juzhiyuan commented on code in PR #8227:
URL: https://github.com/apache/apisix/pull/8227#discussion_r1034386568


##########
docs/en/latest/admin-api.md:
##########
@@ -21,13 +29,41 @@ title: Admin API
 #
 -->
 
+## Description
+
 The Admin API lets users control their deployed Apache APISIX instance. The 
[architecture design](./architecture-design/apisix.md) gives an idea about how 
everything fits together.
 
-By default, the Admin API listens to port `9180` when APISIX is launched. This 
can be changed by modifying your configuration file 
([conf/config.yaml](https://github.com/apache/apisix/blob/master/conf/config.yaml)).
+## Configuration
+
+When APISIX is started, the Admin API will listen on port `9180` by default 
and take the API prefixed with `/apisix/admin`.
+
+Therefore, to avoid conflicts between your designed API and `/apisix/admin`, 
you can modify the configuration file 
[`/conf/config.yaml`](https://github.com/apache/apisix/blob/master/ 
conf/config.yaml) to modify the default listening port.
+
+APISIX supports setting the IP access allowlist of Admin API to prevent APISIX 
from being illegally accessed and attacked. You can configure the IP addresses 
to allow access in the `deployment.admin.allow_admin` option in the 
`./conf/config.yaml` file.
+
+The `X-API-KEY` shown below refers to the `deployment.admin.admin_key.key` in 
the `./conf/config.yaml` file, which is the access token for the Admin API.
+
+:::tip
 
-**Note**: Mentions of `X-API-KEY` in this document refers to 
`deployment.admin.admin_key.key`—the access token for Admin API—in your 
configuration file.
+It is recommended that you modify the default listening port, IP access 
allowlist and Admin API token of the Admin API to ensure the security of your 
API.

Review Comment:
   ```suggestion
   For security reasons, please modify the default `admin_key`, and check the 
`allow_admin` IP access list.
   ```



##########
docs/en/latest/admin-api.md:
##########
@@ -21,13 +29,41 @@ title: Admin API
 #
 -->
 
+## Description
+
 The Admin API lets users control their deployed Apache APISIX instance. The 
[architecture design](./architecture-design/apisix.md) gives an idea about how 
everything fits together.
 
-By default, the Admin API listens to port `9180` when APISIX is launched. This 
can be changed by modifying your configuration file 
([conf/config.yaml](https://github.com/apache/apisix/blob/master/conf/config.yaml)).
+## Configuration
+
+When APISIX is started, the Admin API will listen on port `9180` by default 
and take the API prefixed with `/apisix/admin`.
+
+Therefore, to avoid conflicts between your designed API and `/apisix/admin`, 
you can modify the configuration file 
[`/conf/config.yaml`](https://github.com/apache/apisix/blob/master/ 
conf/config.yaml) to modify the default listening port.

Review Comment:
   ```suggestion
   Therefore, to avoid conflicts between your designed API and `/apisix/admin`, 
you can modify the configuration file 
[`/conf/config.yaml`](https://github.com/apache/apisix/blob/master/conf/config.yaml)
 to modify the default listening port.
   ```



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to