Commit Graph

24 Commits

Author SHA1 Message Date
Yousa
0ff2ab8242
fix: disable ssl_session_tickets by default (#2641)
fix #2638

In a word, 'ssl_session_tickets' would make Perfect Forward Secrecy useless.

reference:
ingress-nginx:kubernetes/ingress-nginx#6196
mozilla:mozilla/server-side-tls#135
2020-11-09 22:44:26 +08:00
YuanSheng Wang
f2f5ab9766
feat: support json encoding escape for access logs (#2269)
fix #2266 .
2020-10-30 16:07:24 +08:00
罗泽轩
b6eb6f4842
change: rename APIX_WORKER_PROCESSES to APISIX_WORKER_PROCESSES (#2552)
Close #2517.
2020-10-30 08:14:04 +08:00
Vinci Xu
1a6fb8ec2c
feat(CLI): worker and cpu optimization (#2153) 2020-10-22 16:28:26 +08:00
罗泽轩
d86c480ec5
fix: previously we could not merge configuration without middle layer (#2476) 2020-10-21 09:59:45 +08:00
YuanSheng Wang
c9392627a8
bugfix: empty allow_admin means that any IP is allowed to access Admin API and Dashboard (#1979)
fix #1939
2020-10-17 19:26:48 +08:00
Turein
90109ca678
feature: support multiple ports like stream listen in http and https … (#2409)
fix #1195
2020-10-17 17:44:26 +08:00
YuanSheng Wang
6a1fe8a546
bugfix(CLI): if the user used default token and allow any IP to access Admin API, will show a WARNING message.(#2244)
Co-authored-by: Wen Ming <moonbingbing@gmail.com>
2020-09-22 16:09:35 +08:00
罗泽轩
b6354ec33e
feat: allow to limit client body size to protect the service (#2214) 2020-09-15 21:58:30 +08:00
seven dickens
312a97c96f
feat: define env in nginx.conf template (#2174)
Co-authored-by: lixiangyang <lixiangyang@dragonest.com>
2020-09-14 18:12:29 +08:00
nic-chen
c54aec8f6c
feat: support custom access log format (#2122)
fix #2009
2020-08-26 16:51:44 +08:00
罗泽轩
0bb8f4693a
change: allow users to see warnings by default (#2116)
Previously, with the default configure, people don't have the chance to
ignore the warning message.
2020-08-26 14:19:46 +08:00
YuanSheng Wang
cf882bda1e
feature: divide config.yaml into two files config-custom.yaml & confi… (#2023)
* feature: divide config.yaml into two files config-custom.yaml & config-default.yaml .

fix #1923
2020-08-18 20:18:55 +08:00
罗泽轩
0b00e82773
bugfix: avoid setting Server header twice (#2065)
Fix #2064.
2020-08-15 17:19:35 +08:00
罗泽轩
f7b5f2b7ec
feat: allow customizing worker_processes (#2017)
* feat: allow customizing worker_processes

Close #2016
2020-08-07 17:25:26 +08:00
Yousa
d079b3dbcc
'worker_shutdown_timeout 240s' in nginx.conf is better. (#1883) 2020-07-24 16:05:29 +08:00
YuanSheng Wang
9b47b31c50
change: disable reuseport in development mode, it more easy to manage worker process. (#1175) 2020-06-10 11:32:52 +08:00
Yousa
4b47391a6c
bugfix(CLI): generate the 'worker_cpu_affinity' config for Linux OS (#1658)
Fix #1657
2020-06-09 20:44:15 +08:00
dabue
d780f7406f
[bugfix(CLI)]: check whether the user has enabled etcd v2 protocol. (#1665) 2020-06-09 20:42:38 +08:00
dabue
3228e16705
feature: support to enable HTTPS for admin API (#1648) 2020-06-07 21:02:50 +08:00
qiujiayu
7baa0abd44
feature: if the dns_resolver is not set in the file conf/config.yaml, use the resolver in local DNS. (#1217)
Fix #1164
2020-03-26 09:48:18 +08:00
Wen Ming
a610e8917c
Revert "feature: auto import nameservers into APISIX from system resolver. (#1167)" (#1205)
This reverts commit e1ac426443.
This PR break CI and no test cases cover, so I have to revert it.
2020-03-06 10:30:32 +08:00
qiujiayu
e1ac426443
feature: auto import nameservers into APISIX from system resolver. (#1167)
Fix #1164
2020-03-02 16:04:15 +08:00
YuanSheng Wang
e33f75da4e
bugfix: use ss.listen_port to generate https listening port. (#1133) 2020-02-18 12:40:15 +08:00