Skip to main content

Security plugins

The 10 http plugins of the Security category.

Security10​

  • aclAllows or denies consumers by the labels they carry.
  • chaitin-wafSends requests to a Chaitin WAF for inspection.
  • consumer-restrictionAllows or denies requests by consumer, group, route or service.
  • corsAdds CORS headers so browsers can call the API from other origins.
  • csrfProtects state-changing requests against cross-site request forgery.
  • ip-restrictionAllows or denies clients by IP address or CIDR range.
  • public-apiExposes an internal API of the engine on a route.
  • referer-restrictionAllows or denies requests by their Referer header.
  • ua-restrictionAllows or denies clients by their User-Agent.
  • uri-blockerBlocks requests whose URI matches a rule.
G8 dev · Apache APISIX® 3.19.0
Apache, Apache APISIX and APISIX are trademarks of The Apache Software Foundation.