Apache APISIX: How to implement plugin orchestration in API Gateway wenming@apache.org Apache APISIX VP Ming Wen 温铭 • Co-founder @ api7.ai • VP and PMC member, Apache APISIX • committer, Apache TARS Foundation • More than 40 security patents Agenda • Introduction to Apache APISIX • Custom plugin development in API Gateway • Generate APISIX plugins automatically • The future of API Gateway services • k8s ingress controller • Use MQTT plugin as IoT gateway • Use IdP plugin as Zero-Trust gateway Technology Architecture Custom plugin development in API Gateway Difficulties of gateway

Your Branding Bundle Name <plugin> org.apache.felix maven-bundle-plugin 2.4.0 true *;public-context:=false 106 BRANDING plugin> You can put your branding.properties file in the project resources tifactId> bundle <plugin> org.apache.felix maven-bundle-plugin 2.4.0 true

Distributions 3.2. Commands 3.3. Features repositories 3.4. Features resolver 3.5. Namespaces 3.6. Maven plugin 3.7. Update guide 4. User Guide 4.1. Installation 4.1.1. Requirements 4.1.2. Using Apache Karaf WebConsole 5.6. Extending 5.6.1. Shell commands 5.6.2. WebConsole 5.7. Using the karaf-maven-plugin 5.7.1. Packaging 5.7.2. Commands goals 5.7.3. Features and kar goals 5.7.4. Instances and distributions simplify the generation of the code and OSGi headers, Karaf 4.x provides the karaf-services- maven-plugin (in org.apache.karaf.tooling Maven groupId). Take a look in the developer guide for the command

are used for connec kyuubi.engine.jdbc.connection.provider A JDBC connection provider plugin for the K connection to the JDBC URL. The configurat of org.apache.kyuubi.engine.jdbc.connecti Kyuubi Meaning Type Since kyuubi.lineage.parser.plugin.provider org.apache.kyuubi.plugin.lineage.LineageParserProvider The provider for the Spark lineage parser plugin. string 1.8.0 Metadata Key Default kyuubi outlive its pare connection. kyuubi.session.conf.advisor A config advisor plugin for Kyuubi Server. This plugin provide a list of custom configs for different users or se configs and overwrite

EncryptionConfig uses aescbc with a KMS provider ● Sidecar pod for the KMS plugin Master kube-apiserver etcd kms-plugin SECRETDEK DEKKEK KEK Terminology and Notation DEK Data encryption key KEK kube-apiserver etcd kms-plugin SECRET KMS 1.10 Kube-ApiServer Generates a DEK Master kube-apiserver etcd kms-plugin SECRET KMS 1.10 Kube-ApiServer Sends DEK to Plugin Master kube-apiserver kube-apiserver etcd kms-plugin Encrypt(DEK) SECRET KMS 1.10 Plugin Forwards to KMS Master kube-apiserver etcd kms-plugin Encrypt(DEK) SECRET Encrypt(DEK) KMS 1.10 KMS Encrypts a DEK Master kube-apiserver

Meaning Type Since kyuubi.lineage.parser.plugin.provider org.apache.kyuubi.plugin.lineage.LineageParserProvider The provider for the Spark lineage parser plugin. string 1.8.0 Metadata Key Default kyuubi outlive its pare connection. kyuubi.session.conf.advisor A config advisor plugin for Kyuubi Server. This plugin provide some custom configs for different users or sess configs and overwrite the session configs before openin new session. This config value should be a subclass of org.apache.kyuubi.plugin.SessionConfAdvisor wh has a zero-arg constructor. kyuubi.session.conf.file.reload.interval PT10M

Meaning Type Since kyuubi.lineage.pars er.plugin.provider org.apache.kyuubi.plug in.lineage.LineageParse rProvider The provider for the Spark lineage parser plugin. strin g 1.8.0 Metadata Key Default connection. bool ean 1.8.0 kyuubi.session.con f.advisor A config advisor plugin for Kyuubi Server. This plugin can provide some custom configs for different users or session configs and overwrite configs before opening a new session. This config value should be a subclass of org.apache.kyuubi.plugin.Sessi onConfAdvisor which has a zero-arg constructor. strin g 1.5.0 kyuubi.session.con f.file.reload

Meaning Type Since kyuubi.lineage.pars er.plugin.provider org.apache.kyuubi.plug in.lineage.LineageParse rProvider The provider for the Spark lineage parser plugin. strin g 1.8.0 Metadata Key Default connection. bool ean 1.8.0 kyuubi.session.con f.advisor A config advisor plugin for Kyuubi Server. This plugin can provide some custom configs for different users or session configs and overwrite configs before opening a new session. This config value should be a subclass of org.apache.kyuubi.plugin.Sessi onConfAdvisor which has a zero-arg constructor. strin g 1.5.0 kyuubi.session.con f.file.reload

Meaning Type Since kyuubi.lineage.pars er.plugin.provider org.apache.kyuubi.plug in.lineage.LineageParse rProvider The provider for the Spark lineage parser plugin. strin g 1.8.0 Metadata Key Default connection. bool ean 1.8.0 kyuubi.session.con f.advisor A config advisor plugin for Kyuubi Server. This plugin can provide some custom configs for different users or session configs and overwrite configs before opening a new session. This config value should be a subclass of org.apache.kyuubi.plugin.Sessi onConfAdvisor which has a zero-arg constructor. strin g 1.5.0 kyuubi.session.con f.file.reload

timeout. durat ion 1.0.0 kyuubi.session.con f.advisor A config advisor plugin for Kyuubi Server. This plugin can provide some custom configs for different users or session configs and overwrite configs before opening a new session. This config value should be a subclass of org.apache.kyuubi.plugin.Sessi strin g 1.5.0 Key Default Meaning Type Since onConfAdvisor which has a zero-arg constructor provider plugin for Kyuubi Server. This plugin can provide primary group and groups information for different users or session configs. This config value should be a subclass of org.apache.kyuubi.plugin.Group