diff --git a/changelog.md b/changelog.md
index e66f1f5..93532ca 100644
--- a/changelog.md
+++ b/changelog.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## 2026-03-19 - 11.8.1 - fix(dcrouter)
+use constructor routes for remote ingress setup and bump smartproxy dependency
+
+- Switch remote ingress initialization to use constructorRoutes instead of smartProxyConfig routes so derived edge ports are based on the active route set.
+- Update @push.rocks/smartproxy from ^25.16.2 to ^25.16.3.
+
 ## 2026-03-19 - 11.8.0 - feat(remoteingress)
 add UDP listen port derivation and edge configuration support
 
diff --git a/package.json b/package.json
index b6fd846..7de27bc 100644
--- a/package.json
+++ b/package.json
@@ -53,7 +53,7 @@
     "@push.rocks/smartnetwork": "^4.4.0",
     "@push.rocks/smartpath": "^6.0.0",
     "@push.rocks/smartpromise": "^4.2.3",
-    "@push.rocks/smartproxy": "^25.16.2",
+    "@push.rocks/smartproxy": "^25.16.3",
     "@push.rocks/smartradius": "^1.1.1",
     "@push.rocks/smartrequest": "^5.0.1",
     "@push.rocks/smartrx": "^3.0.10",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 3b722f4..3a024df 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -78,8 +78,8 @@ importers:
         specifier: ^4.2.3
         version: 4.2.3
       '@push.rocks/smartproxy':
-        specifier: ^25.16.2
-        version: 25.16.2
+        specifier: ^25.16.3
+        version: 25.16.3
       '@push.rocks/smartradius':
         specifier: ^1.1.1
         version: 1.1.1
@@ -1256,8 +1256,8 @@ packages:
   '@push.rocks/smartpromise@4.2.3':
     resolution: {integrity: sha512-Ycg/TJR+tMt+S3wSFurOpEoW6nXv12QBtKXgBcjMZ4RsdO28geN46U09osPn9N9WuwQy1PkmTV5J/V4F9U8qEw==}
 
-  '@push.rocks/smartproxy@25.16.2':
-    resolution: {integrity: sha512-o42ipMKmgfl5dOVWF3lCLYrCxLTl+OGvwmtK8smqFG6BCfUvJrd38zDH2j3fA6bxKdIgr5rJFDSjJypznL+6Gg==}
+  '@push.rocks/smartproxy@25.16.3':
+    resolution: {integrity: sha512-8pS41d2AZTVriip4OcAMWl+jYM/cF9fJ2/dTWm/oG4XM2BTnmeX6Bh3RThX7AIP7Js5Jv/Inot5fA3oIe8RtbA==}
 
   '@push.rocks/smartpuppeteer@2.0.5':
     resolution: {integrity: sha512-yK/qSeWVHIGWRp3c8S5tfdGP6WCKllZC4DR8d8CQlEjszOSBmHtlTdyyqOMBZ/BA4kd+eU5f3A1r4K2tGYty1g==}
@@ -6539,7 +6539,7 @@ snapshots:
 
   '@push.rocks/smartpromise@4.2.3': {}
 
-  '@push.rocks/smartproxy@25.16.2':
+  '@push.rocks/smartproxy@25.16.3':
     dependencies:
       '@push.rocks/smartcrypto': 2.0.4
       '@push.rocks/smartlog': 3.2.1
diff --git a/ts/00_commitinfo_data.ts b/ts/00_commitinfo_data.ts
index 249361e..5da1f31 100644
--- a/ts/00_commitinfo_data.ts
+++ b/ts/00_commitinfo_data.ts
@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/dcrouter',
-  version: '11.8.0',
+  version: '11.8.1',
   description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }
diff --git a/ts/classes.dcrouter.ts b/ts/classes.dcrouter.ts
index d967abc..51266a6 100644
--- a/ts/classes.dcrouter.ts
+++ b/ts/classes.dcrouter.ts
@@ -1753,7 +1753,7 @@ export class DcRouter {
     await this.remoteIngressManager.initialize();
 
     // Pass current routes so the manager can derive edge ports from remoteIngress-tagged routes
-    const currentRoutes = this.options.smartProxyConfig?.routes || [];
+    const currentRoutes = this.constructorRoutes;
     this.remoteIngressManager.setRoutes(currentRoutes as any[]);
 
     // Resolve TLS certs for tunnel: explicit paths > ACME for hubDomain > self-signed (Rust default)
diff --git a/ts_web/00_commitinfo_data.ts b/ts_web/00_commitinfo_data.ts
index 249361e..5da1f31 100644
--- a/ts_web/00_commitinfo_data.ts
+++ b/ts_web/00_commitinfo_data.ts
@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/dcrouter',
-  version: '11.8.0',
+  version: '11.8.1',
   description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }