AISIX 0.4.0

Release date: July 16, 2026

This release introduces role-based access control with custom roles and environment-scoped administration, adds status-code-based routing fallback, and expands observability with latency histograms and richer failure diagnostics.

New Features

Access Control

• Organizations can define custom roles that grant fine-grained read and write permissions per resource type, replacing the fixed owner, admin, and member split.
• Environment-scoped access grants a member administrative control over a single environment without granting organization-wide access.
• SCIM group-to-role mappings assign roles automatically from identity-provider group membership.
• The control plane enforces these permissions on every Admin API request.

Routing

• fallback_on_statuses opts selected upstream HTTP status codes into retry and failover, so provider-specific transient codes such as 408 or 409 try the remaining targets instead of returning to the caller.

Observability

• Bucketed time-to-first-token and end-to-end latency histograms support latency quantiles such as p90 and p99 for service-level objectives. See Metrics.
• The gateway captures the request body on failed requests to the chat, messages, and responses endpoints, applying structure-preserving truncation to keep large payloads bounded.
• A new /status/config endpoint reports the loaded observability configuration, and the gateway emits configuration metrics.

Deployment

• Standalone mode can load its resources from a resources.yaml file, so the gateway can run without a control plane or etcd.

Improvements

• The AISIX Cloud Admin API now exposes cache policies, observability exporters, and rate limits.
• The dashboard can set a pricing override for models that are not in the pricing catalog, so their usage is still billed.
• The API-key and rate-limit lists support pagination and search.
• Guardrail configuration errors now log the provider's error-response body to aid debugging.
• The Aliyun content-safety guardrail form exposes the output_fail_open option.

Fixes

• Monitor-mode output guardrails no longer hold back or close streaming responses.
• The aisix_deployment_state metric is now derived from the target's serving state.
• SCIM POST /Users returns the persisted identity instead of echoing the identity provider's payload.