#apisix — Public Fediverse posts

CVE-2026-39999 matters to anyone fronting services with Apache APISIX and the jwt-auth plugin. The authentication-bypass-by-spoofing flaw spans versions 2.2 through 3.16.0, a range broad enough that long-running production gateways are likely in scope. Upgrading to 3.17.0 closes it; the advisory claims CVSS v4.0 7.0. Beyond patching, do you have a way to detect spoofed tokens that already got through?
#APISIX #security

The Apache APISIX project published CVE-2026-39999 on June 19, 2026: an authentication-bypass-by-spoofing flaw in the jwt-auth plugin. It affects versions 2.2 through 3.16.0 and is fixed in 3.17.0, with a claimed CVSS v4.0 score of 7.0. If your API gateway leans on jwt-auth to keep callers out, this one moves to the top of the patch queue. What is your rollback plan if 3.17.0 changes plugin behavior?
#APISIX #security

Doanh nghiệp hàng đầu xây dựng nền tảng quản lý giao thông AI: Cổng thông tin APISIX AI trong thực tế #AI #APISIX #TrafficManagement #IntelligentGovernance #Tech #CôngNghệ #QuảnLýGiaoThông #TríTuệNhânTạo

https://dev.to/yilialinn/building-an-ai-agent-traffic-management-platform-apisix-ai-gateway-in-practice-4md8

[Перевод] Как вырасти до 2000 тенантов: почему Sealos перешла с Nginx на Envoy

Sealos Cloud столкнулась с критическими проблемами при работе с Nginx Ingress в кластерах с большим числом пользователей. В статье — подробный рассказ о поиске нового, более подходящего API-шлюза.

https://habr.com/ru/companies/flant/articles/917216/

#kubernetes #nginx #envoy #envoyproxy #ingress #higress #api_gateway #шлюз_api #cilium_gateway #apisix

Bych nečekal, že největší problém s celým #APISIX bude rozjet tam pořádně podporu SSL. 😐 Se asi začnu učit Lua, abych z kódu pochopil, co je vlastně špatně.

init.lua:212: http_ssl_client_hello_phase(): failed to match any SSL certificate by SNI: apisix, context: ssl_client_hello_by_lua*, client: 172.22.0.1, server: 0.0.0.0:9443

Bych nečekal, že největší problém s celým #APISIX bude rozjet tam pořádně podporu SSL. 😐 Se asi začnu učit Lua, abych z kódu pochopil, co je vlastně špatně.

init.lua:212: http_ssl_client_hello_phase(): failed to match any SSL certificate by SNI: apisix, context: ssl_client_hello_by_lua*, client: 172.22.0.1, server: 0.0.0.0:9443

Resizing images on-the-fly

#apache #apisix #imgproxy #java

https://blog.frankel.ch/resize-images-on-the-fly/?utm_medium=erik.in&utm_source=mastodon

Resizing images on-the-fly

#apache #apisix #imgproxy #java

https://blog.frankel.ch/resize-images-on-the-fly/?utm_medium=erik.in&utm_source=mastodon

System Architecture: Move Authentication to the API Gateway

#api #apisix #authentication #java #keycloak #spring

https://foojay.io/today/system-architecture-move-authentication-to-the-api-gateway/?utm_medium=erik.in&utm_source=mastodon

System Architecture: Move Authentication to the API Gateway

#api #apisix #authentication #java #keycloak #spring

https://foojay.io/today/system-architecture-move-authentication-to-the-api-gateway/?utm_medium=erik.in&utm_source=mastodon

Apache APISIX is a high-performance API gateway with enough #MQTT protocol awareness to do loadbalancing based on the MQTT ClientID.
You have to terminate TLS on Apisix to allow for protocol awareness.
#MQTT #VerneMQ #ApacheApisix #apisix
https://github.com/apache/apisix

Apache APISIX is a high-performance API gateway with enough #MQTT protocol awareness to do loadbalancing based on the MQTT ClientID.
You have to terminate TLS on Apisix to allow for protocol awareness.
#MQTT #VerneMQ #ApacheApisix #apisix
https://github.com/apache/apisix

RT api7_ai: API7 Cloud has launched on @\ProductHunt🎉
https://www.producthunt.com/posts/api7-cloud

Experience the power of our any-cloud, multi-location SaaS platform for deploying, controlling, visualizing, and monitoring APIs at scale.
#api7cloud #ProductHunt #apisix

RT api7_ai: API7 Cloud has launched on @\ProductHunt🎉
https://www.producthunt.com/posts/api7-cloud

Experience the power of our any-cloud, multi-location SaaS platform for deploying, controlling, visualizing, and monitoring APIs at scale.
#api7cloud #ProductHunt #apisix

RT ApacheAPISIX: Sign up for the Apache #APISIX Global Community Meeting to connect with other #contributors and community members.
Share experiences, knowledge and shape the future of the project.

Register here to receive a meeting link ⏬
https://apisix.apache.org/community-meeting-signup

RT ApacheAPISIX: Sign up for the Apache #APISIX Global Community Meeting to connect with other #contributors and community members.
Share experiences, knowledge and shape the future of the project.

Register here to receive a meeting link ⏬
https://apisix.apache.org/community-meeting-signup

RT ApacheAPISIX: Brace yourselves for a enlightening experience!
@nicolas_frankel brings his expertise to @\fosdem with his talk "Practical Introduction to Opentelemetry Tracing" 🔍

#apacheapisix #FOSDEM2023 #Brussels
#fosdem #apisix #apache #conference @\opentelemetry

RT ApacheAPISIX: Brace yourselves for a enlightening experience!
@nicolas_frankel brings his expertise to @\fosdem with his talk "Practical Introduction to Opentelemetry Tracing" 🔍

#apacheapisix #FOSDEM2023 #Brussels
#fosdem #apisix #apache #conference @\opentelemetry

RT ApacheAPISIX: Great insights on "Chopping the monolith" presented by @\nicolas_frankel at @\gdgmilano

🤩 Check out the demo for the talk incase you missed.
- https://github.com/nfrankel/chop-monolith
- https://blog.frankel.ch/chopping-monolith/

#microservices #architecture #monolith #apisix

RT ApacheAPISIX: Great insights on "Chopping the monolith" presented by @\nicolas_frankel at @\gdgmilano

🤩 Check out the demo for the talk incase you missed.
- https://github.com/nfrankel/chop-monolith
- https://blog.frankel.ch/chopping-monolith/

#microservices #architecture #monolith #apisix

Anyone have tools or ideas about making #Kubernetes build/deploy scripts better? I'm using a lot of hand-written scripts to run locally but it's annoying. Anyone using #Ansible or #Terraform or anything like it for local work? I have a repo with the foundational stuff like #APISIX and #Linkerd, install #Microk8s, then the local dev runs the script.

Anyone have tools or ideas about making #Kubernetes build/deploy scripts better? I'm using a lot of hand-written scripts to run locally but it's annoying. Anyone using #Ansible or #Terraform or anything like it for local work? I have a repo with the foundational stuff like #APISIX and #Linkerd, install #Microk8s, then the local dev runs the script.

RT ApacheAPISIX: 🚀From 2.15.x upgrade to 3.0.0
#APISIX
https://apisix.apache.org/docs/apisix/next/upgrade-guide-from-2.15.x-to-3.0.0/

RT ApacheAPISIX: 🚀From 2.15.x upgrade to 3.0.0
#APISIX
https://apisix.apache.org/docs/apisix/next/upgrade-guide-from-2.15.x-to-3.0.0/

"10 most common use cases of an API Gateway"

* API Resource routing
* API Content-based routing
* API Geo-routing
* API Aggregator
* API Centralized Authentication
* API Format Conversion
* API Observability
* API Caching
* API Fault handling
* API Versioning

https://medium.com/apache-apisix/10-most-use-cases-of-an-api-gateway-in-api-led-architecture-f4d7fa160dcf

#api #gateway #apache #apisix #pattern

"10 most common use cases of an API Gateway"

* API Resource routing
* API Content-based routing
* API Geo-routing
* API Aggregator
* API Centralized Authentication
* API Format Conversion
* API Observability
* API Caching
* API Fault handling
* API Versioning

https://medium.com/apache-apisix/10-most-use-cases-of-an-api-gateway-in-api-led-architecture-f4d7fa160dcf

#api #gateway #apache #apisix #pattern

RT BoburUmurzokov: 👋I am thrilled to announce that I will deliver a talk at #FestiveTechCalendar2022

In this section, you will learn how you can build, migrate, and scale Java applications on Azure.

#FestiveTechCalendar #CloudFamily #DEVCommunity #apisix #opensource #microsoft #azure #github

RT BoburUmurzokov: 👋I am thrilled to announce that I will deliver a talk at #FestiveTechCalendar2022

In this section, you will learn how you can build, migrate, and scale Java applications on Azure.

#FestiveTechCalendar #CloudFamily #DEVCommunity #apisix #opensource #microsoft #azure #github

RT ApacheAPISIX: 📣 Join our #GlobalCommunityMeeting on November 23rd | 13:00PM (UTC)📅, to learn about the milestones of Apache #APISIX

Register Here ▶️https://apisix.apache.org/community-meeting-signup

RT ApacheAPISIX: Apache APISIX Gateway 3.0 is now out, with 11 essential new features🚀https://apisix.apache.org/blog/2022/11/02/apache-apisix-v3-preview/

#APISIX #APIGateway