207 commits

Author	SHA1	Message	Date
afrouz	ed6debb194	add body_filter_by_lua_block lua plugin to ingress-nginx	2021-01-05 20:56:13 +03:30
Elvin Efendi	e0dece48f7	Add Global Rate Limiting support	2021-01-04 17:47:07 -05:00
Elvin Efendi	2cff9fa41d	generalize cidr parsing and improve lua tests	2021-01-04 15:01:55 -05:00
Kubernetes Prow Robot	b022ea8c40	Merge pull request #6639 from spacewander/use_last_for_ewma ... Don't pick tried endpoint & count the latest in ewma balancer	2020-12-23 18:50:27 -08:00
spacewander	06b200fa4b	Update for review	2020-12-24 09:07:12 +08:00
Kubernetes Prow Robot	7732aec3c4	Merge pull request #6600 from nic-6443/backend-sync-503-fix ... Bugfix: some requests fail with 503 when nginx reload	2020-12-23 09:02:26 -08:00
qianyong	8085304cb9	Separate the ExternalName backend from other backends in the process of synchronizing the backend, because the synchronization of the ExternalName backend requires dns resolution, so we should ensure that it does not affect the synchronization of the Non-ExternalName backend. After separation, in the init worker stage, we should immediately synchronize the Non-ExternalName backend, otherwise there will be some requests that fail with 503 because the balancer cannot be obtained in the rewrite stage.	2020-12-22 17:24:41 +08:00
spacewander	e118ebc08a	Don't pick tried endpoint & count the latest in ewma balancer ... fixes https://github.com/kubernetes/ingress-nginx/issues/6632	2020-12-18 19:21:51 +08:00
Josh Soref	a8728f3d2c	Spelling	2020-12-15 16:10:48 -05:00
Elvin Efendi	cc94a51cba	make sure canary attributes are reset on ewma backend sync	2020-12-11 09:38:58 -05:00
Kubernetes Prow Robot	baf2afc5de	Merge pull request #6546 from nic-6443/ewma-cananry-fix ... bugfix: update trafficShapingPolicy not working in ewma load-balance	2020-12-11 03:29:23 -08:00
Elvin Efendi	1e9650a0f9	fix flaky lua tests	2020-12-10 22:41:41 -05:00
Jangyooseok	1ad89c8bb2	fixed misspell ... Update rootfs/etc/nginx/lua/plugins/README.md	2020-12-04 10:13:00 +09:00
qianyong	8ca5450e22	bugfix: always update trafficShapingPolicy when using ewma as load-balance even if endpoints not change, otherwise update trafficShapingPolicy will not working	2020-12-01 12:10:15 +08:00
Manuel Alejandro de Brito Fontes	3f153add00	Refactor handling of path Prefix and Exact	2020-11-10 07:21:34 -03:00
Manuel Alejandro de Brito Fontes	a6b6f03b53	Add support for k8s ingress pathtype Prefix	2020-11-02 09:56:49 -05:00
Manuel Alejandro de Brito Fontes	493dd6726d	Replace request_uri	2020-09-27 20:26:39 -03:00
wenzong	87e79da16a	Move ocsp_response_cache:delete after certificate_data:set	2020-09-19 23:16:00 +08:00
wenzong	16f970d8bb	Use was_not_called without check args match	2020-09-19 00:15:42 +08:00
wenzong	724646bd73	Delete OCSP Response cache when certificate renewed	2020-09-18 14:30:18 +08:00
Frank Gadban	e9059eef01	fixed some typos ... Signed-off-by: Frank Gadban <frankgad@outlook.de>	2020-07-21 22:02:23 +02:00
agile6v	3402d07ff0	doc: update docs and fixed typos (#5821)	2020-07-01 10:02:52 -04:00
Manuel Alejandro de Brito Fontes	bcc3cfaa65	Dynamic LB sync non-external backends only when necessary	2020-06-29 18:11:51 -04:00
Bo0km4n	7ab0916c92	Resolve conflicts	2020-06-20 17:13:31 +09:00
Bo0km4n	53a6b0fd3b	Configurable metrics max batch size	2020-06-20 15:58:14 +09:00
agile6v	5b0f7d7d6e	Improve performance.	2020-06-10 17:36:56 +08:00
Manuel Alejandro de Brito Fontes	1d4c7ec65c	Fix lua lint error	2020-06-09 17:19:16 -04:00
Andreas Sommer	f27b404421	Serve correct TLS certificate for requests with uppercase host	2020-06-09 16:47:03 -04:00
agile6v	bafbd4cccf	Enable lj-releng tool to lint lua code.	2020-06-09 18:01:35 +08:00
agile6v	c035a144f8	Support the combination of nginx variables and text value for annotation upstream-hash-by.	2020-06-01 06:37:41 +08:00
Elvin Efendi	3b217cf766	make sure first backend sync happens in timer phase	2020-04-30 19:44:24 -04:00
Manuel Alejandro de Brito Fontes	c8eb914d8a	Remove noisy dns log	2020-04-28 18:34:51 -04:00
Elvin Efendi	b569d2357a	staple only when OCSP response status is "good"	2020-04-19 13:53:47 -04:00
Elvin Efendi	1dab12fb81	Lua OCSP stapling	2020-04-16 21:29:16 -04:00
Elvin Efendi	b60e25f1db	ingress-nginx lua plugins documentation	2020-04-14 09:47:58 -04:00
Manuel Alejandro de Brito Fontes	8527f774f7	Change condition order that produces endless loop	2020-04-03 10:53:40 -03:00
Kubernetes Prow Robot	5cf7018b6d	Merge pull request #5277 from ElvinEfendi/small-refactoring ... refactoring: use more specific var name	2020-03-23 06:02:51 -07:00
Manuel Alejandro de Brito Fontes	6ea6d47044	Empty directory	2020-03-22 17:16:30 -03:00
Manuel Alejandro de Brito Fontes	1894579455	Remove unnecessary logs	2020-03-22 17:09:39 -03:00
Elvin Efendi	eb112ea06c	refactoring: use more specific var name	2020-03-21 21:23:24 -04:00
Lisheng Zheng	f2e5d6f8a5	Migrate the backends handler logic to function	2020-02-27 09:31:04 +08:00
Lisheng Zheng	0b33650bb8	Feat: canary supports using specific match strategy to match header value.	2020-02-21 10:02:20 +08:00
Elvin Efendi	ad78425852	also expose pem cert uid in certificate.call function	2020-02-19 13:41:50 -05:00
Elvin Efendi	4bb9106be2	refactor ssl handling in preperation of OCSP stapling	2020-02-19 13:14:35 -05:00
briankopp	b2beeeab25	Add case for when user agent is nil ... Add test for nil user agent	2020-02-16 21:07:45 -06:00
Kubernetes Prow Robot	5e54f66ab2	Merge pull request #5040 from BrianKopp/samesite-followup ... Update documentation and remove hack fixed by upstream cookie library	2020-02-10 10:25:53 -08:00
Ilya Nemakov	46a3e0a6fd	Fix X-Forwarded-Proto based on proxy-protocol server port	2020-02-10 18:08:34 +03:00
BrianKopp	7c7a1b9c8b	Update samesite tests	2020-02-08 12:58:52 -07:00
BrianKopp	34b194c770	Update documentation and remove hack fixed by upstream cookie library	2020-02-08 11:54:52 -07:00
Brian Kopp	1b523390bb	Add SameSite=None support and conditionally omit SameSite=None for backwards compatibility	2020-01-29 14:30:00 -07:00