This is an automated email from the ASF dual-hosted git repository.
yilialin pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/apisix-website.git
The following commit(s) were added to refs/heads/master by this push:
new b7afcc81c25 blog: add 2025 oct monthly report (#1970)
b7afcc81c25 is described below
commit b7afcc81c2578dd69d426a940447a2d92eff5a8f
Author: Yilia Lin <[email protected]>
AuthorDate: Fri Oct 31 15:59:18 2025 +0800
blog: add 2025 oct monthly report (#1970)
---
blog/en/blog/2025/10/31/2025-oct-monthly-report.md | 76 +++++++++++++++++++++
blog/zh/blog/2025/10/31/2025-oct-monthly-report.md | 79 ++++++++++++++++++++++
2 files changed, 155 insertions(+)
diff --git a/blog/en/blog/2025/10/31/2025-oct-monthly-report.md
b/blog/en/blog/2025/10/31/2025-oct-monthly-report.md
new file mode 100644
index 00000000000..1a0766560a4
--- /dev/null
+++ b/blog/en/blog/2025/10/31/2025-oct-monthly-report.md
@@ -0,0 +1,76 @@
+---
+title: "2025 Monthly Report (October 01 - October 31)"
+keywords: ["Apache APISIX", "API Gateway", "Monthly Report", "Contributor"]
+description: Our monthly Apache APISIX community report generates insights
into the project's monthly developments. The reports provide a pathway into the
Apache APISIX community, ensuring that you stay well-informed and actively
involved.
+tags: [Community]
+image:
https://static.api7.ai/uploads/2025/10/31/YSKKLLkx_202510-monthly-report-cover-en.webp
+---
+
+> Recently, we've introduced and updated some new features, including adding
`max_pending_entries` to all logger plugins, supporting SCRAM Authentication
for `kafka-logger` plugin, etc. For more details, please read this month's
newsletter.
+
+<!--truncate-->
+
+## Introduction
+
+From its inception, the Apache APISIX project has embraced the ethos of
open-source community collaboration, propelling it into the ranks of the most
active global open-source API gateway projects. The proverbial wisdom of
'teamwork makes the dream work' rings true in our way and is made possible by
the collective effort of our community.
+
+From October 1st to October 31st, 9 contributors made 73 commits to Apache
APISIX. We sincerely appreciate your contributions to Apache APISIX.
+
+## Contributor Statistics
+
+
+
+
+
+## Feature Highlights
+
+### 1. Add `max_pending_entries` to All Logger Plugins
+
+PR: https://github.com/apache/apisix/pull/12709
+
+Contributor: [Revolyssup](https://github.com/Revolyssup)
+
+When external logging services like Kafka are slow or unavailable, a backlog
of unsent log entries can rapidly accumulate, leading to memory spikes. This PR
extends the existing `max_pending_entries` configuration from the
`kafka-logger` plugin to all logger plugins. It provides a configurable queue
limit. When reached, new logs are dropped, ensuring system stability.
+
+### 2. Update Resource Name Length Limit for Routes
+
+PR: https://github.com/apache/apisix/pull/11822
+
+Contributor: [csotiriou](https://github.com/csotiriou)
+
+This PR increases the maximum allowed length for a route's name. The limit has
been extended to three times the previous default value. This change is
necessary because when using the APISIX Ingress Controller, route names are
automatically generated by concatenating the Kubernetes namespace with other
identifiers, which can easily exceed the original length restriction.
+
+### 3. Support SCRAM Authentication for `kafka-logger` Plugin
+
+PR: https://github.com/apache/apisix/pull/12693
+
+Contributor: [Revolyssup](https://github.com/Revolyssup)
+
+This PR adds support for SCRAM (Salted Challenge Response Authentication
Mechanism) authentication to enhance security. While the underlying Kafka
client library already supported SCRAM, the plugin itself was limited to only
PLAIN authentication. This update bridges that gap, providing a more secure
authentication option for connecting to Kafka clusters.
+
+### 4. Refactor Secret Management with URI-Based Caching
+
+PR: https://github.com/apache/apisix/pull/12682
+
+Contributor: [Revolyssup](https://github.com/Revolyssup)
+
+This PR refactors `apisix/secret.lua` to use URL as the cache key, and we only
cache the result of the `fetch(uri) function`. It also allows the LRU cache to
support separate cache instances for successful and failed secret fetch
operations, allowing independent cache configuration. Additionally, the
`fetch_secrets()` API is simplified by removing redundant parameters, as keys
are now resolved internally.
+
+### 5. Add Support for Wildcard SNI Matching in SSL Configuration
+
+PR: https://github.com/apache/apisix/pull/12668
+
+Contributor: [Revolyssup](https://github.com/Revolyssup)
+
+This PR enhances APISIX's SSL SNI matching capability by adding support for
complete wildcard (`*`) values. Previously, APISIX only supported exact domain
matching (e.g., `abc.test.com`) and partial wildcards (e.g., `.test.com`), but
lacked support for the universal wildcard.
+This addition ensures compatibility with the Gateway API's HTTPSListener
specification, meeting its core consistency test requirements for handling SSL
connections with wildcard server name indications.
+
+## Recommended Blogs
+
+- [Release Apache APISIX
3.14.1](https://apisix.apache.org/blog/2025/10/17/release-apache-apisix-3.14.1/)
+
+ We are glad to release Apache APISIX 3.14.1 with a bug fix to improve user
experiences.
+
+- [Release Apache APISIX
3.14.0](https://apisix.apache.org/blog/2025/10/10/release-apache-apisix-3.14.0/)
+
+ This release introduces several new features, including new AI proxy
variables for logging, support for AI/ML API providers in AI plugins, route
matching based on the request body, support for the KSUID algorithm in the
request-id plugin, and more.
diff --git a/blog/zh/blog/2025/10/31/2025-oct-monthly-report.md
b/blog/zh/blog/2025/10/31/2025-oct-monthly-report.md
new file mode 100644
index 00000000000..c1daadd5317
--- /dev/null
+++ b/blog/zh/blog/2025/10/31/2025-oct-monthly-report.md
@@ -0,0 +1,79 @@
+---
+title: "2025 社区月报 (09.01 - 09.30)"
+keywords: ["Apache APISIX", "API 网关", "社区月报", "贡献者"]
+description: Apache APISIX 社区的月报旨在帮助社区成员更全面地了解社区的最新动态，方便大家参与到 Apache APISIX
社区中来。
+tags: [Community]
+image:
https://static.api7.ai/uploads/2025/10/31/8W29SZKg_202510-monthly-report-cover-cn.webp
+---
+
+> 最近，我们新增并优化了一些功能，如为所有日志插件添加 `max_pending_entries` 限制积压日志数量，为 `kafka-logger`
插件新增 SCRAM 认证支持等。有关更多细节，请阅读本期月报。
+
+<!--truncate-->
+
+## 导语
+
+Apache APISIX 项目始终秉承着开源社区协作的精神，自问世起便崭露头角，如今已经成为全球最活跃的开源 API
网关项目之一。正如谚语所言，“众人拾柴火焰高”，这一辉煌成就，得益于整个社区伙伴的协同努力。
+
+从 2025.10.01 至 2025.10.31，有 9 名开发者提交了 73 个 commits，为 Apache APISIX
做出了重要贡献。感谢这些伙伴们对 Apache APISIX 的无私支持！正是因为你们的付出，才能让 Apache APISIX 项目不断改进、提升和壮大。
+
+## 贡献者统计
+
+
+
+
+
+## 近期亮点功能
+
+### 1. 为所有日志插件添加 max_pending_entries 限制积压日志数量
+
+相关 PR：https://github.com/apache/apisix/pull/12709
+
+贡献者：[Revolyssup](https://github.com/Revolyssup)
+
+当外部日志服务（如 Kafka）响应缓慢或不可用时，未发送的日志条目会不受控制地堆积，引发内存使用量激增。本 PR 将 `kafka-logger`
插件中已有的 `max_pending_entries`
配置同步到其他日志插件。该配置可限制积压日志的数量，达到上限后，新的日志会被丢弃，以此保证系统的稳定性。
+
+### 2. 放宽路由资源名称的长度限制
+
+相关 PR：https://github.com/apache/apisix/pull/11822
+
+贡献者：[csotiriou](https://github.com/csotiriou)
+
+本 PR 提升了路由名称的最大允许长度，新限制是原默认值的三倍。此项变更很有必要，因为在 APISIX Ingress Controller 中，路由名称由
Kubernetes 命名空间及其他标识符自动拼接生成，其长度很容易超出原先的限制。
+
+### 3. 为 `kafka-logger` 插件新增 SCRAM 认证支持
+
+相关 PR：https://github.com/apache/apisix/pull/12693
+
+贡献者：[Revolyssup](https://github.com/Revolyssup)
+
+本 PR 为 `kafka-logger` 插件新增了 SCRAM 认证支持，提升了连接安全性。此前该插件仅支持 PLAIN 认证模式，而底层客户端库已具备
SCRAM 认证能力。本次修改弥补了这一差距，为连接 Kafka 集群提供了更安全的认证方式。
+
+### 4. 重构密钥管理，采用基于 URI 的缓存机制
+
+相关 PR：https://github.com/apache/apisix/pull/12682
+
+贡献者：[Revolyssup](https://github.com/Revolyssup)
+
+本 PR 重构 `apisix/secret.lua` 改用密钥 URI
作为缓存键，替代原有的完整配置对象，有效避免多个配置引用同一密钥时的重复存储问题。同时为成功获取和失败获取的密钥分别建立缓存实例，支持对两类缓存进行独立的配置和管理。另外
`fetch_secrets()` API 已经进行了简化，移除了冗余参数，实现了密钥在内部的自动解析。
+
+### 5. 在 SSL 配置中支持通配符 SNI 匹配
+
+相关 PR：https://github.com/apache/apisix/pull/12668
+
+贡献者：[Revolyssup](https://github.com/Revolyssup)
+
+本 PR 为 APISIX 增强了 SSL SNI 的匹配能力，新增了对全通配符 (`*`) 的支持。此前，APISIX 仅支持精确域名匹配（如
`abc.test.com`）和部分通配符（如 `.test.com`），但缺少对全局通配符的支持。此项改进确保了与 Gateway API 中
HTTPSListener 规范的兼容性，满足了该规范在处理带通配符服务器名称指示的 SSL 连接时的核心一致性测试要求。
+
+## 结语
+
+Apache APISIX 的项目[官网](https://apisix.apache.org/zh/)和 Github 上的
[Issues](https://github.com/apache/apisix/issues)
上已经积累了比较丰富的文档教程和使用经验，如果您遇到问题可以翻阅文档，用关键词在 Issues 中搜索，也可以参与 Issues
上的讨论，提出自己的想法和实践经验。
+
+## 近期博客推荐
+
+- [Apache APISIX 3.14.0
正式发布](https://apisix.apache.org/zh/blog/2025/10/10/release-apache-apisix-3.14.0/)
+
+ 此版本引入了多项新功能，包括用于日志记录的新 AI 插件变量、AI 插件中对 AI/ML API
提供程序的支持、基于请求正文的路由匹配、request-id 插件中对 KSUID 算法的支持等等。
+
+- [Apache APISIX 3.14.1
正式发布](https://apisix.apache.org/zh/blog/2025/10/17/release-apache-apisix-3.14.1/)
+
+ 我们很高兴地宣布 Apache APISIX 3.14.1 版本已经发布。该版本带来一则修复以改善用户体验。
