PluginsEcosystemAPI Gateway Enhances Security by CSRF PluginThis article introduces csrf, the CSRF security plugin for Apache APISIX, and details how to secure your API information in Apache APISIX with the help of the csrf plugin.
EcosystemThe practice of Nacos service discovery on API GatewayThis article introduces the basic concepts of Apache APISIX and the Service Registry, and shows you the practice of Nacos service discovery on API Gateway.
CommunityBiweekly Report (Feb 1 - Feb 14)From 2.1 to 2.14, 25 contributors submitted 55 commits for Apache APISIX. Thank you all for your contributions to Apache APISIX. It is your selfless contribution to make the Apache APISIX project bett...
PluginsEcosystemHow to develop plugin in API GatewayThis article documents the process of developing the file-logger plugin by a front-end engineer with no back-end experience.
VulnerabilitiesApache APISIX Vulnerability for Rewriting X-REAL-IP Header (CVE-2022-24112)In versions prior to Apache APISIX 2.12.1, there is a risk of rewriting X-REAL-IP header after enabling the Apache APISIX batch-requests plug-in. Now the processing information will be announced.
EcosystemPluginsIntegrating Splunk HTTP Event Collector with API GatewayThis article explains how to configure and use the Splunk HEC service in Apache APISIX.
AuthenticationPluginsforward-auth Plugin for Authentication FunctionThis article describes the use of forward-auth, a new plugin in Apache APISIX, and provides detailed instructions on how to use this cleanly designed authentication model.
EcosystemPluginsIntegrate Apache APISIX with gRPC-WebApache APISIX already supports gRPC protocol proxies, as well as HTTP(s) to gRPC Server proxies via the gRPC Transcode plugin. Through active community discussion and contributions, Apache APISIX has ...
CommunityRelease Apache APISIX 2.12.0Following the release of version 2.11.0, Apache APISIX will also bring you the first version with new features in 2022 during the upcoming Spring Festival.