From 5d21848e87c535c59c1f8434e5605e1bc3f7ee5b Mon Sep 17 00:00:00 2001
From: Asep Haryana <asepharyana@users.noreply.github.com>
Date: Sat, 1 Aug 2026 13:12:50 +0700
Subject: [PATCH] perf(infra): traefik response speed - HTTP/3 + backend conn
 pooling

- entryPoints.websecure.http3: enable QUIC (UDP 443, alt-svc h3)
- serversTransport maxIdleConnsPerHost 2->100: reuse backend keep-alive
- forwardingTimeouts.dialTimeout 30s->3s: fail fast on dead backends
- disable version-check/anonymous-usage network chatter
---
 infra/compose/traefik.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/infra/compose/traefik.yml b/infra/compose/traefik.yml
index e24d33b..0f80a75 100644
--- a/infra/compose/traefik.yml
+++ b/infra/compose/traefik.yml
@@ -13,6 +13,7 @@ services:
     ports:
       - '80:80'
       - '443:443'
+      - '443:443/udp'
     networks:
       - app-shared-net
     extra_hosts:
@@ -45,6 +46,13 @@ services:
       - '--entryPoints.websecure.transport.lifeCycle.requestAcceptGraceTimeout=15s'
       - '--entryPoints.websecure.transport.lifeCycle.graceTimeOut=10s'
       - '--entryPoints.websecure.address=:443'
+      - '--entryPoints.websecure.http3=true'
+      # ── Response speed tuning ──
+      - '--serversTransport.maxIdleConnsPerHost=100'
+      - '--serversTransport.forwardingTimeouts.dialTimeout=3s'
+      - '--serversTransport.forwardingTimeouts.idleConnTimeout=180s'
+      - '--global.checkNewVersion=false'
+      - '--global.sendAnonymousUsage=false'
       - '--experimental.plugins.real-ip.moduleName=github.com/soulbalz/traefik-real-ip'
       - '--experimental.plugins.real-ip.version=v1.0.3'
       - '--experimental.plugins.blockpath.moduleName=github.com/traefik/plugin-blockpath'