Yousa
0ff2ab8242
fix: disable ssl_session_tickets by default ( #2641 )
...
fix #2638
In a word, 'ssl_session_tickets' would make Perfect Forward Secrecy useless.
reference:
ingress-nginx:kubernetes/ingress-nginx#6196
mozilla:mozilla/server-side-tls#135
2020-11-09 22:44:26 +08:00
YuanSheng Wang
f2f5ab9766
feat: support json
encoding escape for access logs ( #2269 )
...
fix #2266 .
2020-10-30 16:07:24 +08:00
罗泽轩
b6eb6f4842
change: rename APIX_WORKER_PROCESSES to APISIX_WORKER_PROCESSES ( #2552 )
...
Close #2517 .
2020-10-30 08:14:04 +08:00
Vinci Xu
1a6fb8ec2c
feat(CLI): worker and cpu optimization ( #2153 )
2020-10-22 16:28:26 +08:00
罗泽轩
d86c480ec5
fix: previously we could not merge configuration without middle layer ( #2476 )
2020-10-21 09:59:45 +08:00
YuanSheng Wang
c9392627a8
bugfix: empty allow_admin
means that any IP is allowed to access Admin API and Dashboard ( #1979 )
...
fix #1939
2020-10-17 19:26:48 +08:00
Turein
90109ca678
feature: support multiple ports like stream listen in http and https … ( #2409 )
...
fix #1195
2020-10-17 17:44:26 +08:00
YuanSheng Wang
6a1fe8a546
bugfix(CLI): if the user used default token and allow any IP to access Admin API, will show a WARNING message.( #2244 )
...
Co-authored-by: Wen Ming <moonbingbing@gmail.com>
2020-09-22 16:09:35 +08:00
罗泽轩
b6354ec33e
feat: allow to limit client body size to protect the service ( #2214 )
2020-09-15 21:58:30 +08:00
seven dickens
312a97c96f
feat: define env in nginx.conf template ( #2174 )
...
Co-authored-by: lixiangyang <lixiangyang@dragonest.com>
2020-09-14 18:12:29 +08:00
nic-chen
c54aec8f6c
feat: support custom access log format ( #2122 )
...
fix #2009
2020-08-26 16:51:44 +08:00
罗泽轩
0bb8f4693a
change: allow users to see warnings by default ( #2116 )
...
Previously, with the default configure, people don't have the chance to
ignore the warning message.
2020-08-26 14:19:46 +08:00
YuanSheng Wang
cf882bda1e
feature: divide config.yaml into two files config-custom.yaml & confi… ( #2023 )
...
* feature: divide config.yaml into two files config-custom.yaml & config-default.yaml .
fix #1923
2020-08-18 20:18:55 +08:00
罗泽轩
0b00e82773
bugfix: avoid setting Server header twice ( #2065 )
...
Fix #2064 .
2020-08-15 17:19:35 +08:00
罗泽轩
f7b5f2b7ec
feat: allow customizing worker_processes ( #2017 )
...
* feat: allow customizing worker_processes
Close #2016
2020-08-07 17:25:26 +08:00
Yousa
d079b3dbcc
'worker_shutdown_timeout 240s' in nginx.conf is better. ( #1883 )
2020-07-24 16:05:29 +08:00
YuanSheng Wang
9b47b31c50
change: disable reuseport in development mode, it more easy to manage worker process. ( #1175 )
2020-06-10 11:32:52 +08:00
Yousa
4b47391a6c
bugfix(CLI): generate the 'worker_cpu_affinity' config for Linux OS ( #1658 )
...
Fix #1657
2020-06-09 20:44:15 +08:00
dabue
d780f7406f
[bugfix(CLI)]: check whether the user has enabled etcd v2 protocol. ( #1665 )
2020-06-09 20:42:38 +08:00
dabue
3228e16705
feature: support to enable HTTPS for admin API ( #1648 )
2020-06-07 21:02:50 +08:00
qiujiayu
7baa0abd44
feature: if the dns_resolver
is not set in the file conf/config.yaml
, use the resolver in local DNS. ( #1217 )
...
Fix #1164
2020-03-26 09:48:18 +08:00
Wen Ming
a610e8917c
Revert "feature: auto import nameservers into APISIX from system resolver. ( #1167 )" ( #1205 )
...
This reverts commit e1ac426443
.
This PR break CI and no test cases cover, so I have to revert it.
2020-03-06 10:30:32 +08:00
qiujiayu
e1ac426443
feature: auto import nameservers into APISIX from system resolver. ( #1167 )
...
Fix #1164
2020-03-02 16:04:15 +08:00
YuanSheng Wang
e33f75da4e
bugfix: use ss.listen_port
to generate https listening port. ( #1133 )
2020-02-18 12:40:15 +08:00