API7 Gateway 3.4.0

Release Date: 2025-01-07

Features

Data Plane

• SNI Management: Introduced SNI as a new mechanism for managing TLS and mTLS authentication and certificate matching. See Configure mTLS between Client and API7 Gateway for details.

Plugins

• OpenID Connect (opens in Plugin Hub docs)
  • Added authorization parameters.#10058
  • Added more attributes.#10591
  • Added required scopes configuration property.#10493
  • Added session.cookie configuration.#10919
  • Supported setting headers in introspection request.#11090
• Fault Injection (opens in Plugin Hub docs)
  • Supported header injection.#9039.
• Skywalking Logger (opens in Plugin Hub docs)
  • Supported $hostname in skywalking service_instance_name.#9401
  • Add option to include request body and response body in logger plugins.#10888
• Forward Auth (opens in Plugin Hub docs)
  • Added exception configuration status_on_error.#10898
  • Supported degradation.#9435.
• Elastic Search Logger (opens in Plugin Hub docs)
  • Added compatibility headers.#10828
  • Added option to include request body and response body in logger plugins.#10888
• Prometheus (opens in Plugin Hub docs)
  • Supported custom configuration of DEFAULT_BUCKETS.#9673
• CORS (opens in Plugin Hub docs)
  • Supported for the Timing-Allow-Origin header.#9365
• File Logger:
  • Added schema attribute definition for logger plugins.#10738
• HTTP Logger (opens in Plugin Hub docs):
  • Added schema attribute definition for logger plugins.#10738
• Syslog (opens in Plugin Hub docs)
  • Added option to include request body and response body in logger plugins.#10888
• SLS Logger
  • Added option to include request body and response body in logger plugins.#10888
• TCP Logger
  • Added option to include request body and response body in logger plugins.#10888
• UDP Logger
  • Added option to include request body and response body in logger plugins.#10888
• Tencent Cloud CLS
  • Added schema attribute definition for logger plugins.#10738
  • Added option to include request body and response body in logger plugins.#10888

Admin APIs

• Added SNI related APIs:
  • Create a SNI.
  • Update a SNI on a gateway group.
  • List all SNIs on a gateway group.
  • Get a SNI on a gateway group.
  • Delete a SNI on a gateway group.

Console (Dashboard)

• API7 Portal Monitoring: Provided monitoring data and visualizations to track API Product metrics.
• Applied custom plugin configuration at the gateway group level. See Add Custom Plugin for details.

Fixes

Data Plane

• Fixed issue: Shared memory leak used by Redis delayed synchronization function.
• Fixed issue: Warn log when sending requests to external services insecurely.#11403

Plugins

• AI Proxy (opens in Plugin Hub docs)
  • Fixed issue: Query parameters from override.endpoint are not sent to LLM.
• OpenID Connect (opens in Plugin Hub docs)
  • Fixed issue: Not closing session and blocking until TTL expired when using lockable session storage backend.#10788
• Forward Auth (opens in Plugin Hub docs)
  • Fixed issue: Request body is too large.#10589
  • Fixed issue: Plugin does not work if the request is POST and authentication service API is GET.#11021
• GRPC Web:
  • Fixed issue: Receiving an error missing trailers.#10851
• GRPC Transcode (opens in Plugin Hub docs)
  • Fixed issue: The position of enumerations in pb_option_def is wrong.#11448

Console (Dashboard)

• Fixed issue: Audit log failed to record when publishing multiple services.

Dependencies

• Data plane upgraded to LuaJit 2.1-20240815.
• Removed grpc-client-nginx-module.