#What are external plugin and plugin runner
APISIX supports writing plugins in Lua. This type of plugins will be executed inside APISIX. Sometimes you want to develop plugin in other languages, so APISIX provides sidecars that loading your plugins and run them when the requests hit APISIX. These sidecars are called plugin runners and your plugins are called external plugins.
#How does it work
When you configure a plugin runner in APISIX, APISIX will run the plugin runner as a subprocess. The process will belong to the same user of the APISIX process. When we restart or reload APISIX, the plugin runner will be restarted too.
Once you have configured
ext-plugin-* plugins for a given route, the requests
which hit the route will trigger RPC call from APISIX to the plugin runner via
The plugin runner will handle the RPC call, create a fake request at its side, run external plugins and return the result back to APISIX.
The target external plugins and the execution order are configured in the
plugins. Like other plugins, they can be enabled and reconfigured on the fly.
#How is it implemented
If you are instested in the implementation of Plugin Runner, please refer to The Implementation of Plugin Runner.
#Supported plugin runners
- Java: https://github.com/apache/apisix-java-plugin-runner
- Go: https://github.com/apache/apisix-go-plugin-runner
- Python: https://github.com/apache/apisix-python-plugin-runner
#Configuration for plugin runner in APISIX
To run plugin runner in the prod, add the section below to
cmd: ["blah"] # replace it to the real runner executable according to the runner you choice
Then APISIX will manage the runner as its subprocess.
Note: APISIX can't manage the runner on the Mac in
During development, we want to run the runner separately so that we can restart it without restarting APISIX first.
By specifying the environment variable
APISIX_LISTEN_ADDRESS, we can force the runner to
listen to a fixed address.
will force the runner to listen to
Then you need to configure APISIX to send RPC to the fixed address:
# cmd: ["blah"] # don't configure the executable!
path_for_test: "/tmp/x.sock" # without 'unix:' prefix
In the prod environment,
path_for_test should not be used and the unix socket
path will be generated dynamically.
#When managing by APISIX, the runner can't access my environment variable
v2.7, APISIX can pass environment to the runner.
However, Nginx will hide all environment variables by default. So you need to
declare your variable first in the
#APISIX terminates my runner with SIGKILL but not SIGTERM!
v2.7, APISIX will stop the runner with SIGTERM when it is running on
However, APISIX needs to wait the runner to quit so that we can ensure the resource for the process group is freed.
Therefore, we send SIGTERM first. And then after 1 second, if the runner is still running, we will send SIGKILL.