Product
141 releases
2026
September 2026
A gateway now re-sends a usage batch the control plane failed to answer, so a control-plane outage delays usage instead of losing it. A Redis that is unreachable when the gateway starts no longer holds its listeners closed. An etcd whose dial never completes no longer holds the boot open either.…
A model, an MCP server and a price are now referenced by resource id rather than by the name they happen to carry, so renaming one no longer rewrites every document that points at it. Structured output works on Anthropic, Gemini and Bedrock upstreams, and the Responses-to-chat bridge answers with…
This release is API7 Ingress Controller only. There is no APISIX Ingress Controller 2.2.1: the release was published on the API7 side before the corresponding APISIX release completed its release process, and APISIX Ingress Controller 2.2.0 remains the current stable APISIX release. If you run…
Basic Auth — A basic auth password can no longer be empty. The Control Plane now rejects a consumer or a credential whose password is an empty string with HTTP 400 and basic-auth plugin: password: String length must be greater than or equal to 1. On 3.10.6 the same request returned HTTP 200 and was…
This release rebuilds gateway compatibility on a fixed support floor. The control plane now refuses a configuration that a registered gateway could not load, instead of writing it and warning afterward. The gateway no longer pays whole-configuration costs on every watch event, which is what let a…
This release hardens the path between the control plane and the gateway. A gateway now opens its proxy port only once it has a configuration to serve, recovers on its own from an etcd outage, an expired etcd token, or a watch that is never confirmed, and loads configuration sets that previously…
This release makes guardrail behavior visible and configurable at the point where operators need to tune it. Semantic guardrails report the similarity they measured, the console can test a saved rule before it is attached to production traffic, and fail-open decisions are recorded consistently…
Basic Auth — A basic auth password can no longer be empty. The Control Plane now rejects a consumer or a credential whose password is an empty string with HTTP 400 and basic-auth plugin: password: String length must be greater than or equal to 1. On 3.9.19 the same request returned HTTP 200 and was…
This release is about telling traffic apart and reaching an upstream on its own terms. A Provider Key can now declare which API surfaces its endpoint serves natively and where each one lives, so one credential reaches both the OpenAI-compatible path and the Anthropic-compatible path an upstream…
August 2026
This release makes two contracts say what they mean. The Cloud Admin API now covers everything the console does, ships as an immutable document per release, and validates what it documents. And a guardrail now governs exactly what you attached it to — the old "attached to nothing means everywhere"…
This release is about guardrails. Screening gains two new kinds — one that decides by meaning rather than by pattern, and one that runs a script you write — and the whole subsystem becomes accountable: a guardrail that refuses now says whether your policy matched or your rule could not run, and…
The gateway has always overwritten X-Forwarded-Proto, X-Forwarded-Host and X-Forwarded-Port and cleared Forwarded for requests from peers it does not trust. That work now happens in the NGINX configuration rather than in Lua. What the upstream receives is unchanged, and so is what plugins see:…
Custom plugins are managed per gateway group — A custom plugin used to be a Control Plane wide resource with one copy of the code, so uploading a new build reached every gateway group the plugin was bound to at once. It now belongs to a single gateway group, which changes the API, the permissions,…
This release expands Gateway API and Layer 4 traffic support, adds downstream mutual TLS (mTLS), and strengthens validation and credential security. Both controllers support Kubernetes 1.31 or later and Gateway API 1.6.0.
This release is about agent traffic. Forward-proxy traffic — an IDE or coding agent pointed at the gateway — is now carried by an explicit route resource you can audit instead of an implicit tunnel that guessed which credential to borrow. MCP gains the 2026-07-28 revision of the protocol, anonymous…
This release makes the gateway substantially faster and makes agent traffic legible. The proxy now serves from thread-per-core workers, roughly doubling throughput and halving p99 latency. Caching learned to match requests that mean the same thing rather than only those spelled the same way. A2A…
Alibaba Cloud Logging (SLS) — The plugin now verifies the TLS certificate of the log server. Earlier versions completed the TLS handshake without validating the certificate at all, so a log server presenting a self-signed certificate, a certificate from a private CA, or an expired certificate was…
Alibaba Cloud Logging (SLS) — The plugin now verifies the TLS certificate of the log server. Earlier versions completed the TLS handshake without validating the certificate at all, so a log server presenting a self-signed certificate, a certificate from a private CA, or an expired certificate was…
This is a maintenance release for the A2A gateway. The gateway now announces the wire version each agent is pinned to, finds an agent card published under a path prefix, keeps every address on the card pointed at itself, and relays message/stream as it arrives instead of buffering it. It also…
This is a maintenance release. It corrects how the gateway decides that an upstream speaks the Anthropic protocol, so a model pointed at a self-managed Anthropic endpoint is served on the whole /v1/messages family with its request body passed through unchanged. It also gives authentication denials…
This release makes rate limiting expressive enough to describe a real quota policy. A single policy now decides which traffic it applies to through a condition tree, splits its counters along any dimension of that traffic, caps seven different quantities, and can suspend itself on a recurring…
July 2026
This release makes the gateway deployable on networks it could not previously reach. Outbound connections gain a trust configuration, so a model endpoint, guardrail, or MCP upstream whose certificate is signed by a private or enterprise authority can be dialed without a process-wide workaround,…
This release lets the AISIX gateway generate MCP tools for supported operations described in a REST API's OpenAPI 3.x document, without requiring a separate MCP server. Available in both the open-source AISIX gateway and AISIX Cloud, this capability calls the API and injects the configured…
This release lets callers authenticate with a JWT issued by their own identity provider instead of a gateway API key. It also replaces per-key MCP tool allowlists with a layered access policy resolved from the environment, the team, and the key. Alongside them, the retry budget moves onto the…
max_req_body_bytes and max_resp_body_bytes are now validated as integers of at least 1 in the ClickHouse Logger, Elasticsearch Logger, File Logger, Loggly, Loki Logger, SkyWalking Logger, Alibaba Cloud Logging (SLS), and Syslog plugins. Values that earlier versions accepted — 0, negative numbers,…
max_req_body_bytes and max_resp_body_bytes are now validated as integers of at least 1 in the ClickHouse Logger, Elasticsearch Logger, File Logger, Loggly, Loki Logger, SkyWalking Logger, Alibaba Cloud Logging (SLS), and Syslog plugins. Values that earlier versions accepted — 0, negative numbers,…
This release adds a unified video generation endpoint, budget threshold alerts that notify an external system, and automatic prompt caching for Anthropic models. It also corrects several cases where retries, timeouts, rate limits, and usage accounting did not apply on every request path.
This release introduces role-based access control with custom roles and environment-scoped administration, adds status-code-based routing fallback, and expands observability with latency histograms and richer failure diagnostics.
Several Data Plane shared memory (lua_shared_dict) defaults were raised, so a 3.10.3 gateway reserves about 365 MiB more shared memory at startup than 3.10.2 with the default configuration:
The 3.9.16 Helm chart raises several Data Plane shared memory (lua_shared_dict) defaults, so a Helm-deployed gateway reserves about 365 MiB more shared memory at startup than the previous chart:
This maintenance release adds SCIM directory sync and improves observability, accounting, on-premises playground access, and control-plane reliability.
This release introduces the MCP Gateway and Agent Gateway, expands the proxy API and guardrail catalog, and adds metric-based routing.
June 2026
The Control Plane now encrypts additional credential-bearing plugin fields at rest. Because API7 EE upgrades the Control Plane before the Data Plane, during the upgrade window a 3.10.2 Control Plane encrypts these fields while an older 3.10.1 Data Plane cannot decrypt them, which can cause the…
This release adds new plugin configuration fields: log_format_extra on the logger plugins and Redis session storage (session.storage and session.redis) for openid-connect. Because API7 EE upgrades the Control Plane before the Data Plane, a 3.9.15 Control Plane accepts these fields while an older…
JWT Auth — jwt-auth now verifies the token's exp (expiration) and nbf (not-before) claims by default. Previously, a consumer that did not set claims_to_verify (or set it to an empty list) accepted any correctly signed token, including expired ones. After the Data Plane is upgraded, such tokens are…
JWT Auth — jwt-auth now verifies the token's exp (expiration) and nbf (not-before) claims by default. Previously, a consumer that did not set claims_to_verify (or set it to an empty list) accepted any correctly signed token, including expired ones. After the Data Plane is upgraded, such tokens are…
HMAC Auth — The hmac-auth plugin now defaults signed_headers to ["date"]. After the Data Plane is upgraded, any hmac-auth configuration that does not explicitly set signed_headers requires the client signature to cover the Date header. Clients that were not signing Date will start receiving HTTP…
This release adds richer route, Consumer, health-check, and admission-validation capabilities to both controllers. APISIX Ingress Controller also introduces listener-port matching; API7 Ingress Controller does not include that capability until 2.2.0.
May 2026
CAS Auth — The cas-auth plugin now requires a cookie.secret value of at least 32 characters. The plugin uses this secret to sign and verify the CAS_REQUEST_URI cookie, preventing a client-controlled cookie from changing the post-login redirect target. Before upgrading, update every existing…
AI Proxy — Added support for the AWS Bedrock provider using the Converse API. Configure with "provider": "bedrock", AWS IAM credentials in auth.aws, and an AWS region in provider_conf.region. Both non-streaming and streaming (ConverseStream) modes are supported — set "stream": true in the request…
April 2026
This version extends secret references ($secret://, $env://) to work with all plugins centrally. After upgrading the Control Plane to 3.9.11, if you configure secret references in plugin fields that previously did not support them, a Data Plane still running 3.9.10 or earlier will not resolve those…
OpenAPI to MCP — The OpenAPI2MCP service is no longer bundled inside the gateway image. It now runs as a separate sidecar container (api7/openapi-to-mcp), reducing the gateway image size by approximately 150 MB. If you use the openapi-to-mcp or mcp-tools-acl plugins, you must deploy the OpenAPI2MCP…
Upstream labels are now persisted and returned correctly via the API. Previously, labels set on upstreams (e.g., by ADC or Ingress Controller) were silently dropped during persistence, causing false diffs on every sync cycle and unnecessary audit log growth. The file server address can now be…
Limit Count — The sync_interval (Redis delayed sync) feature has been removed from the limit-count plugin and is now available exclusively in the Limit Count Advanced plugin. If you are using limit-count with sync_interval configured, migrate your configuration to the limit-count-advanced plugin…
March 2026
The Control Plane now encrypts additional credential-bearing plugin fields at rest. Because API7 EE upgrades the Control Plane before the Data Plane, during the upgrade window a 3.9.7 Control Plane encrypts these fields while an older 3.9.6 Data Plane cannot decrypt them, which can cause the…
Error Log Collect — Added a new plugin to support centralized error log collection. Oas Validator — Added a new parameter reject_if_not_match. When set to false, it allows requests to pass to upstream services even if they fail OAS validation. Limit Count Advanced — Added more log information for…
February 2026
Feishu Auth — Added a new Feishu authentication plugin based on the OAuth 2.0 Authorization Code flow, supporting integration with internal business services in the workbench. Dingtalk Auth — Added a new Dingtalk authentication plugin that logs key information during the authentication process for…
After disabling SCIM, users can delete historical SCIM accounts synchronized from the IdP in API7. Supports uploading OpenAPI 3.1.0 and 3.1.1 files.
Supports uploading OpenAPI 3.1.0 and 3.1.1 files. Fixed issue: Heartbeat and metrics would only be reported to the first control plane address when multiple addresses were configured.
January 2026
AI Request Rewrite — Supported two new providers: Gemini, Vertex AI. SAML Auth — Added auth_protocol_binding_method parameter to support configuring SAML protocol binding methods, including HTTP-POST and HTTP-Redirect. The default value is HTTP-Redirect (backward compatible with previous versions).…
OpenID Connect — The session.secret field is now required when bearer_only is false (the default). Previously, if not configured, a random secret was automatically generated on each data plane instance, which prevented sessions from being shared across multiple gateway instances. After upgrading,…
Limit Count — Fixed issue: The rate limiting counter was shared when the same rate-limiting configuration was applied across multiple consumers (introduced in 3.8.5). Limit Count Advanced — Fixed issue: Incorrect data appeared when resetting request headers (introduced in 3.8.19). Fixed issue: Rate…
Fixed issue: "Developers" created in older versions of the Developer Portal could not be deleted.
Newly Redesigned Developer Portal — The Developer Portal has been completely redesigned. This release introduces breaking changes that require action before upgrading: The built-in Portal SSO feature has been removed. Configure authentication through the new Portal-level authentication mechanism…
2025
December 2025
gRPC Web — Supported enabling the plugin on routes that use non-wildcard paths. OpenAPI to MCP — Provided the flatten_parameters parameter to control whether path and query parameters from the OpenAPI specification are placed at the top level of the tools input schema.
OpenAPI to MCP — Fixed issue: Variables in base_url were not resolved correctly.
OpenAPI to MCP — Supported using variable syntax in base_url. AI Rate Limiting — Supported using Redis, Redis Cluster, and Redis Sentinel as storage backends.
November 2025
To support creating multiple Portal instances, the portal-auth plugin of the data plane has been upgraded. After upgrading the control plane, users should upgrade the data plane as soon as possible. During the period between the control plane upgrade and the data plane upgrade completion, please do…
Limit Conn — Supported variable syntax in the conn and burst fields. Added a rules field for configuring multiple rate-limiting rules simultaneously. Limit Count Advanced — Supported variable syntax in the count and time_window fields. Added a rules field for configuring multiple rate-limiting…
October 2025
Kafka Logger — Supported SCRAM-SHA-512 in SASL mechanism. Supported wildcard SNI matching for SSL certificates, allowing a single certificate to cover multiple subdomains.
Lago — Introduced new plugin. Traffic Split — Now available for Stream service. OpenAPI to MCP — Supported streamable HTTP as a transport method for MCP.
September 2025
Fixed issue: Upstream reference error when configuring multiple services with duplicate backends in Ingress Controller v2.0.6. Fixed issue: Gateway instance status calculation error when using PostgreSQL databases with non-UTC timezones.
OpenAPI to MCP — Introduced new plugin. Supported Admin API and DPM Address in API7 Helm Chart.
Fixed issue: Users with policies scoped by service_label could not edit the corresponding services or service templates. Fixed issue: Authorization by label on service templates incorrectly reused the label of a published service with the same ID during list API authorization.
August 2025
AI Request Rewrite — Introduced new plugin. AI RAG — Introduced new plugin. AI AWS Content Moderation — Introduced new plugin.
SOAP — Introduced new plugin. Supported configuring the addresses for DP Manager and the Admin API via an API7 Dashboard configuration file.
JWT Auth — Added store_in_ctx parameter to store validated JWT object in request context. When set to true (default is false), the plugin stores the validated JWT object in the request context, useful for custom plugins that need to parse JWT to extract permissions. Workflow — Added support for…
July 2025
Supported Consul service discovery deduplication and node sorting. Supported accessing uri_param_* variables when using radixtree_uri_with_parameter router. Upgraded the base image for the API7-EE-3-Gateway to Ubuntu 24.04.
Limit Count Advanced — Added support for Redis Sentinel mode. Supported component upgrade sequence control to ensure dp-manager waits for database migration before startup.
June 2025
Elasticsearch Logger — Added support for Elasticsearch 9.0.2. OpenID Connect — Fixed issue: Sessions not properly closed on errors, leading to resource leaks.
Added route URI information to alert messages for status code-related alert events.
Fixed issue: Route plugin updates in services mistakenly override existing plugins.
Optimized the performance of large table data migration during control plane upgrades. Added caching logic to post_arg to optimize performance and prevent repeated inefficient parsing. Fixed issue: The cache for ctx variables prefixed with http_ and graph_ is not effective. Fixed issue: Prometheus…
Optimized the performance of large table data migration during control plane upgrades.
Automatically inserted _meta into the schemas of custom plugins. Supported the configuration of apisix.disable_upstream_healthcheck in conf/config.yaml to disable all health checks with a single switch. Optimized Prometheus performance by mitigating high memory consumption. Released API7 Ingress…
Fixed issue: Kubernetes service discovery experiences performance issues with a high number of upstream nodes.
May 2025
AI Proxy Multi — Added retry logic for 429/5xx response codes to improve request success rate.
Fixed issue: Failed to update basic information of published services. Fixed issue: Long startup time for standalone mode with large configuration files. Fixed issue: OAS Validator plugin incorrectly rejecting numbers between 1.11-1.19 with multipleOf: 0.01 rule.
Limit Count Advanced — Added automatic fallback to local shared dict when Redis is unavailable, preventing request failures during Redis outages.
April 2025
Specified the validity period of the gateway instance certificate when adding a gateway instance. Added a warning in the gateway instance list when the certificate is about to expire. Supported viewing the certificate renew method for gateway instances in the dashboard and generating new gateway…
AI Proxy — Implemented new identifier fields logging and summaries for collecting LLM request and response content. AI Proxy Multi — Supported HTTP POST method for health checks. Displayed a record at the warning log level if the fallback was triggered. Implemented a new identifier field for…
Fixed issue: High database CPU utilization when using large scale of consumers. Optimized the wildcard configuration method for Permission Policy: Wildcard configuration using * is now supported in authorization statements, with the same meaning as the current <.*>； — The asterisk * is restricted…
March 2025
OpenTelemetry — Fixed issue: A 404 response on the dynamic route /v2/:customerNumber results in an empty reported path.
OpenID Connect — Fixed issue: Cannot configuring verify issuer. Fixed issue: Unable to validate audience claim. #11018.
Limit Count Advanced — Fixed issue: Intermittently experiences 500 errors during load testing. OpenID Connect — Fixed issue: The plugin does not support configuring verify issuer.
Limit Count Advanced — Fixed issue: Intermittently experiences 500 errors during load testing. OpenID Connect — Fixed issue: The plugin does not support configuring verify issuer. Fixed issue: Unable to validate audience claim.#11018
Reference Secrets in Kubernetes Secret: The secret provider now supports Kubernetes secrets. This allows you to reference sensitive values from Kubernetes secrets for use in SSL certificates, SSL private keys, consumer credentials, and various plugin configurations.
Elasticsearch Logger — Fixed issue: The plugin cannot configuring the index to dynamically send data based on the current date in the plugin.
February 2025
Removed service runtime configurations in service templates, for better template reuse across gateway groups. Existing service runtime configurations within service templates will be removed, but your published service configurations will remain unchanged. Furthermore, the publishing process is…
Fixed issue: Alert email subject cannot contain variables.
Fixed issue: Failed to enable the Log Rotate plugin. Fixed issue: Duplicate data may occasionally occur in gateway instances during the upgrade process, specifically when using MySQL databases. Fixed issue: Deletion of custom plugins may occasionally fail. Fixed issue: When the data plane reports…
List all stream routes in a published service on a gateway group — Fixed issue: Response error.
List all stream routes in a published service on a gateway group — Fixed issue: Response error.
OpenTelemetry — Fixed issue: Cannot reporting request.url as route.url when the plugin reports dynamic routes /v2/:customerNumber.
January 2025
Multiple Upstreams in a Service: For advanced scenarios such as canary deployments, blue-green deployments, or managing multiple clusters, a service can now utilize multiple upstreams. In such cases, a default upstream serves as the primary target for most requests, while other upstreams can be…
Fixed issue: Configuring access_log_format in DP and setting access_log_format_escape to json, the result will append an extra request_id.
Fixed issue: Configuring access_log_format in DP and setting access_log_format_escape to json, the result will append an extra request_id.
SNI Management: Introduced SNI as a new mechanism for managing TLS and mTLS authentication and certificate matching. See Configure mTLS between Client and API7 Gateway for details.
2024
December 2024
Fixed issue: Dashboard failed to start when upgrading from 3.2.16.2 or older version to 3.3.1 and higher version.
Fixed issue: Plugins running in the rewrite phase will be executed repeatedly after hitting a consumer.
Refactored an expiration and elimination mechanism in the data plane. OpenID Connect — Synchronized the latest APISIX code. Datadog — Reported consumer username tag.#11354 — Body Transformer — Supported content-type using x-www-form-urlencoded format and parsing uri parameters of get requests#10496…
Fixed issue: The DP Manager had entered an infinite loop when it received truncated Prometheus metrics. Fixed issue: Data plane synchronization with the control plane may have been disrupted due to an interrupted watch. Fixed issue: The Redis delayed synchronization function of the rate limiting…
Fixed issue: The DP Manager had entered an infinite loop when it received truncated Prometheus metrics. Fixed issue: Data plane synchronization with the control plane may have been disrupted due to an interrupted watch.
Fixed issue: The DP Manager had entered an infinite loop when it received truncated Prometheus metrics. Fixed issue: Data plane synchronization with the control plane may have been disrupted due to an interrupted watch.
Fixed issue: The DP Manager had entered an infinite loop when it received truncated Prometheus metrics. Fixed issue: Data plane synchronization with the control plane may have been disrupted due to an interrupted watch.
Fixed issue: The DP Manager had entered an infinite loop when it received truncated Prometheus metrics. Fixed issue: Data plane synchronization with the control plane may have been disrupted due to an interrupted watch.
November 2024
The JWT Auth plugin supported key_claim_name. Added gateway group filtering to monitoring.
Added multipart content type to body transformer. Adjusted resource ID length limit from 64 to 256. The workflow plugin has supported limit-count-advanced as an action. Refactored core.response.exit to clarify parameter definitions. Recorded the executed plugins in the request context to ensure…
Alert policies can send notification through webhook and email at the same time by utilizing the new Contact Points. A Contact Point defines a set of email addresses or webhook URLs that can be used by multiple alert policies.
October 2024
A secret object is a piece of sensitive information that needs to be protected from unauthorized access, while a secret provider object is used to set up integration with an external secret manager(HashiCorp Vault, AWS Secret Manager, etc.), so that API7 Gateway can establish connections and fetch…
Fixed the issue where plugin configuration updates in Consumer were not taking effect.
Improved Developer Portal(Beta) performance. Fixed panic issue in the radixtree_host_uri routing mode when deleting routes. Fixed incompatibility between custom authentication type plugins and the multi-auth plugin.
September 2024
This is a breaking change. The secrets resource has been renamed to secret provider to align with best practices and facilitate integration with external secret management tools. All associated APIs have been updated accordingly.
Adjusted the attach-consumer-label plugin to execute in the before_proxy phase.
Fixed issue: Using token to get instance_token returns 401.
This is a breaking change. Creating new authentication plugins (key-auth, basic-auth, JWT-auth, or HMAC-auth) for consumers is no longer supported. Please use consumer credentials instead. Existing plugin configurations will remain accessible and editable until disabled.
August 2024
Standardized ARM installation packages are available since version 3.2.14.6. Fixed known CVE vulnerabilities.
Fixed a body validation bug in the response-rewrite plugin when body_base64 is set to false.
API7 Gateway offers granular control over request handling by enabling the configuration of distinct upstream timeouts for individual routes, to override the timeout configuration at the upstream side.
Supported referencing $env in SSL Certificates. Fixed UI instability when labels contained periods. Removed source code from frontend build artifacts.
July 2024
Fixed UI error for viewing Ingress Controller routes on the Dashboard. Fixed missing default Helm release name when installing gateway instance on Kubernetes. Enhanced Microsoft Entra ID (Azure AD) integration through ID token utilization. Fixed the issue that plugin inconsistencies may occur…
Simply import your OpenAPI specification directly into a gateway group to have your new service and all its routes ready.
This is a breaking change. Roles from older versions can not be kept. API7 Enterprise moves beyond traditional role-based permissions, adopting a permission policy architecture for granular access control through reusable policies assigned to roles. See roles and permission policies
June 2024
Reduced API latency by minimizing etcd calls. Kine database connection pool configuration can function normally.
Improve API performance. Data Plane supports disabling telemetry data collection and configuring reporting intervals. Custom plugins can function even without a schema definition.
Large data sets no longer cause etcd range API error.
The service template API has been migrated to the "/api/services/template" path prefix.
The ssl_verify configuration now works fine for the Login Option OIDC and LDAP protocols.
Protect sensitive fields within the login options related to API.
May 2024
The "service status" field has been changed from "0: enabled, 1: disabled" to "0: disabled, 1: enabled".
etcd watch can pass SNI correctly. API7 Enterprise will attempt to create a database automatically. If permission issues arise, it will launch using a pre-configured database provided by the user, preventing installation failure.
Labels can be up to 64 characters long and include spaces. Force configuration synchronization to the data plane, even with schema validation errors. This prevents data loss and ensures uninterrupted workflow.
This automated role mapping eliminates the need for manual role assignment by Super Admins. Users who satisfy the defined key-value mapping rules will be automatically assigned the corresponding roles upon login. For details, see Set Role Mapping.
April 2024
API7 Enterprise now supports MySQL 5.7.
Tokens are bound to specific users and share the same permissions. When the user is deleted, the associated token will also be deleted.
API7 Enterprise now supports mutual TLS (mTLS) authentication between the gateway and upstream services. mTLS is a form of communication security that requires both parties to present certificates to each other. This ensures that both parties are who they claim to be and that the data transmitted…
Fixed the issue that occurs when the maximum number of CPU cores is reached.
You can store sensitive data securely in your Vault. Admin API support is available; UI support coming soon.
API7 Enterprise supports Single Sign-On (SSO) with SAML implementations. For details about how to configure SAML SSO login method, see configure SSO with SAML.
March 2024
API7 Enterprise now allows you to build custom plugins to add extra functionalities and manage API traffic with custom flow. See how to Add Custom Plugin
February 2024
API7 Enterprise uses service discovery to automatically detect available upstream services, keeping their addresses in a database (called a service registry). Therefore, an API gateway can always fetch the latest list of upstream addresses through the service registry, ensuring all requests are…
Apache APISIX publishes its history upstream: APISIX CHANGELOG.