• I have searched the issues of this repository and believe that this is not a duplicate.

Ⅰ. Issue Description

Ⅱ. Describe what happened

If there is an exception, please attach the exception trace:

Just paste your stack trace here!

key-auth 插件的 README 文档翻译
https://github.com/alibaba/higress/blob/main/plugins/wasm-cpp/extensions/key_auth

https://higress.io/zh-cn/docs/user/quickstart.html

Who is Using Higress

First of all, thanks sincerely for constantly using and supporting Higress. We will try our best to keep Higress better, and keep growing community.

The purpose of this issue

• We’d like to listen to the community to make Higress better.
• We want to attract more people to contribute to Higress.
• We're willing to learn more Higress use scenarios in the field for better planning.

What we expect from you

Pls. submit a comment in this issue to include the following information:

• your company, school or organization.
• your city and country.
• your contact info: blog, email, twitter (at least one，you may not provide it if it is inconvenient).
• for what business scenario do you use Higress.

You can refer to the following sample answer for the format:

 * Orgnizatioin: Alibaba
 * Location: Hangzhou, China
 * Contact: [email protected]
 * Purpose (multiple choice):
    - [x] pure reverse proxy scene（F5/nginx）
    - [x] microservice scene （kong/spring cloud gateway）
    - [x] security scene（waf）
  * Status:
    - [] development&testing
    - [] production
  * (Option) Logo (show in the official site):

Action now，build Higress

If you are still concerning about using Higress in production, you can join us by scanning the DingTalk QR Code. We will track Higress status from your side by the information you provided above, and assist you join the community to build the Higress together.

Thanks again for your participation !
Higress Team

谁在使用 Higress

首先诚挚地感谢每一位持续关注并使用 Higress 的朋友。我们会持续投入，力图把 Higress 变得更好，把 Higress 社区和生态变得更加繁荣。

此 Issue 的目的

聆听社区的声音，让 Higress 变得更好
吸引更多的人参与贡献
更多的了解 Higress 的实际使用场景，以方便下一步的规划

我们期待您能提供

在此提交一条评论, 评论内容包括:

• 您所在公司、学校或组织
• 您所在的城市、国家
• 您的联系方式: 微博、邮箱、微信 (至少一个，如果不方便可不提供)
• 您将 Higress 用于哪些业务场景

您可以参考下面的样例来提供您的信息：

* 组织：阿里巴巴
* 地点：**杭州
* 联系方式：[email protected]
* 业务场景(多选)：
   - [x] 流量网关场景（如nginx）
   - [x] 微服务网关场景 （如kong/spring cloud gateway）
   - [x] 安全网关场景（如waf）
 *  采用状态：
   - [] 预研&测试阶段
   - [] 生产使用阶段
 * (非必填)公司logo(用于官网展示)：

开始行动，使用 Higress

如果您还对 Higress 的开发和生产上线有问题，您可以通过扫描钉钉群二维码加入我们，我们会根据您上面提供的信息来跟踪您的使用情况，辅助您参与到社区共建中。

再次感谢你的参与!!!
Higress 团队

我为什么需要这个功能？

1：因为接入cert-manager需要一定的学习成本，对不了解cert-manager的工程师来讲不是特别友好
2：针对dev/sit/test/fat/uat等环境可能并不需要真正的接入付费证书

我希望它是什么样子？

1：希望在Helm/Yamlfile部署的时候可以支持打开这个功能，可以调研一下caddy的ingress的功能
2：打开此功能后，当用户没有在部署应用时可以选择性的开启自动TLS，这样它可以自动的去走ACME或者其他的自动方法去实现这个HTTPS生成的功能

Caddy-ingress

Caddy-ingress

https://github.com/alibaba/higress/blob/main/plugins/wasm-cpp/extensions/custom_response

请将该Issue 分配给我，谢谢

• I have searched the issues of this repository and believe that this is not a duplicate.

Ⅰ. Issue Description

Edit Deploy Of higress-gateway,adds hostNetwork: true ,but Pod's status is SysctlForbidden.

Ⅱ. Describe what happened

If there is an exception, please attach the exception trace:

Just paste your stack trace here!

Ⅲ. Describe what you expected to happen

Ⅳ. How to reproduce it (as minimally and precisely as possible)

1. xxx
2. xxx
3. xxx

Ⅴ. Anything else we need to know?

Ⅵ. Environment:

• Higress version:
• OS :
• Others:

https://github.com/alibaba/higress/blob/main/plugins/wasm-cpp/extensions/bot_detect

5.1% -> 30%

hmac-auth 插件的 README 文档翻译

https://github.com/alibaba/higress/blob/main/plugins/wasm-cpp/extensions/hmac_auth

Why do you need it?

实现 Higress CLI 工具，简化安装、升级、运维步骤

Implement Higress CLI to support easier installation, upgrade and operations

Why you need it?

When I read the source, I found that Higress uses a single patch to record the change from the upstream projects.
Therefore, Higress now have some huge patch file (9000 lines+), which will make the maintenance very hard.

Some features require patching several projects. For example, to add sentinel support, both go-control-plane and istio are patched. If we can move the patch into upstream, we can avoid some patches.

How it could be?

Break down the patch into multiple ones according to their features.
If possible, we can contribute some patches back to the upstream.

Other related information

-> 20%

I can solve it, assign it to me plz.

38.8% -> 60%

https://github.com/alibaba/higress/blob/main/plugins/wasm-cpp/extensions/jwt_auth

https://github.com/alibaba/higress/blob/main/plugins/wasm-cpp/extensions/request_block

Why do you need it?

Is your feature request related to a problem? Please describe in details

我有如下的路由

[{
    "match": {
        "PathSpecifier": {
            "Prefix": "/web/"
        }
    },
    "Action": {
        "Route": {
            "ClusterSpecifier": {
                "Cluster": "my-web"
            },
            "prefix_rewrite": "/",
            "HostRewriteSpecifier": {
                "AutoHostRewrite": {}
            }
        }
    }
},
{
    "match": {
        "PathSpecifier": {
            "Prefix": "/web"
        }
    },
    "Action": {
        "Route": {
            "ClusterSpecifier": {
                "Cluster": "my-web"
            },
            "prefix_rewrite": "/",
            "HostRewriteSpecifier": {
                "AutoHostRewrite": {}
            }
        }
    }
}]

假设请求 {gateway-domain}/web/abc , 上游服务 my-web 返回 302 Found location: /abc/ . 此时如果 envoy 不处理该响应的话, 浏览器就会访问 {gateway-domain}/abc/ 了.

对标 Nginx http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_redirect

How could it be?

A clear and concise description of what you want to happen. You can explain more about input of the feature, and output of it.

envoy 要么内部处理该重定向, 自动请求新的地址, 将正确结果返回客户端, 要么修改 location 字段后再返回给客户端.

Other related information

Add any other context or screenshots about the feature request here.

Why do you need it?

Deployment mode support HTTP/3

How could it be?

Add a helm value to determine whether it is enabled

Other related information

https://github.com/istio/istio/wiki/Experimental-QUIC-and-HTTP-3-support-in-Istio-gateways

commit id: 14421bd

Why do you need it?

提供开箱即用的网关日志收集和分析的能力

Provides out-of-the-box gateway log collection and analysis capabilities

How could it be?

Other related information

higress doc: https://higress.io/zh-cn/docs/ops/log.html
envoy doc: https://www.envoyproxy.io/docs/envoy/latest/configuration/observability/access_log/overview

https://github.com/alibaba/higress/blob/main/plugins/wasm-cpp/extensions/basic_auth

Ⅰ. Issue Description

See:

1. https://github.com/alibaba/higress/actions/runs/3404270584/jobs/5661377643
2. https://github.com/alibaba/higress/actions/runs/3407130908/jobs/5666458465

-> 20%

https://higress.io/zh-cn/docs/user/wasm-go.html

• I have searched the issues of this repository and believe that this is not a duplicate.

Ⅰ. Issue Description

gateway 创建报错。

Ⅱ. Describe what happened

If there is an exception, please attach the exception trace:

helm upgrade --install higress -n higress-system  oci://higress-registry.cn-hangzhou.cr.aliyuncs.com/charts/higress

Ⅲ. Describe what you expected to happen

这种情况建议通过增加 QA 来引导用户自己配置 securityContext 以及 containerSecurityContext

Ⅳ. How to reproduce it (as minimally and precisely as possible)

1. xxx
2. xxx
3. xxx

Ⅴ. Anything else we need to know?

Ⅵ. Environment:

1. Kubernetes 1.23
2. OS: CentOS7
3. Linux Kernel: 3.10

https://higress.io/zh-cn/docs/ops/deploy-by-helm.html

61.1% -> 80%

Why do you need it?

实现一个插件，可以匹配应答和状态码返回自定义应答

Implement a plugin that can replace the response body according to the configuration

How could it be?

config example:

rules:
- match:
     status: 403
     body: "RBAC: access denied"
  replace:
     status: 200
     body: "{\"code\":403,\"message\":\"User is not authenticated\"}"
     content-type:  "application/json;utf-8"
- match:
     status: 503
     body: "no healthy upstream"
  replace:
     status: 200
     body: "{\"code\":503,\"message\":\"No Healthy Upstream\"}"
     content-type:  "application/json;utf-8"

Other related information

Add any other context or screenshots about the feature request here.

有搭建开发环境入门资料吗

http://nginx.org/en/docs/http/ngx_http_realip_module.html

Why do you need it?

实现 RESTful 的 admin api 提供控制台对接

Implement RESTful admin api to provide console usage

How could it be?

Other related information

64.7% -> 80%

We should add code format tool and check the code style before merging pr.

Why do you need it?

用于实现 Skywalking 指标观测，从而实现基于 Skywalking 的 Higress 监控大盘

It is used to realize the Skywalking indicator observation, so as to realize the Higress observability kanban based on Skywalking

How could it be?

Other related information

skywalking doc: https://skywalking.apache.org/docs/main/v8.9.1/en/setup/envoy/metrics_service_setting/

Why do you need it?

What features are needed for the first release higress console

How could it be?

• Service list & Service Source;
• Route list;
• Domain list.

Other related information

• Plugin Management ?
• BPM SPI ?

16.7% -> 40%

https://github.com/alibaba/higress/blob/main/plugins/wasm-cpp/extensions/key_rate_limit