Dur de choisir son ingress-controller, entre #projectcontour #traefik #thekonginc #ApacheAPISIX #IngressNGINX… et j'en passe!
Vient découvrir la #GatewayAPI, interface officielle de #k8s pour les contrôler tous!
link.davinkevin.fr/GwAPI-rivier...
Hâte de vous retrouver à @rivieradev.fr
Vient découvrir la #GatewayAPI, interface officielle de #k8s pour les contrôler tous!
link.davinkevin.fr/GwAPI-rivier...
Hâte de vous retrouver à @rivieradev.fr
June 19, 2025 at 3:16 PM
Dur de choisir son ingress-controller, entre #projectcontour #traefik #thekonginc #ApacheAPISIX #IngressNGINX… et j'en passe!
Vient découvrir la #GatewayAPI, interface officielle de #k8s pour les contrôler tous!
link.davinkevin.fr/GwAPI-rivier...
Hâte de vous retrouver à @rivieradev.fr
Vient découvrir la #GatewayAPI, interface officielle de #k8s pour les contrôler tous!
link.davinkevin.fr/GwAPI-rivier...
Hâte de vous retrouver à @rivieradev.fr
Back home after my talk #CERN. Around 40 people came and listened how to evolve your APIs with #ApacheAPISIX.
Then I had a private tour of the computing center and the Antiproton Acecelerator 🔬
Not bad for a Thursday 😊
Then I had a private tour of the computing center and the Antiproton Acecelerator 🔬
Not bad for a Thursday 😊
April 4, 2024 at 3:30 PM
Back home after my talk #CERN. Around 40 people came and listened how to evolve your APIs with #ApacheAPISIX.
Then I had a private tour of the computing center and the Antiproton Acecelerator 🔬
Not bad for a Thursday 😊
Then I had a private tour of the computing center and the Antiproton Acecelerator 🔬
Not bad for a Thursday 😊
Following the description of the #IETF #Idempotency Key spec, here's crude implementation on #ApacheAPISIX
Implementing the Idempotency-Key specification on Apache APISIX
Last week, I wrote an analysis of the ITEF Idempotency-Key specification. The specification aims to avoid duplicated requests. In short, the idea is for the client to send a unique key along with the ...
blog.frankel.ch
April 7, 2024 at 4:27 PM
Following the description of the #IETF #Idempotency Key spec, here's crude implementation on #ApacheAPISIX
In this post, I aim to provide practical alternatives to writing a custom #ApacheAPISIX #plugin, offering solutions you can quickly implement in your projects.
blog.frankel.ch/when-write-a...
blog.frankel.ch/when-write-a...
August 25, 2024 at 4:49 PM
In this post, I aim to provide practical alternatives to writing a custom #ApacheAPISIX #plugin, offering solutions you can quickly implement in your projects.
blog.frankel.ch/when-write-a...
blog.frankel.ch/when-write-a...
I continue to work on my #OpenTelemetry demo. Its main idea is to showcase traces across various technology stacks. This week, I added a couple of components and changed the #architecture. Here are some noteworthy learnings.
#Observability #DistributedTracing #ApacheAPISIX #GraalVM #Ruby #Golang
#Observability #DistributedTracing #ApacheAPISIX #GraalVM #Ruby #Golang
Even more Opentelemetry!
I continue to work on my Opentelemetry demo. Its main idea is to showcase traces across various technology stacks, including asynchronous communication via an MQTT queue. This week, I added a couple o...
blog.frankel.ch
June 2, 2024 at 3:13 PM
I continue to work on my #OpenTelemetry demo. Its main idea is to showcase traces across various technology stacks. This week, I added a couple of components and changed the #architecture. Here are some noteworthy learnings.
#Observability #DistributedTracing #ApacheAPISIX #GraalVM #Ruby #Golang
#Observability #DistributedTracing #ApacheAPISIX #GraalVM #Ruby #Golang
I recently read a post on "6 Ways To Pass Parameters to #Spring #REST API". It does an excellent job listing all ways to send parameters to a Spring application.
I want to do the same for #ApacheAPISIX; it’s beneficial when you write a custom plugin.
I want to do the same for #ApacheAPISIX; it’s beneficial when you write a custom plugin.
Five ways to pass parameters to Apache APISIX
I recently read 6 Ways To Pass Parameters to Spring REST API. Though the title is a bit misleading, as it’s unrelated to REST, it does an excellent job listing all ways to send parameters to a Spring ...
blog.frankel.ch
April 28, 2024 at 4:53 PM
I recently read a post on "6 Ways To Pass Parameters to #Spring #REST API". It does an excellent job listing all ways to send parameters to a Spring application.
I want to do the same for #ApacheAPISIX; it’s beneficial when you write a custom plugin.
I want to do the same for #ApacheAPISIX; it’s beneficial when you write a custom plugin.
Dur de choisir son ingress-controller, entre #projectcontour #traefik #thekonginc #ApacheAPISIX #IngressNGINX… et j'en passe!
Vient découvrir la #GatewayAPI, interface officielle de #k8s pour les contrôler tous!
🔖Fav link.davinkevin.fr/GwAPI-devoxx...
Hâte de vous retrouver à #DevoxxFR
Vient découvrir la #GatewayAPI, interface officielle de #k8s pour les contrôler tous!
🔖Fav link.davinkevin.fr/GwAPI-devoxx...
Hâte de vous retrouver à #DevoxxFR
April 3, 2024 at 9:07 AM
Dur de choisir son ingress-controller, entre #projectcontour #traefik #thekonginc #ApacheAPISIX #IngressNGINX… et j'en passe!
Vient découvrir la #GatewayAPI, interface officielle de #k8s pour les contrôler tous!
🔖Fav link.davinkevin.fr/GwAPI-devoxx...
Hâte de vous retrouver à #DevoxxFR
Vient découvrir la #GatewayAPI, interface officielle de #k8s pour les contrôler tous!
🔖Fav link.davinkevin.fr/GwAPI-devoxx...
Hâte de vous retrouver à #DevoxxFR
In my previous post Evolving your APIs, I mention the main #API #versioning approaches. During the talk of the same name, I sometimes get some questions on the subject. In this post, I’ll detail each of them, and how you can implement them with #ApacheAPISIX.
#APIs #HTTPAPIs #WebAPIs
#APIs #HTTPAPIs #WebAPIs
API versioning
In my previous post Evolving your APIs, I mention the main API versioning approaches. During the talk of the same name, I sometimes get some questions on the subject. In this post, I’ll detail each ...
blog.frankel.ch
November 5, 2023 at 4:38 PM
In my previous post Evolving your APIs, I mention the main #API #versioning approaches. During the talk of the same name, I sometimes get some questions on the subject. In this post, I’ll detail each of them, and how you can implement them with #ApacheAPISIX.
#APIs #HTTPAPIs #WebAPIs
#APIs #HTTPAPIs #WebAPIs
Today, I wrote on how to combine #PostgreSQL, #PostgREST, and #ApacheAPISIX to expose a developer-friendly #REST #API.
Advanced URL rewriting with Apache APISIX
I spoke at Swiss PgDay in Switzerland in late June. The talk was about how to create a no-code API with the famous PostgreSQL database, the related PostgREST, and Apache APISIX, of course. I already w...
blog.frankel.ch
July 14, 2024 at 5:21 PM
Today, I wrote on how to combine #PostgreSQL, #PostgREST, and #ApacheAPISIX to expose a developer-friendly #REST #API.
#DRY is an important principle in software development. This post will show you how to apply it to #ApacheAPISIX configuration.
DRY your Apache APISIX config
DRY is an important principle in software development. This post will show you how to apply it to Apache APISIX configuration. The DRY principle 'Don’t repeat yourself' (DRY) is a principle of s...
blog.frankel.ch
September 1, 2024 at 4:52 PM
#DRY is an important principle in software development. This post will show you how to apply it to #ApacheAPISIX configuration.
In this post, I’d like to describe how
@ApacheAPISIX #plugins, priority, and phases play together and what pitfalls you must be aware of.
@ApacheAPISIX #plugins, priority, and phases play together and what pitfalls you must be aware of.
Apache APISIX plugin priority, a leaky abstraction?
Apache APISIX is an API Gateway, which builds upon the OpenResty reverse-proxy to offer a plugin-based architecture. The main benefit of such an architecture is that it brings structure to the configu...
blog.frankel.ch
December 10, 2023 at 8:10 PM
In this post, I’d like to describe how
@ApacheAPISIX #plugins, priority, and phases play together and what pitfalls you must be aware of.
@ApacheAPISIX #plugins, priority, and phases play together and what pitfalls you must be aware of.
Recently, I had to use #GitHubPages to publish my #ApacheAPISIX workshop. Travis is no longer free. #GitHubActions are a thing. I used the now nominal path and faced a few hurdles; here are my findings.
A refresher on GitHub Pages
I moved my blog from WordPress to GitLab Pages in… 2016. I’m happy with the solution. However, I used GitHub Pages when I was teaching for both the courses and the exercises, e.g., Java EE. At the ti...
blog.frankel.ch
June 16, 2024 at 6:47 PM
Recently, I had to use #GitHubPages to publish my #ApacheAPISIX workshop. Travis is no longer free. #GitHubActions are a thing. I used the now nominal path and faced a few hurdles; here are my findings.
APISIX authentication bypass CVE-2026-39999 lets attackers forge JWTs via algorithm confusion. APISIX 3.16.0 is affected; upgrade to 3.16.1.
#APISIX #ApacheAPISIX #JWT #AuthBypass #InfoSec
#APISIX #ApacheAPISIX #JWT #AuthBypass #InfoSec
Apache APISIX JWT Authentication Bypass, CVE-2026-39999
TL;DR Apache APISIX 3.16.0 shipped a JWT algorithm confusion bug in its jwt-auth plugin. The flaw, tracked as CVE-2026-39999, lets an unauthenticated attacker forge tokens and bypass authentication. Apache fixed it in APISIX 3.16.1. Why it matters APISIX is a widely used API gateway. So an APISIX authentication bypass can expose every service behind it. The flaw scores CVSS 9.1, critical.
securityonline.info
July 8, 2026 at 12:21 PM
APISIX authentication bypass CVE-2026-39999 lets attackers forge JWTs via algorithm confusion. APISIX 3.16.0 is affected; upgrade to 3.16.1.
#APISIX #ApacheAPISIX #JWT #AuthBypass #InfoSec
#APISIX #ApacheAPISIX #JWT #AuthBypass #InfoSec
Dur de choisir son ingress-controller, entre @projectcontour @traefik @thekonginc @apacheapisix @ingressnginx… et j'en passe!
Vient découvrir la #gatewayapi, interface officielle de #k8s pour les contrôler tous! […]
[Original post on mastodon.davinkevin.fr]
Vient découvrir la #gatewayapi, interface officielle de #k8s pour les contrôler tous! […]
[Original post on mastodon.davinkevin.fr]
June 19, 2025 at 3:17 PM
Dur de choisir son ingress-controller, entre @projectcontour @traefik @thekonginc @apacheapisix @ingressnginx… et j'en passe!
Vient découvrir la #gatewayapi, interface officielle de #k8s pour les contrôler tous! […]
[Original post on mastodon.davinkevin.fr]
Vient découvrir la #gatewayapi, interface officielle de #k8s pour les contrôler tous! […]
[Original post on mastodon.davinkevin.fr]
Lots of service providers offer a #freetier of their service. If you need to go above the free tier at any point, you’ll likely stay on the service and pay. In this day and age, most services are online and accessible via an #API. Today, we will implement a free tier with #ApacheAPISIX.
Free tier API with Apache APISIX
Lots of service providers offer a free tier of their service. The idea is to let you kick their service’s tires freely. If you need to go above the free tier at any point, you’ll likely stay on the se...
blog.frankel.ch
July 28, 2024 at 4:00 PM
Lots of service providers offer a #freetier of their service. If you need to go above the free tier at any point, you’ll likely stay on the service and pay. In this day and age, most services are online and accessible via an #API. Today, we will implement a free tier with #ApacheAPISIX.
#RateLimiting is an age-old Reverse Proxy feature focused on protecting against DDoS attacks. It treats all clients the same. Most API providers offer different subscription tiers.
In this post, I want to detail how to differentiate between clients with #ApacheAPISIX.
In this post, I want to detail how to differentiate between clients with #ApacheAPISIX.
Differentiating rate limits in Apache APISIX
In my talk Evolving your APIs, I mention that an API Gateways is a Reverse Proxy 'on steroids'. One key difference between the former and the latter is that the API Gateway is not unfriendly to busine...
blog.frankel.ch
July 21, 2024 at 3:54 PM
#RateLimiting is an age-old Reverse Proxy feature focused on protecting against DDoS attacks. It treats all clients the same. Most API providers offer different subscription tiers.
In this post, I want to detail how to differentiate between clients with #ApacheAPISIX.
In this post, I want to detail how to differentiate between clients with #ApacheAPISIX.
Last week, I described how to add a dynamic #watermark to your images on the JVM. Another alternative is to use ready-made components, namely #imgproxy and #ApacheAPISIX I already combined them to resize images on-the-fly.
Here's how to achieve it.
Here's how to achieve it.
Dynamic watermarking with imgproxy and Apache APISIX
Last week, I described how to add a dynamic watermark to your images on the JVM. I didn’t find any library, so I had to develop the feature, or, more precisely, an embryo of a feature, by myself. Depe...
blog.frankel.ch
July 7, 2024 at 7:43 PM
Last week, I described how to add a dynamic #watermark to your images on the JVM. Another alternative is to use ready-made components, namely #imgproxy and #ApacheAPISIX I already combined them to resize images on-the-fly.
Here's how to achieve it.
Here's how to achieve it.
Nearly at the end of my two weeks marathon across Europe. This week was Berlin Buzzwords, DevConf CZ, and JavaDay Lviv 🇺🇦
I came late at night and today, I’ll go to Lyon for Tech and Wine and conduct an #ApacheAPISIX workshop 🔨
I came late at night and today, I’ll go to Lyon for Tech and Wine and conduct an #ApacheAPISIX workshop 🔨
June 18, 2024 at 6:32 AM
Nearly at the end of my two weeks marathon across Europe. This week was Berlin Buzzwords, DevConf CZ, and JavaDay Lviv 🇺🇦
I came late at night and today, I’ll go to Lyon for Tech and Wine and conduct an #ApacheAPISIX workshop 🔨
I came late at night and today, I’ll go to Lyon for Tech and Wine and conduct an #ApacheAPISIX workshop 🔨
I lastly stumbled upon a list of 16 practices to secure your #APIs. In this two-post series, I’d like to describe how we can implement each item with #ApacheAPISIX (or not).
Secure your API with these 16 Practices with Apache APISIX - part 1
A couple of months ago, I stumbled upon this list of 16 practices to secure your API: Authentication 🕵️️ - Verifies the identity of users accessing APIs.Authorization 🚦 - Determines permissions of ...
blog.frankel.ch
February 18, 2024 at 5:50 PM
I lastly stumbled upon a list of 16 practices to secure your #APIs. In this two-post series, I’d like to describe how we can implement each item with #ApacheAPISIX (or not).
February 4, 2024 at 10:47 PM
Back from #Devops DDay in Marseille. Thanks to the great audience and the many questions I had after my talk about #ApacheAPISIX and #opentelemetry.
Next Saturday I’ll be in Torino for DevFest Alps. See you there!
Next Saturday I’ll be in Torino for DevFest Alps. See you there!
November 24, 2023 at 8:45 AM
Back from #Devops DDay in Marseille. Thanks to the great audience and the many questions I had after my talk about #ApacheAPISIX and #opentelemetry.
Next Saturday I’ll be in Torino for DevFest Alps. See you there!
Next Saturday I’ll be in Torino for DevFest Alps. See you there!
The post will cover two alternatives to resize images: the traditional storage-heavy one and a on-the-fly one with #imgproxy and #ApacheAPISIX
blog.frankel.ch/resize-image...
#performance #costoptimization
blog.frankel.ch/resize-image...
#performance #costoptimization
Resizing images on-the-fly
As a web architect, one of the many issues is asset management. And the most significant issue in assets is images. A naive approach would be to set an image and let the browser resize the image via C...
blog.frankel.ch
October 1, 2023 at 4:09 PM
The post will cover two alternatives to resize images: the traditional storage-heavy one and a on-the-fly one with #imgproxy and #ApacheAPISIX
blog.frankel.ch/resize-image...
#performance #costoptimization
blog.frankel.ch/resize-image...
#performance #costoptimization
What’s New with the @ApacheAPISIX #APIGateway? From #Wasm support and a natural language AI portal, there’s a range of news about one of the most active open source #API projects on GitHub
thenewstack.io/whats-new-wi...
Feels amazing to be part of it! 😊
thenewstack.io/whats-new-wi...
Feels amazing to be part of it! 😊
What’s New with the APISIX Gateway
From Wasm support and a natural language AI portal, there’s a range of news about one of the most active open source API projects on GitHub
thenewstack.io
August 31, 2023 at 5:17 PM
What’s New with the @ApacheAPISIX #APIGateway? From #Wasm support and a natural language AI portal, there’s a range of news about one of the most active open source #API projects on GitHub
thenewstack.io/whats-new-wi...
Feels amazing to be part of it! 😊
thenewstack.io/whats-new-wi...
Feels amazing to be part of it! 😊