hellotalk/apisix Docker 镜像 - 轩辕镜像 | Docker 镜像高效稳定拉取服务

0、install docker-compose（安装docker-compose）

下载最新版的docker-compose文件 (download compose file)
$ sudo curl -L [***]`uname -s`-`uname -m` -o /usr/local/bin/docker-compose

添加可执行权限 (change privilege)
$ sudo chmod +x /usr/local/bin/docker-compose

测试安装结果 (test)
$ docker-compose --version 

1、create a compose file with content below.（在需要的目录创建如下内容的docker-compose.yml文件）

docker-compose.yml

version: "3"

services:

  apisix:
    image: hellotalk/apisix
    restart: always
    container_name: test_api_gateway 
    volumes:
      - ./apisix_log:/usr/local/apisix/logs
      - ./apisix_conf/config.yaml:/usr/local/apisix/conf/config.yaml:ro
      - ./apisix_conf/debug.yaml:/usr/local/apisix/conf/debug.yaml:ro
    #ports:
    #  - "0.0.0.0:8080:9080/tcp"
    depends_on:
      - etcd
    #networks:
    #    - apisix      
    network_mode: host
      
  etcd: 
    # if you are in the mainland China, please use Azure China mirror:
    # image: gcr.azk8s.cn/etcd-development/etcd:v3.3.12
    image: hellotalk/etcd-dev
    command: /usr/local/bin/etcd --advertise-client-urls [***] --listen-client-urls [***]
    restart: always
    container_name: test_api_etcd 
    volumes:
        - ./etcd_data:/etcd_data
    environment:
        ETCD_DATA_DIR: /etcd_data
    ports:
        - "2379:2379/tcp"
    networks:
        - apisix
 
networks:
  apisix:
    driver: bridge

2、 create dir（在docker-compose.yml的同级目录创建子目录）

create subdir apisix_conf,apisix_log,etcd_conf,etcd_data in the same dir. and config.yaml should be inside the apisix_conf dir

3、run command to start apisix（启动etcd和apisix）

docker-compose up -d

4、check dashboard（make sure that dashboard is enabled in config.yaml）（访问apisix的管理后台）

visit [***]

5、demo config.yaml inside apisix_conf（一个精简的apisix配置文件模板）

apisix:
  node_listen: 80              # APISIX 监听端口，可以根据需要去修改
  node_ssl_listen: 443
  enable_heartbeat: true
  enable_admin: true
  enable_debug: false
  enable_ipv6: true
  config_center: etcd             # etcd: 用 etcd 来存储配置
  # allow_admin:                  # [***]
  #   - 127.0.0.0/24              # If we don't set any IP list, then any IP access is allowed by default.
  #   - "::/64"
  # port_admin: 9180              # use a separate port
  real_ip_header: "X-Real-IP"     # [***]
  real_ip_from:                   # [***]
    - 127.0.0.1
    - 'unix:'


  # Default token when use API to call for Admin API.
  # *NOTE*: Highly recommended to modify this value to protect APISIX's Admin API.
  # Disabling this configuration item means that the Admin API does not
  # require any authentication.
  admin_key:
    -
      name: "admin"
      key: edd1c9f034335f136f87ad84b625c8f1
      role: admin                 # admin: manage all configuration data
                                  # viewer: only can view configuration data
    -
      name: "viewer"
      key: 4054f7cf07e344346cd3f287985e76a2
      role: viewer

  router:
    http: 'radixtree_host_uri'         # radixtree_uri: match route by uri(base on radixtree)
    ssl: 'radixtree_sni'          #  
  dns_resolver:                   # default DNS resolver, with disable IPv6 and enable local DNS
    - 114.114.114.114
    - 223.5.5.5
    - 1.1.1.1
    - 8.8.8.8
  dns_resolver_valid: 30          # valid time for dns result 30 seconds

  ssl:
    enable: true
    enable_http2: true
    listen_port: 9443
    ssl_protocols: "TLSv1 TLSv1.1 TLSv1.2 TLSv1.3"
    ssl_ciphers: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA"

nginx_config:                     # config for render the template to genarate nginx.conf
  error_log: "logs/error.log"
  error_log_level: "warn"         # warn,error
  event:
    worker_connections: ***
  http:
    access_log: "logs/access.log"
    keepalive_timeout: 60s         # timeout during which a keep-alive client connection will stay open on the server side.
    client_header_timeout: 60s     # timeout for reading client request header, then 408 (Request Time-out) error is returned to the client
    client_body_timeout: 60s       # timeout for reading client request body, then 408 (Request Time-out) error is returned to the client
    send_timeout: 10s              # timeout for transmitting a response to the client.then the connection is closed

etcd:
  host: "[***]"   # etcd address
  prefix: "/apisix"               # apisix configurations prefix
  timeout: 1                      # 1 seconds

plugins:                          # plugin list
  - example-plugin
  - limit-req
  - limit-count
  - limit-conn
  - key-auth
  - prometheus
  - node-status
  - jwt-auth
  - zipkin
  - ip-restriction
  - grpc-transcode
  - serverless-pre-function
  - serverless-post-function
  - openid-connect
  - proxy-rewrite

stream_plugins:
  - mqtt-proxy