Core#

• 🌅 support ENV variable in configuration. #2743
• 🌅 support TLS connection with etcd. #2548
• generate create/update_time automatically. #2740
• add a deprecate log for enable_websocket in upstream.#2691
• add a deprecate log for consumer id.#2829
• Added X-APISIX-Upstream-Status header to distinguish 5xx errors from upstream or APISIX itself. #2817
• support Nginx configuration snippet. #2803

Plugin#

• 🌅 Upgrade protocol to support Apache Skywalking 8.0#2389. So this version only supports skywalking 8.0 protocol. This plugin is disabled by default, you need to modify config.yaml to enable, which is not backward compatible.
• 🌅 add aliyun sls logging plugin.#2169
• proxy-cache: the cache_zone field in the schema should be optional.#2776
• fix: validate plugin configuration in the DP #2856

Bugfix#

• 🐛 fix(etcd): handle etcd compaction.#2687
• fix: move conf/cert to t/certs and disable ssl by default, which is not backward compatible. #2112
• fix: check decrypt key to prevent lua thread aborted #2815

Not downward compatible features in future versions#

-In the 2.3 release, the consumer will only support user names and discard the id. The consumer needs to manually clean up the id field in etcd, otherwise the schema verification will report an error during use -In the 2.3 release, opening websocket on upstream will no longer be supported -In version 3.0, the data plane and control plane will be separated into two independent ports, that is, the current port 9080 will only process data plane requests, and no longer process admin API requests

For more changes, please refer to Milestone

This is release candidate.

Core#

• 🌅 Migrate from etcd v2 to v3 protocol, which is not backward compatible. Apache APISIX only supports etcd 3.4 and above versions. #2036
• add labels for upstream object.#2279
• add managed fields in json schema for resources, such as create_time and update_time.#2444
• use interceptors to protect plugin's route#2416
• support multiple ports for http and https listen.#2409
• implement core.sleep.#2397

Plugin#

• 🌅 add AK/SK(HMAC) auth plugin.#2192
• 🌅 add referer-restriction plugin.#2352
• limit-count support to use redis cluster.#2406
• feat(proxy-cache): store the temporary file under cache directory. #2317
• feat(http-logger): support for specified the log formats via admin API #2309

Bugfix#

• 🐛 high priority When the data plane receives an instruction to delete a resource(router or upstream etc.), it does not properly clean up the cache, resulting in the existing resources cannot be found. This problem only occurs in the case of long and frequent deletion operations.#2168
• fix routing priority does not take effect.#2447
• set random seed for each worker process at init_worker phase, only init phase is not enough.#2357
• remove unsupported algorithm in jwt plugin.#2356
• return correct response code when http_to_https enabled in redirect plugin.#2311

For more changes, please refer to Milestone

CVE#

• Fixed Admin API default access token vulnerability

This release mainly refactors the dashboard.

Core#

• Integrate with Ant Design Pro. #263
• Added Manager API support to process logics between APISIX and Dashboard.
• Added Metrics/Route/SSL/Upstream/Consumer module.

Core#

• Admin API: support authentication with SSL certificates. 1747
• Admin API: support both standard PATCH and sub path PATCH. 1930
• HealthCheck: supports custom host port. 1914
• Upstream: supports turning off the default retry mechanism. 1919
• URI: supports delete the '/' at the end of the URI. 1766

New Plugin#

• 🌅 Request Validator 1709

Improvements#

• change: nginx worker_shutdown_timeout is changed from 3s to recommended value 240s. 1883
• change: the healthcheck timeout time type changed from integer to number. 1892
• change: the request-validation plugin input parameter supports Schema validation. 1920
• change: add comments for Makefile install command. 1912
• change: update comment for config.yaml etcd.timeout configuration. 1929
• change: add more prometheus metrics. 1888
• change: add more configuration options for cors plugin. 1963

Bugfix#

• fixed: failed to get host in health check configuration. 1871
• fixed: should not save the runtime data of plugin into etcd. 1910
• fixed: run apisix start several times will start multi nginx processes. 1913
• fixed: read the request body from the temporary file if it was cached. 1863
• fixed: batch processor name and error return type. 1927
• fixed: failed to read redis.ttl in limit-count plugin. 1928
• fixed: passive health check seems never provide a healthy report. 1918
• fixed: avoid to modify the original plugin conf. 1958
• fixed: the test case of invalid-upstream is unstable and sometimes fails to run. 1925

Doc#

• doc: added APISIX Lua Coding Style Guide. 1874
• doc: fixed link syntax in README.md. 1894
• doc: fixed image links in zh-cn benchmark. 1896
• doc: fixed typos in FAQ、admin-api、architecture-design、discovery、prometheus、proxy-rewrite、redirect、http-logger documents. 1916
• doc: added improvements for OSx unit tests and request validation plugin. 1926
• doc: fixed typos in architecture-design document. 1938
• doc: added the default import path of Nginx for unit testing in Linux and macOS systems in the how-to-build document. 1936
• doc: add request-validation plugin chinese document. 1932
• doc: fixed file path of gRPC transcoding in README. 1945
• doc: fixed uri-blocker plugin path error in README. 1950
• doc: fixed grpc-transcode plugin path error in README. 1946
• doc: removed unnecessary configurations for k8s document. 1891

Bugfix#

• Fix: multiple SSL certificates are configured, but only one certificate working fine. 1818

Core#

• Admin API: Support unique names for routes 1655
• Optimization of log buffer size and flush time 1570

New plugins#

• 🌅 Apache Skywalking plugin 1241
• 🌅 Keycloak Identity Server Plugin 1701
• 🌅 Echo Plugin 1632
• 🌅 Consume Restriction Plugin 1437

Improvements#

• Batch Request : Copy all headers to every request 1697
• SSL private key encryption 1678
• Improvement of docs for multiple plugins

The 1.3 version is mainly for security update.

Security#

• reject invalid header#1462 and uri safe encode#1461
• only allow 127.0.0.1 access admin API and dashboard by default. #1458

Plugin#

• 🌅 add batch request plugin. #1388
• implemented plugin sys logger. #1414

The 1.2 version brings many new features, including core and plugins.

Core#

• 🌅 support etcd cluster. #1283
• using the local DNS resolver by default, which is friendly for k8s. #1387
• support to run header_filter, body_filter and log phases for global rules. #1364
• changed the lua/apisix dir to apisix(not backward compatible). #1351
• add dashboard as submodule. #1360
• allow adding custom shared dict. #1367

Plugin#

• 🌅 add Apache Kafka plugin. #1312
• 🌅 add CORS plugin. #1327
• 🌅 add TCP logger plugin. #1221
• 🌅 add UDP logger plugin. 1070
• 🌅 add proxy mirror plugin. #1288
• 🌅 add proxy cache plugin. #1153
• drop websocket enable control in proxy-rewrite plugin(not backward compatible). 1332
• Adding support to public key based introspection for OAuth plugin. #1266
• response-rewrite plugin support binary data to client by base64. #1381
• plugin grpc-transcode supports grpc deadline. #1149
• support password auth for limit-count-redis. #1150
• Zipkin plugin add service name and report local server IP. #1386
• add change_pwd and user_info for Wolf-Rbac plugin. #1204

Admin API#

• 🌅 support key-based authentication for Admin API(not backward compatible). #1169
• hide SSL private key in admin API. #1240

Bugfix#

• missing clear table before to reuse table (will cause memory leak). #1134
• print warning error message if the yaml route file is invalid. #1141
• the balancer IP may be nil, use an empty string instead. #1166
• plugin node-status and heartbeat don't have schema. #1249
• the plugin basic-auth needs required field. #1251
• check the count of upstream valid node. #1292

This release is mainly to strengthen the stability of the code and add more documentation.

Core#

• always specify perl include path when running test cases. #1097
• Feature: Add support for PROXY Protocol. #1113
• enhancement: add verify command to verify apisix configuration(nginx.conf). #1112
• feature: increase the default size of the core file. #1105
• feature: make the number of file is as configurable as the connections. #1098
• core: improve the core.log module. #1093
• Modify bin/apisix to support the SO_REUSEPORT. #1085

Doc#

• doc: add link to download grafana meta data. #1119
• doc: Update README.md. #1118
• doc: doc: add wolf-rbac plugin. #1116
• doc: update the download link of rpm. #1108
• doc: add more english article. #1092
• Adding contribution guidelines for the documentation. #1086
• doc: getting-started.md check. #1084
• Added additional information and refactoring sentences. #1078
• Update admin-api-cn.md. #1067
• Update architecture-design-cn.md. #1065

CI#

• ci: remove patch which is no longer necessary and removed in the upst. #1090
• fix path error when install with luarocks. #1068
• travis: run a apisix instance which intalled by luarocks. #1063

Plugins#

• feature: Add wolf rbac plugin. #1095
• Adding UDP logger plugin. #1070
• enhancement: using internal request instead of external request in node-status plugin. #1109

This release is mainly to build some basic panels and resolve License issue.

Core#

• Dashboard initial. #1
• Resolve licence issues.
• Remove unused files from the Dashboard boilerplate.
• Support panel to list, create and modify Route, Consumer, Service, SSL and Upstream.
• Support custom configuration for Plugin dialog.

Back to TOC