Skip to main content
Case StudiesEcosystemAuthenticationPluginsCommunityVulnerabilities

Release Apache APISIX 2.9

· 3 min read
Zexuan Luo

Apache APISIX version 2.9 is released!

Apache APISIX version 2.9 is officially released! 🎉 This release has 30+ developers, 100+ PR submissions, 2 new features, and further improved support for plugins, come and learn about the new features in Apache APISIX 2.9!

New Plugin: authz-casbin

The Casbin community has contributed authz-casbin to APISIX plugins/authz-casbin.md) plugin to APISIX, and in the new APISIX 2.9 release, APISIX can combine Casbin to do granular permission management at the route level.

Casbin is an open source access control framework that supports configuration to decide whether to allow a certain access operation. With the authz-casbin plugin, we can do multiple roles of access control in one route at the same time.

This control can be set either through a configuration file or through the APISIX Control Plane; it can take effect for a given route or set global defaults. It is very flexible.

If you are interested in this plugin, you are welcome to read Authorization with Casbin in Apache APISIX.

New Feature: Dynamic Configuration of real-ip at Route Level

Apache APISIX version 2.9 now supports dynamic configuration of real-ip at the route level!

The new version adds the real-ip plugin, which dynamically changes the IP and port of the client seen by APISIX.

We can use this plugin to dynamically set real-ip parameters.

{
    "plugins": {
        "real-ip": {
            "source": "http_x_forwarded_for",
            "trusted_addresses": ["127.0.0.0/24"]
        }
    }
}

Improvement: External Plug-in Mechanism

Apache APISIX version 2.9 further improves the support for external plugins with two major changes:

  1. When sending a plugin configuration to Plugin Runner, a unique key is sent. because APISIX is a multi-process architecture, in the past, a plugin configuration was sent several times, causing Plugin Runner to update the plugin configuration repeatedly. Now, with this unique key, Plugin Runner can identify duplicate configurations. This makes it possible to implement a plug-in inside Plugin Runner that limits flow!

  2. Add a mechanism to get APISIX information from Plugin Runner in the reverse direction. In addition to the request header and request path information sent from APISIX to Plugin Runner, Plugin Runner can also query information from APISIX in the reverse direction. The Var API has been implemented in the Go Plugin Runner implementation to use this mechanism to get information about Nginx variables such as the request_time of the request.

The Go Plugin Runner, which includes this change, will be released next week Version 0.2.0 will be released next week, so stay tuned!

Improvement: Existing Plug-ins Enhancement

APISIX version 2.9 improves the functionality of existing plugins with two major changes:

  1. the request-id plugin supports ID generation via the snowflake algorithm. the snowflake ID generation algorithm is a distributed ID generation mechanism, which generates The snowflake ID generation algorithm is a distributed ID generation mechanism that combines machine IDs, timestamps, and generation sequences. We use etcd to ensure that each worker is assigned a unique machine ID.

  2. The error-log-logger plugin supports reporting error logs to skywalking, adding to the observability of APISIX. This adds to the observability of APISIX.

Download

Download Apache APISIX 2.9

Table of Contents