Varnish Controller 7.5.1
Release
Published April 29, 2026.
This is a patch release; components can be upgraded individually, except for the router deployment fix which requires both brainz and the router to be upgraded together.
- Added aarch64 (ARM) packages for Varnish Controller components.
- Added Ubuntu 26.04 (Resolute Raccoon) packages for Varnish Controller
components.
- Fixed URL matching in the root VCL when the request includes a port, now
includes a new variable
baseURLNoPort.
- Fixed router deployment bug that could clear domains when multiple VCLGroups
with different domains used the same routing rules.
- Fixed agent backups
to include the common VCL directory so backups can be restored correctly.
- Fixed a bug where unrelated commits in a shared
git repository would
trigger a redeploy of a VCLGroup.
- Fixed
vcli to fail properly when VCL compilation fails during deploy.
- Fixed session
login and impersonation
issues when creating session tokens.
- Removed the
GET-method requirement on the JSON health check response
(traffic_router_health.vcl),
and reload the root VCL when the generated health check VCL changes.
- Prevented creation of a new
rolling upgrade
for a VCLGroup that already has an active one.
- Prevented adding an already-deployed domain to multiple VCLGroups on the same
agent, and prevented removing all domains from a deployed VCLGroup.
- Reduced memory usage of the system debug and monitoring endpoints.
- Reduced database load with covering indexes and several optimizations.
- Improved ACME DNS
propagation checks with clearer error messages and more reliable lookups.
- Security hardening across the API gateway and traffic router, covering request
and server timeouts, internal cache bounds, and proxy header / TLS SNI / HTTP
Host validation.
- Version mismatches between components are now logged at
WARN level for
better operational visibility.
- Updated dependencies (Lego, PGX) to address upstream security advisories.
- UI: Added a Server Deployments view per VCLGroup with live status polling
and per-server deployment status. The VCLGroup header and list now show a
warning when only some matching servers have deployed the latest
configuration.
- UI: Read-only agents are now marked Unavailable in the VCLGroup
matching-servers picker in the UI.
- UI: The Deploy & Compile file list now shows an indicator when a deployed file
version is older than the latest available version.
See Varnish Controller Changelog for
more details on the changes and the
upgrade notes
for more details on how to upgrade.