- entryPoints.websecure.http3: enable QUIC (UDP 443, alt-svc h3) - serversTransport maxIdleConnsPerHost 2->100: reuse backend keep-alive - forwardingTimeouts.dialTimeout 30s->3s: fail fast on dead backends - disable version-check/anonymous-usage network chatter