EcosystemHardening Apache APISIX with the OWASP's Coraza and Core RulesetThe Open Worldwide Application Security Project is an online community that produces freely available articles, methodologies, documentation, tools, and technologies in the fields of IoT, system softw...--OWASP websiteThe OWASP regularly publishes a Top 10 vulnerability report. The report targets vulnerabilities in web applications.In this post, I'd like to describe how to fix some of them via the Apache APISIX API Gateway.
EcosystemUnlock All-in-One Observability for APISIX with DeepFlowThis article aims to elucidate how to leverage DeepFlow's zero-code feature based on eBPF to construct an observability solution for APISIX.
CommunityBiweekly Report (January 15 - January 28)We have recently added the ocsp-stapling plugin within Apache APISIX. Please read the bi-weekly report for more details.
CommunityBiweekly Report (January 01 - January 14)We have recently made some additions and improvements to specific features within Apache APISIX. The updates include the newly added includereq_body option for some log-related plugins, supporting one-click compilation and installation of apisix and apisix-runtime from source code, the response-rewrite plugin supporting Brotli compression when using the filters.regex option, and supporting the uri_param variable when using the radixtree_uri_with_parameter routing engine. For additional information, please consult the bi-weekly report.
CommunityRelease Apache APISIX 3.8.0We are glad to present Apache APISIX 3.8.0 with exciting new features, bug fixes, and other improvements to user experiences.
CommunityBiweekly Report (December 18 - December 31)We have recently made some additions and improvements to specific features within Apache APISIX. The updates include the limit-count plugin configuration supporting environment variables, the response-rewrite plugin supporting gzip when using the filters.regex option, and upgrading OpenSSL 1.1.1 to OpenSSL 3.0 version. For additional information, please consult the bi-weekly report.
EcosystemAccess the Kafka Cluster by APISIX GatewayThis blog shows how to use Apache APISIX to develop a customize authorization plugin for the kafka cluster.
Case StudiesBuilding a Robust 'Highway' with APISIX: Gateway and Protocol Performance OptimizationAuthor: Xiaobin Wang, Apache Dubbo Committer, Senior Development Engineer at Zhengcaiyun. This article is based on a presentation given by Xiaobin Wang at the APISIX Shanghai Meetup in November 2023.
CommunityBiweekly Report (December 04 - December 17)We have recently made some additions and improvements to specific features within Apache APISIX. The updates include adding jwe decrypt and brotli plugins, adding more attributes to openid-connect plugin, allowing CORS plugin to support Timing-Allow-Origin, and using lua-resty-events as the default event mechanism. For additional information, please consult the bi-weekly report.