jiazhizhong/higress
1
0
Fork 0
mirror of https://github.com/alibaba/higress.git synced 2026-07-28 15:20:24 +08:00
Code Issues Packages Projects Releases Wiki Activity
1,722 Commits 12 Branches 81 Tags
4db97b6a3690f8a5d27445cb3b5b717675a68734
Commit Graph

1722 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
澄潭
4db97b6a36 test: build #4034 repro plugin in CI (VERSION -alpha) 
CI build-wasm-plugins.sh only compiles wasm-go plugins whose VERSION ends
in -alpha; VERSION was "1" so the plugin was skipped and the file:// wasm was
absent in CI, making the wasm filter fail closed (HTTP 500 on every request).
Bump VERSION to 1.0.0-alpha so CI builds the plugin.

Signed-off-by: 澄潭 <zty98751@alibaba-inc.com>
 2026-07-07 00:39:16 +08:00
澄潭
bf30043807 test: add #4034 conformance repro (redis-failure inject CPU spin) 
Adds a wasm-go conformance case reproducing #4034: a deferred async
redis-failure callback synchronously calls injectEncodedDataToFilterChain,
which pre-fix makes WasmBase::doAfterVmCallActions re-queue an action forever
and spins a worker at 100% CPU. Redis is pointed at an unroutable endpoint so
the failure callbacks fire under concurrency. With the drain-to-local fix the
gateway stays responsive (200); a spinning worker would fail via timeout.

Validated end-to-end against the rebuilt gateway image.

Signed-off-by: 澄潭 <zty98751@alibaba-inc.com>
 2026-07-06 21:48:47 +08:00
澄潭
0a8aea12d6 fix: point ENVOY_LATEST_IMAGE_TAG at rebuilt gateway for #4034 drain-to-local 
Use the gateway image built from the envoy submodule that carries the
proxy-wasm-cpp-host doAfterVmCallActions drain-to-local fix, so e2e and
dev installs exercise the #4034 CPU-spin fix.

Signed-off-by: 澄潭 <zty98751@alibaba-inc.com>
 2026-07-06 21:36:14 +08:00
澄潭
91244c578a fix: bump envoy submodule to include doAfterVmCallActions drain-to-local (#4034) 
Advances the envoy/envoy submodule from f49d591e to f468a1a3 (higress-group/envoy
envoy-1.36 tip), which carries the proxy_wasm_cpp_host pin bump (higress-group/envoy#28)
picking up higress-group/proxy-wasm-cpp-host#12.

That fix makes WasmBase::doAfterVmCallActions reentry-safe (drain the
after_vm_call_actions_ queue into a stack-local before iterating), resolving the
worker-thread CPU 100% infinite loop when a Wasm plugin re-enters via
onRedisCallFailure + injectEncodedDataToFilterChain (#4034).

Signed-off-by: 澄潭 <zty98751@alibaba-inc.com>
 2026-07-06 15:45:03 +08:00
澄潭
d5f2b624fb feat: initialize issue-spec workflow for Higress (#4059) 
Signed-off-by: johnlanni <johnlanni@users.noreply.github.com>
Co-authored-by: johnlanni <johnlanni@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-04 21:55:53 +08:00
澄潭
6c98ea74e0 fix: avoid waiting for missing request bodies in transformer (#4024) 
Signed-off-by: johnlanni <zty98751@alibaba-inc.com>
 2026-06-25 17:36:01 +08:00
EndlessSeeker
39ec41aab6 Release v2.2.3 (#4019) 
Signed-off-by: EndlessSeeker <1766508902@qq.com>
v2.2.3 		2026-06-25 10:34:30 +08:00
澄潭
910c26ec14 chore: update envoy submodule (#4017) 
Signed-off-by: zty98751 <zty98751@alibaba-inc.com>
 2026-06-24 19:06:16 +08:00
EndlessSeeker
582af464c0 Revert "fix: Skip TLS certificate verification for HTTPS upstreams" (#4016) 
Signed-off-by: EndlessSeeker <1766508902@qq.com>
 2026-06-24 15:39:32 +08:00
EndlessSeeker
04389fd0c6 fix: harden cluster key rate limit cookie parsing (#4012) 
Signed-off-by: EndlessSeeker <1766508902@qq.com>
 2026-06-24 15:03:05 +08:00
EndlessSeeker
10498a2c86 fix(oidc): fail closed when verifier is unavailable (#4013) 
Signed-off-by: EndlessSeeker <1766508902@qq.com>
Co-authored-by: Jingze <52855280+Jing-ze@users.noreply.github.com>
 2026-06-24 14:22:24 +08:00
yangjuan
e958290283 feat(ai-context-limit): add context window limit wasm plugin (#4000) 
Signed-off-by: Cai Rui <cairui@U-7VTK6WQN-2207.local>
 2026-06-24 13:40:51 +08:00
DENG
6d1c55c1fb fix(ai-proxy): add ids for Vertex tool calls (#3990) 
Signed-off-by: DENG <33118163+XinhhD@users.noreply.github.com>
Co-authored-by: woody <yaodiwu618@gmail.com>
 2026-06-23 20:34:54 +08:00
9r0k
e57f18e581 feat(ai-proxy): vLLM passthrough for Anthropic Messages and newer OpenAI endpoints (#3989) 
Signed-off-by: Rand01ph <tanyawei1991@gmail.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-authored-by: woody <yaodiwu618@gmail.com>
 2026-06-23 19:34:54 +08:00
Kent Dong
1694f48fd9 fix(ai-cache): handle SSE first chunk with role only (fixes #3953) (#3962) 
Signed-off-by: CH3CHO <ch3cho@qq.com>
Co-authored-by: woody <yaodiwu618@gmail.com>
 2026-06-23 17:38:50 +08:00
cyberslack_lee
7c94b5a822 fix: fix some typo errors (#3988) 
Co-authored-by: woody <yaodiwu618@gmail.com>
 2026-06-23 11:08:44 +08:00
geekspeng
ab0085362c fix(helm): apply imagePullPolicy to controller container and promtail sidecar (#4002) 
Signed-off-by: geekspeng <geekspeng@icloud.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-06-22 22:33:03 +08:00
zijiren
9c13b6418c feat: Enhance SSL passthrough support (#3943) 
Signed-off-by: zijiren233 <pyh1670605849@gmail.com>
 2026-06-22 21:06:42 +08:00
EndlessSeeker
f060c9f51d fix: preserve ingress load balancer hostnames (#3994) 
Signed-off-by: EndlessSeeker <1766508902@qq.com>
 2026-06-22 11:34:38 +08:00
Heracles
bd6039f53b fix(helm): use Chart.Version as default plugin-server image tag (#3998) 
Signed-off-by: yqz <2678785492@qq.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
 2026-06-22 09:28:36 +08:00
小画家
36bd830029 bugfix: fix golang-filter architecture mismatch during local gateway build on arm64 macOS (#3905) 
Signed-off-by: 胥寅 <xuuyin@dingtalk.com>
Co-authored-by: 胥寅 <xuuyin@dingtalk.com>
 2026-06-21 18:13:58 +08:00
澄潭
4db4633560 chore: update envoy submodule (#3987) 
Signed-off-by: zty98751 <zty98751@alibaba-inc.com>
 2026-06-17 20:28:15 +08:00
EndlessSeeker
efaef2e3d0 Support configurable GatewayClass isolation (#3981) 
Signed-off-by: EndlessSeeker <1766508902@qq.com>
 2026-06-17 20:27:45 +08:00
geekspeng
e758504d72 fix(helm): move imagePullPolicy from PodSpec to container level in gateway pod template (#3924) 
Signed-off-by: geekspeng <geekspeng@icloud.com>
 2026-06-17 16:22:51 +08:00
DENG
3c3a067f07 fix(ai-proxy): include tool call type in Claude stream deltas (#3985) 
Signed-off-by: DENG <33118163+XinhhD@users.noreply.github.com>
Co-authored-by: woody <yaodiwu618@gmail.com>
 2026-06-17 12:18:18 +08:00
DENG
7e11e2f320 fix(ai-proxy): preserve Vertex thoughtSignature in OpenAI tool calls (#3973) 
Signed-off-by: DENG <33118163+XinhhD@users.noreply.github.com>
 2026-06-17 11:40:38 +08:00
DENG
7abf27a2a3 fix(ai-proxy): clean client Authorization header for api-key providers (#3956) 
Signed-off-by: DENG <33118163+XinhhD@users.noreply.github.com>
Co-authored-by: woody <yaodiwu618@gmail.com>
 2026-06-16 16:19:37 +08:00
EndlessSeeker
d1f95f6e54 fix: set gateway status address type by value (#3980) 
Signed-off-by: EndlessSeeker <1766508902@qq.com>
 2026-06-16 13:41:25 +08:00
EndlessSeeker
83c12d571d feat(helm): allow skipping IngressClass creation (#3979) 
Signed-off-by: EndlessSeeker <1766508902@qq.com>
 2026-06-16 11:26:56 +08:00
Jingze
45fc5a31bc test(wasm-plugins): lift unit-test coverage to ≥90% across 9 plugins (#3879) 
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com>
Co-authored-by: woody <yaodiwu618@gmail.com>
 2026-06-15 20:33:10 +08:00
Jingze
3065d4e071 test(traffic-tag): cover operator matrix, weight CDF boundaries, and parser reject paths (#3878) 
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com>
 2026-06-15 20:32:38 +08:00
Jingze
c65d4cd938 test(hmac-auth-apisix): cover algorithm matrix, clock skew, and auth edge cases (#3875) 
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-06-15 20:31:02 +08:00
Jingze
547b7bf45a test(transformer): add end-to-end coverage and fix silent error wrapping (#3873) 
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com>
 2026-06-15 20:29:51 +08:00
Jingze
bf0b1e96c5 test(wasm-go/mcp): expand unit test coverage for mcp-server framework (#3871) 
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-06-15 20:29:20 +08:00
EndlessSeeker
c69526b30e fix(helm): disable alpha Gateway API watches by default (#3971) 
Signed-off-by: EndlessSeeker <1766508902@qq.com>
 2026-06-15 18:52:28 +08:00
EndlessSeeker
73e7510eca fix: merge InferencePool route configs during HTTPRoute merge (#3964) 2026-06-12 18:05:24 +08:00
yangjuan
2897c1e83a feat(model-router): add keepOriginalModelName option to preserve full model name (#3916) 
Signed-off-by: Cai Rui <yangjuan.cr@alibaba-inc.com>
 2026-06-07 15:49:45 +08:00
FAUST
b69b5c7c10 doc: add missed chinese readme for extensions (#3890) 
Signed-off-by: zhoujinyu <2319109590@qq.com>
 2026-06-07 12:26:08 +08:00
Jingze
57db9ccc46 fix(oidc): fix Set-Cookie header corruption during session refresh (#3928) 
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
 2026-06-05 17:58:20 +08:00
澄潭
137d76332e fix: rebuild mcp filter on high memory usage (#3922) 
Signed-off-by: johnlanni <zty98751@alibaba-inc.com>
 2026-06-05 10:57:43 +08:00
澄潭
d888ab23de fix(wasm): remove request-count rebuild triggers (#3923) 
Signed-off-by: johnlanni <zty98751@alibaba-inc.com>
 2026-06-05 10:57:24 +08:00
Jingze
29b5a533e6 fix(oidc): bump oauth2-proxy to fix nil panic in verifier callback (#3914) 
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
 2026-06-04 10:52:24 +08:00
Jingze
071086904d fix(ai-proxy): strip anthropic-beta and anthropic-version headers in vertex passthrough (#3904) 
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com>
 2026-06-02 20:26:30 +08:00
JianweiWang
58ffdae6ba feat(ai-security-guard): add Embedding API content detection support (#3895) 
Signed-off-by: root <jianwei.wjw@alibaba-inc.com>
 2026-06-02 12:11:00 +08:00
JianweiWang
a45b1dde6c fix(ai-statistics): skip empty streaming model values (#3851) 
Signed-off-by: jianwei.wjw <jianwei.wjw@alibaba-inc.com>
 2026-06-02 12:10:46 +08:00
zat366
52c99eb27d feat(ai-load-balancer): add cluster_hash load balancing policy with FNV-1a consistent hashing (#3898) 
Signed-off-by: zat366 <authentic.zhao@gmail.com>
 2026-06-01 10:19:46 +08:00
JianweiWang
c21a38e783 feat(ai-security-guard): structured x_higress deny response, error-path metrics, and AI logging (#3894) 
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
Co-authored-by: rinfx <yucheng.lxr@alibaba-inc.com>
 2026-05-29 10:45:10 +08:00
Jingze
385f8d8b4e fix(ai-proxy): natively route Anthropic Messages to vertex :rawPredict (#3860) 
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-28 09:54:56 +08:00
Betula-L
a86aaadaa4 feat(jwt-auth): support remote JWKS (#3838) 
Signed-off-by: Betula-L <6059935+Betula-L@users.noreply.github.com>
Co-authored-by: Betula-L <6059935+Betula-L@users.noreply.github.com>
 2026-05-25 16:04:10 +08:00
Kent Dong
e6fc09b14f fix: Fix test cases in registry/nacos/mcpserver/watcher_test.go (#3869) 
Signed-off-by: CH3CHO <ch3cho@qq.com>
 2026-05-25 15:15:03 +08:00