Re: [DISCUSS] Design a CSRF plugin for APISIX

2021-11-30 Thread Zexuan Luo
LGTM, only a few questions: > Random is a random number like ngx.time(). ngx.time isn't a random number. > core.response.set_header("Set-Cookie", {"csrf_token="..csrf_token..";path=/"}) We need to use add_header to prevent overriding existing Cookie. And maybe we use a more specialized field na

Re: [Proposal] Add blog contribution guidelines to apisix-website repository

2021-11-30 Thread Serendipity 96
Cool! Best Regards! @Serendipity96 Yilin Zeng 于2021年11月30日周二 17:43写道: > Hi community, > > Blog contribution guidelines is now available at Blog Contributing > Guide[1]. > > Thanks juzhiyuan, Serendipity96 and Yeliang for suggestions. > > Regards, > Yilin > > [1

Re: [Proposal] support splunk hec logging plugin

2021-11-30 Thread JinChao Shuai
APISIX has a retry mechanism in the batch queue. The number of retries can be set by `max_retry_count`. If Splunk crashes completely, the message will be discarded. Chao Zhang 于2021年11月30日周二 下午8:26写道: > How does this plugin handle situation if the splunk is crashed, and lots of > logging message

Re: [DISCUSS] Design a CSRF plugin for APISIX

2021-11-30 Thread Baoyuan
Based on the previous discussion, I am designing a plugin for APISIX to protect the API from CSRF attacks. The following are the specific implementation details and some sample codes. 1. *Configuration* - key: User-set secret key, used to generate csrf token - expires: token expiration tim

Re: [Proposal] support splunk hec logging plugin

2021-11-30 Thread Chao Zhang
How does this plugin handle situation if the splunk is crashed, and lots of logging messages backlog in the memory? JinChao Shuai 于2021年11月29日 周一15:59写道: > Hi folks, > > Splunk is a machine data search engine. According to the latest database > search engine ranking [1], Splunk has been ranked se

Re: [Proposal] support annotation to change path behavior

2021-11-30 Thread Chao Zhang
SGTM +1 This feature is useful and concise. lxm lxm 于2021年11月29日 周一20:19写道: > hi,community > > currently, apisix ingress controller on support pathType in "prefix" > "exact". > > while in ingress nginx controller ,there is a support > > ``` > nginx.ingress.kubernetes.io/use-regex: 'true' > ``` >

Re: [ANNOUNCE] Apache APISIX 2.11.0 has been released

2021-11-30 Thread Chao Zhang
Configurations! Best regards Chao Zhang https://github.com/tokers On Tue, Nov 30, 2021 at 10:22 AM 孙毅 wrote: > > Hi folks, > > The Apache APISIX community is glad to announce that Apache APISIX 2.11.0 > has been released. > > Apache APISIX is a cloud-native microservices API gateway, delivering

回复: [Proposal] Add blog contribution guidelines to apisix-website repository

2021-11-30 Thread Yilin Zeng
Hi community, Blog contribution guidelines is now available at Blog Contributing Guide[1]. Thanks juzhiyuan, Serendipity96 and Yeliang for suggestions. Regards, Yilin [1]http://apisix.apache.org/docs/general/blog 发件人: Zhiyuan Ju 发送时间: 2021年11月29日 12:41 收件人: dev

Re: [DISCUSS] Propose Apache APISIX Community Weekly Meeting

2021-11-30 Thread Serendipity 96
Great! Looking forward to tomorrow's community meeting. Best Regards! @Serendipity96 Zhiyuan Ju 于2021年11月30日周二 14:39写道: > Hi, > > I just submitted a ticket here[1], welcome to join and leave the topics > you're interested in :) > > [1] https://github.com/apach