Commit Graph

55 Commits

Author SHA1 Message Date
罗泽轩
232134ad6b
docs: avoid the misleading comment (#4189) 2021-05-07 08:55:17 +08:00
罗泽轩
624f59fc78
feat: step 3, manage the plugin runner (#4163)
* feat: step 3, manage the plugin runner
* feat: step 4, add prepare_conf protocol
2021-05-04 10:41:08 +08:00
罗泽轩
f3b057609f
feat(ext-plugin): step 2, add basic structure (#4119)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2021-04-29 11:07:05 +08:00
罗泽轩
6a986f4649
change(prometheus): don't expose metrics to internet (#3994)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2021-04-07 14:40:28 +08:00
罗泽轩
baf8434034
fix: allow addr:port format in stream_proxy (#3900)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2021-03-25 09:07:05 +08:00
罗泽轩
1a09b0d7a0
feat(cli): support etcd mTLS (#3836) 2021-03-23 20:03:21 +08:00
罗泽轩
20ee3c1ecb
feat: add a safe exit to disable sync conf during start (#3812) 2021-03-12 14:53:58 +08:00
罗泽轩
2a6e2b4247
feat: add dns discovery (#3629)
Fix #3517
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2021-02-25 09:42:31 +08:00
罗泽轩
18909a2a0b
feat: allow disabling search option in resolv.conf (#3609)
Also disable it in the test to avoid occassional DNS query timeout.
2021-02-20 15:38:45 +08:00
nic-chen
13f3139fbb
change: global rules should not be executed on the internal api (#3396) 2021-02-10 12:01:58 +08:00
罗泽轩
653e15350b
change: default to cache DNS record according to the TTL (#3530)
Since lua-resty-dns-client provides an internal cache, we don't need to
cache it twice.

Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2021-02-10 11:41:13 +08:00
罗泽轩
d752b6f364
feat: allow customizing lua_package_path & lua_package_cpath (#3417) 2021-01-27 14:45:32 +08:00
罗泽轩
da62190d95
feat: allow to pass SNI in HTTPS proxy (#3420)
Fix #2988
2021-01-26 23:36:12 +08:00
罗泽轩
e3601e6876
feat: support dubbo (#3224)
Fix #89
2021-01-20 09:47:09 +08:00
shenshaoye
4aeef386f0
feat: support more customize configure in nginx.conf (#3204)
Co-authored-by: 沈鑫杰 <xinjie.shen@chaitin.com>

related #3203
2021-01-07 19:21:02 +08:00
YuanSheng Wang
151d74fd9c
chore: enable plugin server-info by default. (#3170)
Co-authored-by: spacewander <spacewanderlzx@gmail.com>
2021-01-04 20:18:21 +08:00
罗泽轩
81c1c7c077
change: don't treat route segment with ':' as parameter by default (#3154)
Fix #3134
2020-12-30 22:13:05 +08:00
Yuelin Zheng
86fa46d85b
feat: Implement traffic splitting plugin (#2935)
close #2303
close #2603
2020-12-25 15:53:00 +08:00
罗泽轩
924a30db36
feat: add control API (#3048)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
Co-authored-by: John Bampton <jbampton@users.noreply.github.com
2020-12-18 15:05:09 +08:00
John Bampton
6331e5d057
feat(CI): add a GitHub Action to lint the YAML files (#3044)
Lint some YAML
Add a `.yamllint` config file
2020-12-18 08:29:17 +08:00
John Bampton
3c01db5ef0
chore: spelling (#3012)
Co-authored-by: 罗泽轩 <spacewanderlzx@gmail.com>
Co-authored-by: YuanSheng Wang <membphis@gmail.com>
2020-12-13 00:04:48 +08:00
Shuyang Wu
b7325f033e
fix: enable ssl as default, using placeholder certificate (#3013) 2020-12-11 17:44:41 +08:00
罗泽轩
93e2f1647a
feat: route accroding to the graphql attributes (#2964)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2020-12-10 15:51:00 +08:00
Alex Zhang
7855d9eed2
feat: implement new plugin server-info (#2926)
close #2821
2020-12-09 10:07:57 +08:00
罗泽轩
1b8dca96ac
feat: increase the delay before resync (#2977)
It improves the behavior under #2899.
2020-12-07 20:20:31 +08:00
罗泽轩
2f3ab6a2bc
feat: disable node-status by default (#2968)
Fix #2952
2020-12-04 22:25:11 +08:00
dabue
e66dd9a314
feat: implement error-log-logger plug-in (#2592) 2020-11-30 14:43:16 +08:00
罗泽轩
f267291f3a
feat(prometheus): allow customizing Prometheus export uri (#2826)
* feat(prometheus): allow customizing Prometheus export uri

Close #2296.
2020-11-30 14:35:06 +08:00
Wen Ming
d2ea344fc1
Revert "refactor: separate admin and proxy port in default config (#2802)" (#2871)
This reverts commit b13f167445.

Co-authored-by: Vinci Xu <277040271@qq.com>
2020-11-28 19:05:14 +08:00
罗泽轩
c6c2e3cfb2
feat: support include other nginx config (#2803)
Close #2565
Close #1620
2020-11-25 19:23:31 +08:00
罗泽轩
1ad90f7206
chore: sort default plugin list for easier search (#2824) 2020-11-25 14:11:24 +08:00
HelloBug0
1d0c719a7b
feat: enable access log or not (#2769)
Fix #2713.
2020-11-25 13:10:08 +08:00
罗泽轩
ba114fc980
feat: add rewritten proxy url in access log (#2838)
This helps us to locate the problem.
2020-11-25 10:05:22 +08:00
Vinci Xu
b13f167445
refactor: separate admin and proxy port in default config (#2802)
change all admin 9080 to 9180
2020-11-24 16:51:47 +08:00
Shuyang Wu
36162e3607
fix: move conf/cert to t/certs and disable ssl by default (#2112) 2020-11-20 11:10:01 +08:00
guyang
5b396020d5
feat: support plugin for "aliyun" log service (#2177) 2020-11-19 00:04:01 +08:00
罗泽轩
3ba6629daa
feat: disable example-plugin by default (#2673)
Close #2659.
2020-11-10 08:46:54 +08:00
Yousa
0ff2ab8242
fix: disable ssl_session_tickets by default (#2641)
fix #2638

In a word, 'ssl_session_tickets' would make Perfect Forward Secrecy useless.

reference:
ingress-nginx:kubernetes/ingress-nginx#6196
mozilla:mozilla/server-side-tls#135
2020-11-09 22:44:26 +08:00
罗泽轩
ebf0563a40
change: disable skywalking by default. (#2632)
* fix: disable skywalking by default.

Close #2623.

* trailing sw

* clean test
2020-11-09 08:12:52 +08:00
Alex Zhang
188355494d
feat: hide APISIX version from Server header. (#2639)
Sometimes expose version is dangerous, which can be utilized by
malicious crackers when there are some security bugs in that version.
2020-11-07 00:04:28 +08:00
Alex Zhang
5191374545
feat: support TLS connection with etcd. (#2548)
Support the TLS connection when communicating with etcd cluster. We added a configuration item to custom the certificate verification. Whether to setup TLS connection or not depends on the endpoints' scheme, for instance, when endpoints are:

```
etcd:
  host:
    - "https://127.0.0.1:2379"
    - "https://127.0.0.1:3379"
```

APISIX will originate TLS connection automatically, and the Server Name Indication extention will be set by the endpoint host (`127.0.0.1` in above case). Note by default APISIX will verify the certificate, close the verification in configuration explicitly if you want to bypass it.

```
etcd:
  tls:
    verfiy: false
```
2020-11-03 13:53:39 +08:00
shoogoome
fff4d14a0d
feature: support multiple service discovery (#2556)
support multiple service discovery,then we can switch it in upstream
2020-10-30 20:34:10 +08:00
YuanSheng Wang
f2f5ab9766
feat: support json encoding escape for access logs (#2269)
fix #2266 .
2020-10-30 16:07:24 +08:00
罗泽轩
b6eb6f4842
change: rename APIX_WORKER_PROCESSES to APISIX_WORKER_PROCESSES (#2552)
Close #2517.
2020-10-30 08:14:04 +08:00
YuanSheng Wang
b23475fcba
feat: upgrade skywalking plugin to support skywalking 8.0 . (#2389) 2020-10-29 15:29:52 +08:00
Alex Zhang
d87ce33485
feature: support injecting lua_ssl_trusted_certificate. (#2519) 2020-10-28 06:49:20 +08:00
YuanSheng Wang
6a7dfa6775
feat: implement api breaker plugin. (#2455)
Co-authored-by: liuheng <liuhengloveyou@gmail.com>
2020-10-27 13:40:23 +08:00
Vinci Xu
1a6fb8ec2c
feat(CLI): worker and cpu optimization (#2153) 2020-10-22 16:28:26 +08:00
罗泽轩
5b97223592
feat: implemented referer-restriction plugin (#2352) 2020-10-06 18:20:17 +08:00
nic-chen
84ce7ba781
feat: add AK/SK(HMAC) auth plugin. (#2192) 2020-09-16 14:27:56 +08:00