS session-ticket key rotation bug that can let a forged session bypass client-certificate verification. Upgrade, or at minimum remove the shared TLS session cache if your server relies on client-certificate authentication.
The 2.11.6 release caps request headers at 16 KiB, cuts Slowloris connections, and drops dot-header fields, at the cost of breaking changes. Read them before upgrading a production Caddy server.
Traefik v3.7.0, released May 5 2026, takes the reverse proxy to its logical conclusion: it reads your Docker container labels, provisions Let’s Encrypt certificates, and routes traffic without a single static config file. If Nginx Proxy Manager got your foot in the door, Traefik is the next step — the one where you stop configuring your reverse proxy and let it discover your services for you.
Nginx Proxy Manager v2.14.0 turns reverse proxy configuration into three web forms and a Save button. Let’s Encrypt, redirects, and TCP/UDP streams come built in. If Traefik intimidates you and Caddy bores you, NPM is the answer.
