Apache APISIX®️ Plugin Hub

The plugin limits request rate using the leaky bucket method

The plugin limits request concurrency

The plugin Limits request rate by a fixed number of requests in a given time window

The proxy-cache Plugin can be used to cache the response from the Upstream

The request-validation Plugin can be used to validate the requests before forwarding them to an Upstream service

The proxy-mirror Plugin can be used to mirror client requests

The api-breaker Plugin implements circuit breaker functionality to protect Upstream services

The traffic split plugin allows users to incrementally direct percentages of traffic between various upstreams

The request-id Plugin adds a unique ID to each request proxied through APISIX

The attach-consumer-label Plugin injects labels from the authenticated consumer into the request context

The proxy-control Plugin dynamically controls the behavior of the NGINX proxy

The client-control Plugin can be used to dynamically control the behavior of NGINX to handle a client request, by setting the max size of the request body

The traffic-label Plugin evaluates labels on requests for traffic governance and routing

The response-rewrite Plugin rewrites the content returned by the Upstream and APISIX

The proxy-rewrite Plugin rewrites Upstream proxy information such as scheme, uri and host

The grpc-transcode Plugin converts between HTTP and gRPC requests

The grpc-web Plugin is a proxy Plugin that can process gRPC Web requests from JavaScript clients to a gRPC service

The body-transformer Plugin transforms request and response bodies between structured formats

The degraphql Plugin translates GraphQL queries into upstream REST requests

The exit-transformer Plugin transforms response bodies before APISIX sends them to the client

The fault-injection Plugin can be used to test the resiliency of your application. This Plugin will be executed before the other configured Plugins

The gm Plugin enables Guomi cryptographic algorithms in APISIX TLS processing

The mocking Plugin is used for mocking an API. When executed, it returns random mock data in the format specified and the request is not forwarded to the Upstream

An authentication plugin that needs to work with a Consumer to add key authentication to your Services

An authentication plugin that needs to work with a Consumer to securely authenticate a valid user requesting access

An authentication plugin that needs to work with a Consumer to add Basic Authentication to a Service or a Route

An authorization plugin that can be used to add authentication with Keycloak Identity Server

An authorization plugin that can be used to add centralized authentication with Casdoor

An authorization plugin providing a role-based access control system with wolf to a Route or a Service

An authentication plugin that provides authentication and introspection capability to APISIX

An authorization plugin can be used to access CAS (Central Authentication Service 2.0) IdP (Identity Provider) to do authentication, from the SP (service provider) perspective

An authentication plugin that needs to work with a Consumer to establish the integrity of incoming requests

An authorization plugin based on Lua Casbin supporting various access control models

An authorization plugin can be used to add LDAP authentication to a Route or a Service

The jwe-decrypt Plugin decrypts JWE tokens in incoming requests

The multi-auth Plugin supports multiple authentication methods on the same Route or Service

An authorization plugin can be used to integrate with Open Policy Agent

The forward-auth Plugin implements a classic external authentication model

The plugin can help you enable CORS easily

The plugin intercepts user requests with a set of block_rules

The plugin allows you to restrict access to a Service or a Route by either whitelisting or blacklisting IP addresses

The plugin allows you to restrict access to a Route or Service based on the User-Agent header with an allowlist and a denylist

The plugin can be used to restrict access to a Service or a Route by whitelisting/blacklisting the Referer request header

The plugin makes corresponding access restrictions based on different objects selected

Based on the Double Submit Cookie way, protect your API from CSRF attacks

The chaitin-waf Plugin integrates Chaitin SafeLine WAF inspection with APISIX

The oas-validator Plugin validates requests against an OpenAPI specification

The ocsp-stapling Plugin enables dynamic OCSP stapling for TLS certificates

The public-api Plugin is used for exposing an API endpoint through a general HTTP API router

The ai-proxy Plugin simplifies proxying requests to LLM providers compatible with the OpenAI API format

The ai-proxy-multi Plugin extends ai-proxy with load balancing, retries, fallbacks, and health checks for LLM providers

The ai-request-rewrite Plugin rewrites client requests with LLM-generated content before proxying upstream

The ai-rate-limiting Plugin limits LLM usage by tracking and throttling token consumption

The ai-prompt-decorator Plugin prepends and appends predefined prompts to user input

The ai-prompt-template Plugin applies predefined prompt templates and accepts values for declared variables

The ai-prompt-guard Plugin validates prompts against allow and deny patterns before forwarding them to LLM services

The ai-aws-content-moderation Plugin uses AWS Comprehend to detect and block toxic request content

The ai-aliyun-content-moderation Plugin uses Alibaba Cloud content moderation to inspect and block unsafe requests

The ai-rag Plugin adds retrieval-augmented generation by fetching relevant context from external data sources

Zipkin is an OpenTracing plugin

Skywalking uses its native Nginx LUA tracer to provide tracing, topology analysis, and metrics from service and URI perspective

The opentelemetry Plugin can be used to report tracing data according to the OpenTelemetry specification

The plugin exposes metrics in Prometheus Exposition format

The node-status Plugin can be used to get the status of requests to APISIX by exposing an API endpoint

Datadog is a monitoring plugin built into Apache APISIX to push metrics of different services into DatadogHQ via a locally run Datadog agent.

The http-logger Plugin pushes log data to HTTP and HTTPS servers

The skywalking-logger Plugin can be used to push access log data to SkyWalking OAP server of HTTP

Tcp-logger pushes Log data requests to TCP servers

Kafka-logger is a plugin which works as a Kafka client driver for the ngx_lua nginx module

The rocketmq-logger Plugin provides the ability to push logs as JSON objects to your RocketMQ clusters

Udp-logger pushes Log data requests to UDP servers

The clickhouse-logger Plugin is used to push logs to ClickHouse database

The syslog Plugin pushes log data to Syslog

The log-rotate Plugin is used to keep rotating access and error log files in the log directory at regular intervals

Error-log-logger is a plugin which pushes the log data of APISIX's error.log to TCP servers

The sls-logger Plugin pushes log data to Alibaba Cloud Log Service with RFC 5424

google-cloud-logging plugin is used to send the access log of Apache APISIX to the Google Cloud Logging Service

The splunk-hec-logging Plugin is used to forward logs to Splunk HTTP Event Collector (HEC) for analysis and storage

The file-logger Plugin is used to push log streams to a specific location

The loggly Plugin is used to forward logs to SolarWinds Loggly for analysis and storage

The loki-logger Plugin pushes access logs to Grafana Loki

The elasticsearch-logger Plugin is used to forward logs to Elasticsearch for analysis and storage

The tencent-cloud-cls Plugin uses TencentCloud CLSAPI to forward APISIX logs to your topic

There are two serverless Plugins in APISIX: serverless-pre-function and serverless-post-function.

The azure-functions Plugin is used to integrate APISIX with Azure Serverless Function as a dynamic upstream to proxy all requests for a particular URI to the Microsoft Azure Cloud

The openwhisk Plugin is used to integrate APISIX with the Apache OpenWhisk serverless platform

The aws-lambda Plugin is used for integrating APISIX with AWS Lambda as a dynamic upstream to proxy all requests for a particular URI to the AWS Cloud

The workflow plugin is used to introduce lua-resty-expr to provide complex traffic control features

The openfunction Plugin is used to integrate APISIX with CNCF OpenFunction serverless platform

The dubbo-proxy Plugin allows you to proxy HTTP requests to Apache Dubbo

The http-dubbo Plugin proxies HTTP requests to Apache Dubbo services

The mqtt-proxy Plugin is used for dynamic load balancing with client_id of MQTT. It only works in stream mode

The kafka-proxy plugin can be used to configure advanced parameters for the kafka upstream of Apache APISIX, such as SASL authentication

The batch-requests plugin accepts multiple requests, sends them from APISIX via HTTP pipelining, and returns an aggregated response to the client

The redirect Plugin can be used to configure redirects

The echo Plugin is to help users understand how they can develop an APISIX Plugin

The gzip Plugin dynamically sets the behavior of gzip in Nginx

The brotli Plugin dynamically configures Brotli compression in NGINX

The real-ip Plugin is used to dynamically change the client's IP address and port as seen by APISIX

The server-info Plugin periodically reports basic server information to etcd

The inspect Plugin exposes runtime inspection information for APISIX

The lago Plugin reports usage and billing events to Lago

The ext-plugin-pre-req Plugin is for running specific external Plugins in the Plugin Runner before executing the built-in Lua Plugins

ext-plugin-post-req differs from the ext-plugin-pre-req Plugin in that it runs after executing the built-in Lua Plugins and before proxying to the Upstream

The ext-plugin-post-resp Plugin is for running specific external Plugins in the Plugin Runner before executing the built-in Lua Plugins