[DISCUSS] about the upstream request’s Host header

Hi, Community, Currently we use `pass_host` to mark how to process the upstream request’s Host header. It can be one of [`pass`, `node`, `rewrite`], the default option is `pass`. pass: Pass the client's host transparently to the upstream; node: Use the host configured in the node of upstream; rew

[VOTE] Release Apache APISIX Dashboard 2.5

er 5, then input "save" $ gpg --edit-key "Junxu Chen" $ gpg --verify apache-apisix-dashboard-2.5-src.tgz.asc apache-apisix-dashboard-2.5-src.tgz ``` 3. Unzip and Check files ```sh $ mkdir -p apisix-dashboard && tar zxvf apache-apisix-dashboard-2.5-src.tgz -C ./apisix-d

Re: [VOTE] Release Apache APISIX Dashboard 2.5

t; > ```sh > > > $ wget https://dist.apache.org/repos/dist/dev/apisix/KEYS > > > > > > $ wget > > > > > > > https://dist.apache.org/repos/dist/dev/apisix/apisix-dashboard-2.5/apache-apisix-dashboard-2.5-src.tgz.asc > > > > > > $

Re: [VOTE] Release Apache APISIX Dashboard 2.5

@Ming Wen I slacked off, and it was caused by packaging directly in my working directory. On Fri, 26 Mar 2021 at 09:09, Ming Wen wrote: > Hi, junxu, > what's the problem? > > Thanks, > Ming Wen, Apache APISIX PMC Chair > Twitter: _WenMing > > > JunXu Chen

[VOTE] Release Apache APISIX Dashboard 2.5 Round 2

-2.5-src.tgz.sha512 $ gpg --import KEYS # Input "trust", then input number 5, then input "save" $ gpg --edit-key "Junxu Chen" $ gpg --verify apache-apisix-dashboard-2.5-src.tgz.asc apache-apisix-dashboard-2.5-src.tgz ``` 3. Unzip and Check files ```sh $ mkdir -p apisi

[VOTE][RESULT] Release Apache APISIX Dashboard 2.5

Hi, community, Release vote for Apache APISIX Dashboard 2.5 has PASSED and closed now. 3 PMC +1 votes: - Chao Zhang - Xiran Liu - Zhiyuan Ju Vote thread: https://lists.apache.org/thread.html/rd4f8a06c4623a47c0b2d2feaa289fda60e51156af4167c0444713dce%40%3Cdev.apisix.apache.org%3E I will continue

[ANNOUNCE] Apache APISIX Dashboard 2.5 has been released

Hi folks, The Apache APISIX community is glad to announce that Apache APISIX Dashboard 2.5 has been released. Apache APISIX is a cloud-native microservices API gateway, delivering the ultimate performance, security, open-source and scalable platform for all your APIs and microservices. Apache AP

Re: [VOTE] Relase Apache APISIX 2.5

+1 binding I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - All source file have ASF headers if necessary - Build successfully on Centos8 On Sat, 3 Apr 2021 at 15:21, Zhiyuan Ju wrote: > +1 binding > > I just checked: > > - All

[DISCUSS] Support HTTPS for Apache APISIX Dashboard

Hi, Community, Now APISIX Dashboard does not support HTTPS access, which is not safe and easy to be hijacked and sniffed. We should support HTTPS access. We have two options to support HTTPS. Option 1 Use APISIX to proxy Dashboard, and APISIX provides HTTPS support. Generally, people will not di

Re: [DISCUSS] Run manager-api of APISIX dashboard as OS daemon

unit file that runs it as a systemd service that will > work for most of the Linux system. However, after discussing with Junxu > Chen we concluded that we should go for a platform-independent way to > achieve this instead of writing configuration files for each platform. > > So the que

Re: [VOTE] Apache apisix-ingress-controller version 0.5.0

+1 I checked: - download link are fine - gpg signature is fine - has ASF header - has LICENSE and NOTICE files - build successfully on Ubuntu 18.04 On Sat, 10 Apr 2021 at 15:19, Chao Zhang wrote: > Hello, Community, > > This is a call for the vote to release Apache apisix-ingress-controller >

Re: [DISCUSS] Run manager-api of APISIX dashboard as OS daemon

sure, it includes web. On Sat, 10 Apr 2021 at 21:33, Zhiyuan Ju wrote: > Hi, > > Just to make sure, will this service including web by default? > > Currently, Dashboard consists web & manager api ^_^ > > JunXu Chen 于2021年4月10日 周六下午9:08写道： > > > hi, B

[DISCUSS] release a new version of Apache APISIX Dashboard

At present, Dashboard and APISIX are released at very close time each month, but Dashboard is one version behind each time, which means that after APISIX releases a new version, users need to wait for nearly a month to use a new version of Dashboard that matches APISIX. In order to solve this prob

[VOTE] Release Apache APISIX Dashboard 2.6

t number 5, then input "save" $ gpg --edit-key "Junxu Chen" $ gpg --verify apache-apisix-dashboard-2.6-src.tgz.asc apache-apisix-dashboard-2.6-src.tgz ``` 3. Unzip and Check files ```sh $ mkdir -p apisix-dashboard && tar zxvf apache-apisix-dashboard-2.6-src.tgz -C ./a

[VOTE][RESULT] Release Apache APISIX Dashboard 2.6

Hi community, Release vote for Apache APISIX Dashboard 2.6 has PASSED and closed now. 3 PMC +1 votes: - Chao Zhang - Zhiyuan Ju - Junxu Chen 6 non-binding +1 votes: - Daming - Jaycean - Ayush das - kishani kandasamy - Qi Guo - Lei Qian Vote thread: https://lists.apache.org/thread.html

[ANNOUNCE] Apache APISIX Dashboard 2.6 has been released

Hi folks, The Apache APISIX community is glad to announce that Apache APISIX Dashboard 2.6 has been released. Apache APISIX is a cloud-native microservices API gateway, delivering the ultimate performance, security, open-source and scalable platform for all your APIs and microservices. Apache AP

Re: [feature]apisix-dashboard: Config export and import,for migrate apisix.

There are already routing-related data import and export, and it is compatible with OpenAPI. Could we implement this feature on this basis? On Fri, 14 May 2021 at 15:22, Peter Zhu wrote: > Hello, > > That sounds good. Can you design the field that we need in the JSON object? > And there is a s

Re: [DISUCSS] add Semantic Pull Requests App to apisix-java-plugin-runner

nice +1 On Wed, 19 May 2021 at 22:12, Zhiyuan Ju wrote: > That’s good for projects and contributors > > ZhengSong Tu 于2021年5月19日 周三下午5:16写道： > > > good idea. > > +1 from me. > > > > Chao Zhang 于2021年5月19日周三 下午4:42写道： > > > > > That’s a good idea. +1 From me. > > > > > > Chao Zhang > > > https:/

[VOTE] Release Apache APISIX Dashboard 2.6.1

trust", then input number 5, then input "save" $ gpg --edit-key "Junxu Chen" $ gpg --verify apache-apisix-dashboard-2.6.1-src.tgz.asc apache-apisix-dashboard-2.6.1-src.tgz ``` 3. Unzip and Check files ```sh $ mkdir -p apisix-dashboard && tar zxvf apache-apis

Re: [VOTE] Release Apache APISIX Dashboard 2.6.1

Hi, Community, A patched version should only contain bug fixes, we will close this VOTE and have to wait for RC2. On Sun, 23 May 2021 at 12:52, JunXu Chen wrote: > > Hello, Community, > > This is a call for the vote to release Apache APISIX Dashboard version > 2.6.1. &g

Re: [VOTE] Release Apache APISIX Dashboard 2.6.1

21 at 17:39, JunXu Chen wrote: > Hi, Community, > > A patched version should only contain bug fixes, we will close this VOTE > and have to wait for RC2. > > > On Sun, 23 May 2021 at 12:52, JunXu Chen wrote: > >> >> Hello, Community, >> >> This is a

[VOTE] Release Apache APISIX Dashboard 2.7

t number 5, then input "save" $ gpg --edit-key "Junxu Chen" $ gpg --verify apache-apisix-dashboard-2.7-src.tgz.asc apache-apisix-dashboard-2.7-src.tgz ``` 3. Unzip and Check files ```sh $ mkdir -p apisix-dashboard && tar zxvf apache-apisix-dashboard-2.7-src.tgz -C ./a

Re: [VOTE] Release Apache APISIX Dashboard 2.6.1

OK On Mon, 24 May 2021 at 08:23, Ming Wen wrote: > I don’t think so. > Why not add patch on the 2.6 version? > > JunXu Chen 于2021年5月23日 周日下午9:56写道： > > > Cherry-pick bugfix modifications based on the 2.6 branch will conflict > with > > the master branch, and can&#x

Re: [VOTE] Relase Apache APISIX 2.6

+1 binding I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 18.04.5 On Sun, 23 May 2021 at 09:28, Ayush das wrote: > +1 (non-binding) > > 1. Links working fine > 2. Checksums, signatures passed su

[VOTE] Release Apache APISIX Dashboard 2.6.1 Round 2

apache-apisix-dashboard-2.6.1-src.tgz.sha512 $ gpg --import KEYS # Input "trust", then input number 5, then input "save" $ gpg --edit-key "Junxu Chen" $ gpg --verify apache-apisix-dashboard-2.6.1-src.tgz.asc apache-apisix-dashboard-2.6.1-src.tgz ``` 3. Unzip and Check

Re: [VOTE] Release Apache APISIX Dashboard 2.6.1 Round 2

eed to send a cancel voting mail > before raising new voting. > > > Haochao Zhuang(@dmsolr) > > JunXu Chen 于2021年5月24日周一 下午12:43写道： > > > > Hello, Community, > > > > Because the previous package has extra features, we have to make a new > vote. >

Re: [VOTE] Release Apache APISIX Dashboard 2.7

This vote has been cancelled, and let us continue with the 2.6.1 release process. On Mon, 24 May 2021 at 08:25, Ming Wen wrote: > -1 binding for release 2.7 version > Please release bugfix 2.6.1 as discussed before > > JunXu Chen 于2021年5月23日 周日下午11:31写道： > > > Hello, Commu

Re: [feature]apisix-dashboard: Config export and import,for migrate apisix.

hi @fregie OpenAPI is a popular api interface specification, the route export/import feature compatible with OpenAPI is to facilitate users to import their business APIs to APISIX. I accept that they are two different features. Wait for opinions from others. On Sat, 22 May 2021 at 15:03, Zhiyu

Re: [feature]apisix-dashboard: Config export and import,for migrate apisix.

r Zhu 于2021年5月25日周二 下午11:29写道： > > > > > Hi @fregie > > > > > > I had reviewed your PR, the way import and export are OK. > > > But I recommend we can add a `secret` parameter in this API. Then we > can > > > add the `secret` fie

Re: [feature]apisix-dashboard: Config export and import,for migrate apisix.

The first email in this thread: https://lists.apache.org/thread.html/r6f5036941c98ae75c4ff47361aaa2a0cf889ef90e5f7d524f34fa45c%40%3Cdev.apisix.apache.org%3E On Wed, 26 May 2021 at 08:41, JunXu Chen wrote: > > hi community > > The format of this thread is broken, and we are discus

Re: [VOTE][New Subproject] Establish APISIX Go plugin runner

+ 1 On Wed, 26 May 2021 at 10:18, Zexuan Luo wrote: > Hi Dev Team: > > We would like to start a new proposal about creating APISIX Go plugin > runner project. > > APISIX Go plugin runner is a sub-project of APISIX as part of APISIX > Multilanguage Support and supports APISIX running Go plugins.

[VOTE][RESULT] Release Apache APISIX Dashboard 2.6.1

Hi, community, Release vote for Apache APISIX Dashboard 2.6.1 has PASSED and closed now. 3 PMC +1 votes: - Zexuan Luo - YuanSheng Wang - Xiran Liu Vote thread: https://lists.apache.org/thread.html/r05c9fb291b316dc10032bccd4a5eb6821a9b759b49639449aafb40be%40%3Cdev.apisix.apache.org%3E I will co

[ANNOUNCE] Apache APISIX Dashboard 2.6.1 has been released

Hi folks, The Apache APISIX community is glad to announce that Apache APISIX Dashboard 2.6.1 has been released. Apache APISIX is a cloud-native microservices API gateway, delivering the ultimate performance, security, open-source and scalable platform for all your APIs and microservices. Apache

CVE-2021-33190: Apache APISIX Dashboard: Bypass network access control

Severity: important Description: In Apache APISIX Dashboard version 2.6, we changed the default value of listen host to 0.0.0.0 in order to facilitate users to configure external network access. In the IP allowed list restriction, a risky function was used for the IP acquisition, which made it po

[VOTE] Release Apache APISIX Dashboard 2.7

t number 5, then input "save" $ gpg --edit-key "Junxu Chen" $ gpg --verify apache-apisix-dashboard-2.7-src.tgz.asc apache-apisix-dashboard-2.7-src.tgz ``` 3. Unzip and Check files ```sh $ mkdir -p apisix-dashboard && tar zxvf apache-apisix-dashboard-2.7-src.tgz -C ./a

Re: [VOTE]Apache apisix-ingress-controller GA version 1.0.0

+1 I checked: - download links are fine - gpg signature is fine - has ASF header - has LICENSE and NOTICE files - build successfully on Ubuntu 18.04 On Mon, 14 Jun 2021 at 15:51, Chao Zhang wrote: > Hi, there! > > +1 (binding) from me, I have checked the following items: > > 1. All links are va

[VOTE][RESULT] Release Apache APISIX Dashboard 2.7

Hi, community, Release vote for Apache APISIX Dashboard 2.7 has PASSED and closed now. 3 PMC +1 votes: - Chao Zhang - Xiran Liu - Zexuan Luo 4 non-binding +1 votes: - Ayush das - Peter Zhu - Bisakh Mondal - 孙毅 Vote thread: https://lists.apache.org/thread.html/ra2b7f5ef03bf0de9a645f15ff5c536396b1

[ANNOUNCE] Apache APISIX Dashboard 2.7 has been released

Hi folks, The Apache APISIX community is glad to announce that Apache APISIX Dashboard 2.7 has been released. Apache APISIX is a cloud-native microservices API gateway, delivering the ultimate performance, security, open-source and scalable platform for all your APIs and microservices. Apache AP

Re: [VOTE] Relase Apache APISIX 2.7 Round 2

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 18.04.5 On Mon, 21 Jun 2021 at 23:14, Zexuan Luo wrote: > Hello, Community, > This is a call for the vote to release Apache APISIX vers

Re: [VOTE] Relase Apache APISIX Java Plugin Runner 0.1 Round 2

+1 I checked: - download links are fine - signatures are fine - build success on Ubuntu 18.04.5 On Tue, 6 Jul 2021 at 16:25, Daming wrote: > +1 non-binding > > Checked: > 1. All download links are valid; > 2. The signature and checksum are valid; > 3. LICENSE and NOTICE files exist; > > Chao

Re: [DISCUSS] Make apisix and apisix-dashboard version consistent

hi, I prefer to name the next version of the Dashboard as `2.8-rc1`, which can be used with Apache APISIX 2.7. And then 2.8 is used with Apache APISIX 2.8. On Thu, 8 Jul 2021 at 17:25, ZhengSong Tu wrote: > Hi folks, > > Recently, many users have reported that after installing apisix and apis

Re: [VOTE] Relase Apache APISIX Go Plugin Runner 0.1.0

+1 binding I checked: - Download links are valid - Checksums and GPG signatures are valid - License and NOTICE files are good - Build and run successfully on Ubuntu 18.04.5 On Wed, 14 Jul 2021 at 08:20, Ayush das wrote: > +1 non-binding > > I have checked: > * all download link

Re: [DISCUSS] support RESTful API for Apache APISIX projects

Agree +1 I think we still need to keep the `code` field. The FE needs to implement i18n according to it. Unless `message` is semantic and can be used as a key of i18n. On Thu, 22 Jul 2021 at 00:02, Ming Wen wrote: > I don't think the `code` filed is useful, HTTP response code is enough. >

Re: [VOTE][New Subproject] Establish APISIX Python plugin runner

+1 On Thu, 22 Jul 2021 at 10:25, Jintao Zhang wrote: > +1 > > SGTM. > > Zexuan Luo 于2021年7月22日周四 上午9:51写道： > > > +1 > > > > I have just talked with JinChao Shuai. He thinks he can make the first > > release of Python runner at the end of August. So I think we can make > > a try for it. > > > >

Re: [DISCUSS] support version mismatch alert for Dashboard and Apache APISIX

Agree + 1, especially with the Long-term solution. The Manager API did not bring many features but caused many problems due to the synchronization of the JSON Schema. On Mon, 26 Jul 2021 at 00:44, Xiran Liu wrote: > Agree, and looking forward to the long term solution, we need a unified > API

Re: [DISCUSS] support RESTful API for Apache APISIX projects

gt; > manual logical and extendable code). > > > > > > Why not list all API cases then have a choice? > > > > > > Best Regards! > > > @ Zhiyuan Ju <https://github.com/juzhiyuan> > > > > > > > > > Ming Wen 于2021年7月22日周四

Re: [VOTE] Release Apache APISIX 2.8

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 18.04.5 On Mon, 26 Jul 2021 at 09:23, Ayush das wrote: > +1 non-binding > > checklist: > 1. All download links are fine; > 2. Checksum

Re: [VOTE] Enable GitHub Discussions on APISIX

+1 On Sat, 7 Aug 2021 at 08:42, Jintao Zhang wrote: > +1 > > Zexuan Luo 于2021年8月6日周五 上午10:41写道： > > > +1 > > > > tzssangglass 于2021年8月6日周五 上午10:36写道： > > > > > Hi, community, > > > > > > We would like to enable GitHub Discussions on APISIX. > > > > > > The discuss for this: > > > https://www.m

Re: [DISCUSS] New user authentication framework for Dashboard

+1 LGTM This is more convenient for users to manage the account and password of the dashboard On Tue, 10 Aug 2021 at 21:08, Zeping Bai wrote: > Hi, sorry, I didn't choose to reply to the email correctly just now, so > I'll resend it for you. > > About "ease of use": > 1. In the current version,

Re: [DISCUSS] add cache verification tool in APISIX dashboard

hi @Cheng Geng It's used to verify whether the cached data in Dashboard is consistent with the data actually stored in ETCD. It's just a cache verification tool. This tool is very helpful for analyzing bugs. On Tue, 10 Aug 2021 at 21:52, 程庚 <842391...@qq.com.invalid> wrote: > Hi,Community, > >

[VOTE] Release Apache APISIX Dashboard 2.7.1 Round 2

-apisix-dashboard-2.7.1-src.tgz.sha512 $ gpg --import KEYS # Input "trust", then input number 5, then input "save" $ gpg --edit-key "Junxu Chen" $ gpg --verify apache-apisix-dashboard-2.7.1-src.tgz.asc apache-apisix-dashboard-2.7.1-src.tgz ``` 3. Unzip and Check

[VOTE][RESULT] Release Apache APISIX Dashboard 2.7.1

Hi, community, Release vote for Apache APISIX Dashboard 2.7.1 has PASSED and closed now. 3 PMC +1 votes: - Zexuan Luo - Zhiyuan Ju - Xiran Liu 4 non-binding +1 votes: - Baoyuan - Zeping Bai - Daming - ZhengSong Tu Vote thread: https://lists.apache.org/thread.html/ra400bed43f5a96620a5ba45e54571b

[ANNOUNCE] Apache APISIX Dashboard 2.7.1 has been released

Hi folks, The Apache APISIX community is glad to announce that Apache APISIX Dashboard 2.7.1 has been released. Apache APISIX is a cloud-native microservices API gateway, delivering the ultimate performance, security, open-source and scalable platform for all your APIs and microservices. Apache

Re: [VOTE] Release Apache APISIX 2.9

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 18.04.5 On Wed, 25 Aug 2021 at 13:54, Ayush das wrote: > +1 > > I check: > 1. All download links are fine; > 2. Checksums and PGP signat

Re: [DISCUSS] support RESTful API for Apache APISIX projects

gt; > > > > > > > > > > > > > > > > > > > Regards, > > > > > > > > > Shyamal > > > > > > > > > > > > > > > > &

Re: [VOTE] Relase Apache APISIX Python Plugin Runner 0.1.0

+1 binding I checked: - Download links are valid - Checksums is fine - Signature is fine - LICENSE and NOTICE files are good On Thu, 2 Sept 2021 at 12:39, Ayush das wrote: > +1 non-binding > I have checked the following: > 1. Download links works fine; > 2. Checksums and PGP signatures are goo

Re: [VOTE] Release Apache APISIX Dashboard 2.8.0

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 18.04.5 On Tue, 7 Sept 2021 at 08:49, 孙毅 wrote: > +1 non-binding > > I have checked: > > 1. All links are valid > 2. Signature and chec

Re: [DISCUSS] Apply for a docker hub account to realize automatic push dashboard images to docker hub

+1 agree On Fri, 10 Sept 2021 at 09:07, Peter Zhu wrote: > +1 agree. It's useful. > > Qi Guo 于2021年9月10日周五 上午9:05写道： > > > +1 agree it would be much easier to use > > > > Xiran Liu 于2021年9月10日周五 上午8:58写道： > > > > > +1 agree , it is really helpful for us to update docker image > > > > > > On 20

Re: [DISCUSS] Use apisix-openresty instead of openresty

+1 `apisix-base` is better. On Tue, 28 Sept 2021 at 15:55, YuanSheng Wang wrote: > +1 `apisix-base` is better. > > > On Tue, Sep 28, 2021 at 3:45 PM wei jin wrote: > > > I think `apisix-base` will be better than `apisix-openresty`. > > > > Zexuan Luo 于2021年9月28日周二 下午3:38写道： > > > > > What abo

Re: [VOTE] Release Apache APISIX 2.10.1

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 18.04.5 On Wed, 27 Oct 2021 at 09:28, Chao Zhang wrote: > +1 (binding), I have checked: > > 1. All links mentioned are correct; > 2. Sig

Re: [ANNOUNCE] New Committer: Bisakh Mondal

Congratulation! On Mon, 20 Dec 2021 at 09:43, yeliang wang wrote: > > Congrats! > > Zhiyuan Ju 于2021年12月19日周日 10:33写道： > > > Hi Community, > > > > Our contributor Bisakh Mondal[1] helps our community to spread the > > ecosystem by integrating with DataDog, Azure Functions, AWS Lambda, and so > >

[VOTE] Release Apache APISIX Dashboard 2.10.1

# Input "trust", then input number 5, then input "save" $ gpg --edit-key "Junxu Chen" $ gpg --verify apache-apisix-dashboard-2.10.1-src.tgz.asc apache-apisix-dashboard-2.10.1-src.tgz ``` 3. Unzip and Check files ```sh $ mkdir -p apisix-dashboard && tar zxvf

Re: [Proposal] Drop the support of Tengine

agree +1 On Thu, 23 Dec 2021 at 15:50, JinChao Shuai wrote: > > agree +1 > > YuanSheng Wang 于2021年12月22日周三 23:10写道： > > > agree +1 > > > > the Tengine is not active recently. > > > > > > On Wed, Dec 22, 2021 at 1:45 PM Bozhong Yu wrote: > > > > > Agree, +1 to drop the support of Tengine > > > >

[VOTE][RESULT] Release Apache APISIX Dashboard 2.10.1

Hi community, Release vote for Apache APISIX Dashboard version 2.10.1 has PASSED and closed now. 3 PMC +1 votes: - Zhiyuan Ju - Zexuan Luo - YuanSheng Wang 5 non-binding +1 votes: - Zeping Bai - Qi Guo - Tsangleslie - Baoyuan - Bozhong Yu Vote thread: https://lists.apache.org/thread/c9z7nlgzr6vl

[ANNOUNCE] Apache APISIX Dashboard 2.10.1 has been released

Hi folks, The Apache APISIX community is glad to announce that Apache APISIX Dashboard 2.10.1 has been released. Apache APISIX is a cloud-native microservices API gateway, delivering the ultimate performance, security, open-source and scalable platform for all your APIs and microservices. Apache

CVE-2021-45232: Apache APISIX Dashboard: security vulnerability on unauthorized access

Severity: high Description: In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework `droplet` on the basis of framework `gin`, all APIs and authentication middleware are developed based on framework `droplet`, but some API directly use the interface

Re: [DISCUSS] Backport CVE-2021-45232 fix code

Support backport the fix +1 On Wed, 29 Dec 2021 at 17:30, Tsangleslie wrote: > Agreed to backport the fix. For users using APISIX in prod environment, > It will be a long day to upgrade both APISIX and APISIX dashboard. > > > > On 29 Dec 2021, at 5:16 PM, Zhiyuan Ju wrote: > > > > I also suppo

Re: [DISCUSS] Backport CVE-2021-45232 fix code

think we need to be compatible with so many old versions. Is > there > > a quick fix guide? For example, disable these two APIs > > > > Thanks, > > Ming Wen, Apache APISIX PMC Chair > > Twitter: _WenMing > > > > > > Baoyuan 于2021年12月30日周四 10:04写道：

Re: [VOTE]Apache apisix-ingress-controller GA version 1.4.0

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 20.04.3 On Fri, 31 Dec 2021 at 18:44, ZhengSong Tu wrote: > +1 (non-binding) > > I checked: > - All links are valid > - LICENSE and NOTI

Re: [DISCUSS] proposal: add plugin development kit doc for APISIX

Thanks for your awesome proposal. I think the doc could start from how to deploy the development environment, how to run the example plug-in, how to debug, and then introduce how to call APISIX.core, and link up the whole process. On Fri, 31 Dec 2021 at 18:29, tzssangglass wrote: > Hi, communi

Re: [DISCUSS] Backport CVE-2021-45232 fix code

d[1]. > > Thanks to JunXu Chen! > > [1] https://github.com/apache/apisix-dashboard/issues/2275 > > JunXu Chen 于2021年12月30日周四 14:22写道： > > > OK, let's create an issue in APISIX Dashboard repo and show how to > disable > > the two APIs and rebuild. > > &

Re: [VOTE] Release Apache APISIX 2.10.3

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 20.04.3 On Sat, 8 Jan 2022 at 19:15, Chao Zhang wrote: > +1 (binding) from me, I have checked: > > 1. All the download links are valid;

Re: [VOTE] Release Apache APISIX 2.12.1

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 20.04.3 On Tue, 8 Feb 2022 at 09:04, Yong Qian wrote: > +1 (no binding) > > I checked: > 1. All download links are OK. > 2. Checksum an

Re: [VOTE] Release Apache APISIX 2.10.4

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 20.04.3 On Tue, 8 Feb 2022 at 09:19, Leslie Tsang wrote: > +1 (no binding) > > I checked： > 1. All download links are OK. > 2. Checksum

Re: [VOTE] Release Apache APISIX Python Plugin Runner 0.2.0

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - The LICENSE and NOTICE files are good On Wed, 2 Mar 2022 at 20:17, Leslie Tsang wrote: > +1 no binding > > I checked: > - All download links are valid > - Checksums is OK > - Signature check is OK > -

Re: Dashboard OpenApi import bug

this issue, and we're seeking help from Xiran > > Liu and Junxu Chen, they're more familiar with this. > > > > Best Regards! > > @ Zhiyuan Ju <https://github.com/juzhiyuan> > > > > > > 吴治国 于2022年3月3日周四 17:19写道： > > > >> Hi Com

Re: [VOTE] Release Apache APISIX Dashboard 2.11.0

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 18.04.5 On Thu, 17 Mar 2022 at 19:10, Zhiyuan Ju wrote: > Hi, > > +1 (binding) > > I just checked: > > 1. All links are valid; > 2. I d

Re: [VOTE] Release Apache APISIX 2.13

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 18.04 On Wed, 23 Mar 2022 at 09:22, JinChao Shuai wrote: > +1 binding > > I have checked: > 1. All links are OK > 2. Signature and chec

Proposal: reduce connections between Manager API and etcd

# Background At present, the connection between the Manager API and etcd still follows the habit of the etcd v2 version, creating a watch connection for each resource, which will generate a large number of connections. # Purpose Reduce connections between Manager API and etcd, to reduce the load o

Re: [VOTE] Release Apache APISIX 2.13.1

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 18.04 On Fri, 15 Apr 2022 at 21:07, wei jin wrote: > +1 binding > > I checked： > 1. Download links are OK. > 2. Checksum is OK. > 3. LI

Re: [VOTE] Release Apache APISIX 2.14.0

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 20.04 On Thu, 19 May 2022 at 22:20, Jintao Zhang wrote: > +1 (binding) > > I have checked: > > 1. all links are valid; > 2. signature a

Re: [VOTE] Relase Apache APISIX Java Plugin Runner 0.3.0

+1 binding I checked: - download links are fine - signatures are fine - build success on Ubuntu 18.04 On Tue, 16 Aug 2022 at 21:38, Chao Zhang wrote: > +1 binding from me. I have checked: > > 1. License and NOTICE files exist > 2. Checksum and signature are good > 3. All links valid > > tzssan

Re: [VOTE] Relase Apache APISIX Java Plugin Runner 0.4.0

+1 binding I checked: - download links are fine - signatures are fine - build success on Ubuntu 20.04 On Mon, 7 Nov 2022 at 17:52, Zexuan Luo wrote: > +1 (binding) > > I checked： > 1. Download links are OK. > 2. Checksum and signature are OK. > 3. LICENSE and NOTICE files exist. > 4. Building o

Re: [VOTE] Release Apache APISIX 2.15.1

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 20.04 On Mon, 14 Nov 2022 at 14:47, ZhengSong Tu wrote: > +1 (binding) > > I have checked: > 1. All download links are OK; > 2. Signa

Re: [VOTE] Release Apache APISIX Dashboard 2.14.0

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 20.04 On Mon, 5 Dec 2022 at 10:02, Jinhua Luo wrote: > +1 (non-binding) > > wei liu 于2022年12月2日周五 17:35写道： > > > > +1 (non-binding) >

Re: Proposal: Advanced LDAP authentication plugin

Thank you for your proposal, nice! But why not add these features to the existing plugin? There is no related description in the issue. Thanks. On Tue, 28 Feb 2023 at 16:17, Zeping Bai wrote: > Currently, APISIX has provided a simple LDAP authentication plugin that > supports simple bind functi

Re: [VOTE] Release Apache APISIX 3.3.0

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 23.04 (by docker container) On Sun, 30 Apr 2023 at 15:27, Zeping Bai wrote: > +1 (binding) > > I checked： > 1. Download links are OK.

Re: [VOTE] Release Apache APISIX 3.2.1

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 20.04 On Tue, 30 May 2023 at 21:51, Zhiyuan Ju wrote: > Hi, > > +1 from me > > I have checked： > > 1. All links are correct. > > 2. Che

Re: [VOTE] Release Apache APISIX 3.8.0

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 22.04 On Mon, 15 Jan 2024 at 09:57, Zeping Bai wrote: > +1 (binding) > > I checked: > 1. Download links are OK. > 2. Checksum and signat

Re: [VOTE] Release Apache APISIX 3.9.0

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 22.04 On Sat, 23 Mar 2024 at 22:39, Zhiyuan Ju wrote: > Hi, > > +1 (binding) > > I have checked the following items: > > 1. Download l

Re: [VOTE] Release Apache APISIX 3.8.1

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 22.04 On Wed, 24 Apr 2024 at 17:47, YuanSheng Wang wrote: > hi: > > +1 (binding) > > I checked: > > 1. All download links are fine > 2.

Re: [VOTE] Release Apache APISIX 3.10.0

+1 (binding) I checked: - Download links are valid - Checksums and PGP signatures are valid - LICENSE and NOTICE files are good - Build successfully on Ubuntu 22.04 On Mon, 12 Aug 2024 at 14:59, Zeping Bai wrote: > +1 (binding) > > I checked: > 1. Download links are OK. > 2. Checksum and signat

Re: [DISCUSS]Does the APISIX need to write the configuration to the local disk?

+1 I think we could make a backup when configuration is changed, so APISIX can uses the backup when ETCD can't be connected. On Tue, Nov 5, 2019 at 2:03 PM YuanSheng Wang wrote: > Hi Ming: > > This is two different features. > > When the service is restarted and etcd is not working properly,

Re: [DISCUSS]Does the APISIX need to write the configuration to the local disk?

sure , that's what I mean.. On Tue, Nov 5, 2019 at 2:23 PM Ming Wen wrote: > The local configuration file will only be useful when etcd cluster is down > and APISIX service is restarted at the same time. > > Thanks, > Ming Wen, Apache APISIX > Twitter: _WenMing > >

Re: [VOTE] Release Apache APISIX (Incubating) 0.9-RC1 ROUND 2

+1 ( binding ) I checked: - incubating in name - signatures and hashes fine - DISCLAIMER exists - LICENSE and NOTICE good - no unexpected binary files in release - all source file have ASF headers - compiled and ran QuickStart on macOS On Tue, Nov 19, 2019 at 1:38 PM ke tang wrote: > +1 (bindin

Re: [DISCUSS] archive or delete dashborad-built repository

I should prefer to delete the repo rather than archiving it. Because we could build dashboard from source. And archiving repo may cause compatibility issues . On Wed, Nov 27, 2019 at 8:07 PM Linsir Wu wrote: > I would prefer archiving it too. > > Ming Wen 于2019年11月26日周二 下午3:56写道： > > > hello,

Re: [VOTE] Release Apache APISIX (Incubating) 1.0-RC1

+1 ( binding ) I checked: - download links are valid - signatures and hashes fine - DISCLAIMER exists - LICENSE and NOTICE good - no binary files in release - all source file have ASF headers - compiled and ran quick start on macOS On Fri, Jan 3, 2020 at 4:10 PM Ming Wen wrote: > Hi, > +1 (bind

Re: [DISCUSS] Supports more upstream parameters in `service`

> > curl -i http://127.0.0.1:9080/apisix/admin/services/1 -X PUT -d ' > { > "upstream": { > "path": "/index.html", > "host": "foo.com", > "scheme": "http", > "type": "roundrobin", > "nodes": { > "39.97.63.215:80 ": 1 >

[DISCUSS] Apache Release of APISIX 1.1

Hello, community, According to the Apache APISIX tradition, a version will be released every month. After the last 1.0 release, Apache APISIX has made a lot of progress: Excluding merges, 17 authors have pushed 62 commits to master. On master, 117 files have changed and there have been 3672 additi

Re: [DISCUSS] Apache Release of APISIX 1.1

The release note is editing. It will be sent with the release vote. On Fri, Feb 14, 2020 at 3:09 PM Jan Li wrote: > Is there a release note? > > On Fri, Feb 14, 2020 at 3:01 PM junxu chen wrote: > > > Hello, community, > > According to the Apache APISIX tradition, a

  1   2   3   >