https://apisix.apache.org/docs/apisix/next/dashboard/
https://apisix.apache.org/zh/docs/dashboard/USER GUIDE/

docker pull apache/apisix-database
docker run --d --name dashboard \
-p 9000:9000 \
-v <CONFIG_FILE>:/usr/local/apache-database/conf/conf.yaml \
apache/apisix-database

#拉取镜像
[root@ubuntu2404 ~]#apt update && apt -y install docker.io
[root@ubuntu2404 ~]#docker pull registry.cn-beijing.aliyuncs.com/wangxiaochun/apisix-dashboard:3.0.1-alpine
[root@ubuntu2404 ~]#docker pull apache/apisix-dashboard:3.0.1-alpine

#直接启动容器会有问题
[root@ubuntu2404 ~]#docker run -d --name apisix-dashboard registry.cn-beijing.aliyuncs.com/wangxiaochun/apisix-dashboard:3.0.1-alpine
[root@ubuntu2404 ~]#docker run -d --name apisix-dashboard apache/apisix-dashboard:3.0.1-alpine
0d6960d8c0d0e6ec2c039cb934b51740a0aabfbc4a329b6aef3115ed1eae005c

#默认无法连接本地的etcd
[root@ubuntu2404 ~]#docker logs apisix-dashboard
{"level":"warn","ts":"2023-12-06T03:06:10.361Z","logger":"etcd-client","caller":"v3@v3.5.5/retry_interceptor.go:62","msg":"retrying of unary invoker failed","target":"etcd-endpoints://0xc0000efa40/127.0.0.1:2379","attempt":0,"error":"rpc error: code = DeadlineExceeded desc = latest balancer error: last connection error: connection error: desc = \"transport: Error while dialing dial tcp 127.0.0.1:2379: connect: connection refused\""}
Error: etcd get failed: context deadline exceeded
Usage:
 manager-api [flags]
 manager-api [command]

Available Commands:
 completion  Generate the autocompletion script for the specified shell
 help        Help about any command
 version     show manager-api version

Flags:
  -c, --config string     config file
  -h, --help              help for manager-api
  -p, --work-dir string   current work directory (default ".")

Use "manager-api [command] --help" for more information about a command.
etcd get failed: context deadline exceeded

#使用宿主机网络启动，连接宿主机的ETCD
[root@ubuntu2404 ~]#docker run -d --network host --name apisix-dashboard registry.cn-beijing.aliyuncs.com/wangxiaochun/apisix-dashboard:3.0.1-alpine
[root@ubuntu2404 ~]#docker run -d --network host --name apisix-dashboard apache/apisix-dashboard:3.0.1-alpine 

#查看日志
[root@ubuntu2404 ~]#docker logs apisix-dashboard
The manager-api is running successfully!
Version : 3.0.1
GitHash : 397c0cb5
Config File: /usr/local/apisix-dashboard/conf/conf.yaml
Listen : 0.0.0.0:9000
Loglevel: warn
ErrorLogFile: /usr/local/apisix-dashboard/logs/error.log
AccessLogFile: /usr/local/apisix-dashboard/logs/access.log

[root@ubuntu2404 ~]#docker ps 
CONTAINER ID   IMAGE                                          COMMAND                  CREATED             STATUS          PORTS     NAMES
d6f896595e2c   apache/apisix-dashboard:3.0.1-alpine          "/usr/local/apisix-d…"   About a minute ago   Up About a minute             apisix-dashboard

#默认不允许远程访问apix dashboard，只允许本地127.0.0.1访问
[root@ubuntu2404 ~]#curl http://10.0.0.200:9000/
{"Code":20002,"Message":"IP address not allowed","Data":null,"SourceSrv":""}

[root@ubuntu2404 ~]#curl http://127.0.0.1:9000/ -I
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 6712
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:
Content-Type: text/html; charset=utf-8
Last-Modified: Wed, 12 Apr 2023 02:49:17 GMT
X-Frame-Options: deny
X-Request-Id: 0a5814e9-2f89-41fc-a8dc-58b305d0c636
Date: Mon, 16 Dec 2024 03:56:08 GMT

#生成dashboard配置文件
#方法1：从容器出提取conf.yaml文件
[root@ubuntu2404 ~]#docker cp apisix-dashboard:/usr/local/apisix-dashboard/conf/conf.yaml .
[root@ubuntu2404 ~]#vim conf.yaml
......
conf:
  listen:
    host: 0.0.0.0     #`manager api` listening ip or host name
    port: 9000        #`manager api` listening port
  allow_list:          #If we don't set any IP list, then any IP access is allowed by default.
    - 0.0.0.0/0       #修改此行，开放远程访问

#方法2：从github网络下载旧版conf.yaml，注意：新版没有此文件
[root@ubuntu2404 ~]#wget https://github.com/apache/apisix-docker/archive/refs/heads/release/apisix-2.15.0.zip
[root@ubuntu2404 ~]#unzip apisix-2.15.0.zip
[root@ubuntu2404 ~]#cp apisix-docker-master/example/dashboard_conf/conf.yaml .

#修改dashboard配置文件
[root@ubuntu2404 ~]#vim conf.yaml
......
conf:
  listen:
    host: 0.0.0.0     #`manager api` listening ip or host name
    port: 9000        #`manager api` listening port
  allow_list:          #If we don't set any IP list, then any IP access is allowed by default.
    - 0.0.0.0/0       #开放远程访问
etcd:
  endpoints:           #supports defining multiple etcd host addresses for an etcd cluster
    #- "http://etcd:2379"     #原内容
    - "http://127.0.0.1:2379" #修改此行
......

[root@ubuntu2404 ~]#docker rm -f apisix-dashboard

#用修改过的配置覆盖容器内的原有的配置
#阿里镜像仓库
[root@ubuntu2404 ~]#docker run -d --network host --name apisix-dashboard -v ./conf.yaml:/usr/local/apisix-dashboard/conf/conf.yaml registry.cn-beijing.aliyuncs.com/wangxiaochun/apisix-dashboard:3.0.1-alpine

#官方镜像仓库
[root@ubuntu2404 ~]#docker run -d --network host --name apisix-dashboard -v ./conf.yaml:/usr/local/apisix-dashboard/conf/conf.yaml apache/apisix-dashboard:3.0.1-alpine

#浏览器访问:默认用户名和密码都是admin
http://apisix.wang.org:9000/

[root@ubuntu2404 ~]#git clone https://github.com/apache/apisix-docker.git
[root@ubuntu2404 ~]#cd apisix-docker/
[root@ubuntu2404 apisix-docker]#ls
all-in-one compose dashboard debian debian-dev docs example LICENSE MAINTAINING.md Makefile README.md redhat
[root@ubuntu2404 apisix-docker]#cd example/
[root@ubuntu2404 example]#ls
apisix_conf     docker-compose-arm64.yml       docker-compose.yml grafana_conf prometheus_conf
dashboard_conf docker-compose-standalone.yml etcd_conf           mkcert       upstream

[root@ubuntu2404 example]#cat dashboard_conf/conf.yaml 
#
#Licensed to the Apache Software Foundation (ASF) under one or more
#contributor license agreements. See the NOTICE file distributed with
#this work for additional information regarding copyright ownership.
#The ASF licenses this file to You under the Apache License, Version 2.0
#(the "License"); you may not use this file except in compliance with
#the License.  You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
#Unless required by applicable law or agreed to in writing, software
#distributed under the License is distributed on an "AS IS" BASIS,
#WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#See the License for the specific language governing permissions and
#limitations under the License.
#
conf:
  listen:
    host: 0.0.0.0     #`manager api` listening ip or host name
    port: 9000        #`manager api` listening port
  allow_list:          #If we don't set any IP list, then any IP access is allowed by default.
    - 0.0.0.0/0
  etcd:
    endpoints:         #supports defining multiple etcd host addresses for an etcd cluster
      - "http://etcd:2379"
                             #yamllint disable rule:comments-indentation
                             #etcd basic auth info
    #username: "root"   #ignore etcd username if not enable etcd auth
    #password: "123456" #ignore etcd password if not enable etcd auth
    mtls:
      key_file: ""          #Path of your self-signed client side key
      cert_file: ""         #Path of your self-signed client side cert
      ca_file: ""           #Path of your self-signed ca cert, the CA is used to sign callers' certificates
    #prefix: /apisix     #apisix config's prefix in etcd, /apisix by default
  log:
    error_log:
      level: warn       #supports levels, lower to higher: debug, info, warn, error, panic, fatal
      file_path:
        logs/error.log  #supports relative path, absolute path, standard output
                        #such as: logs/error.log, /tmp/logs/error.log, /dev/stdout, /dev/stderr
    access_log:
      file_path:
        logs/access.log  #supports relative path, absolute path, standard output
                         #such as: logs/access.log, /tmp/logs/access.log, /dev/stdout, /dev/stderr
                         #log example: 2020-12-09T16:38:09.039+0800 INFO filter/logging.go:46 /apisix/admin/routes/r1 {"status": 401, "host": "127.0.0.1:9000", "query": "asdfsafd=adf&a=a", "requestId": "3d50ecb8-758c-46d1-af5b-cd9d1c820156", "latency": 0, "remoteIP": "127.0.0.1", "method": "PUT", "errs": []}
security:
     #access_control_allow_origin: "http://httpbin.org"
     #access_control_allow_credentials: true         #support using custom cors configration
     #access_control_allow_headers: "Authorization"
     #access_control-allow_methods: "*"
     #x_frame_options: "deny"
     content_security_policy: "default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src *"  #You can set frame-src to provide content for your grafana panel.
authentication:
  secret:
    secret              #secret for jwt token generation.
                        #NOTE: Highly recommended to modify this value to protect `manager api`.
                        #if it's default value, when `manager api` start, it will generate a random string to replace it.
  expire_time: 3600     #jwt token expire time, in second
  users:                #yamllint enable rule:comments-indentation
    - username: admin   #username and password for login `manager api`
      password: admin
    - username: user
      password: user

plugins:                          #plugin list (sorted in alphabetical order)
  - api-breaker
  - authz-keycloak
  - basic-auth
  - batch-requests
  - consumer-restriction
  - cors
  #- dubbo-proxy
  - echo
  #- error-log-logger
  #- example-plugin
  - fault-injection
  - grpc-transcode
  - hmac-auth
  - http-logger
  - ip-restriction
  - jwt-auth
  - kafka-logger
  - key-auth
  - limit-conn
  - limit-count
  - limit-req
  #- log-rotate
  #- node-status
  - openid-connect
  - prometheus
  - proxy-cache
  - proxy-mirror
  - proxy-rewrite
  - redirect
  - referer-restriction
  - request-id
  - request-validation
  - response-rewrite
  - serverless-post-function
  - serverless-pre-function
  #- skywalking
  - sls-logger
  - syslog
  - tcp-logger
  - udp-logger
  - uri-blocker
  - wolf-rbac
  - zipkin
  - server-info
  - traffic-split

#创建配置文件
[root@ubuntu2404 ~]#cp apisix-docker/example/dashboard_conf/conf.yaml /tmp/conf.yaml

#修改配置文件
[root@ubuntu2404 ~]#vim /tmp/conf.yaml
......
conf:
  listen:
    host: 0.0.0.0     #`manager api` listening ip or host name
    port: 9000        #`manager api` listening port
  allow_list:          #If we don't set any IP list, then any IP access is allowed by default.
    - 0.0.0.0/0
  etcd:
    endpoints:         #supports defining multiple etcd host addresses for an etcd cluster
      - "http://etcd-quickstart:2379"  #修改此行的etcd地址,此处使用2.3节的docker脚本安装,所以指定etcd服务对应容器的名称
      #- "http://127.0.0.1:2379"       #如果是2.2的二进制包安装,修改为此处配置
......

#如果APISIX是基于2.3的docker脚本安装,执行下面
[root@ubuntu2404 ~]#docker run -d --network apisix-quickstart-net --name dashboard -p 9000:9000 -v /tmp/conf.yaml:/usr/local/apisix-dashboard/conf/conf.yaml   apache/apisix-dashboard

#确认容器启动
[root@ubuntu2404 ~]#docker ps
CONTAINER ID   IMAGE                          COMMAND                  CREATED        STATUS        PORTS                                 NAMES
b9feff96bc1d   apache/apisix-dashboard        "/usr/local/apisix-d…"   7 minutes ago  Up 7 minutes  0.0.0.0:9000->9000/tcp, :::9000->9000/tcp   dashboard
20befff17ecc   apache/apisix:3.6.0-debian     "/docker-entrypoint.…"   2 hours ago    Up 2 hours    0.0.0.0:9080->9080/tcp, :::9080->9080/tcp, 0.0.0.0:9100->9100/tcp, :::9100->9100/tcp, 0.0.0.0:9180->9180/tcp, :::9180->9180/tcp, 0.0.0.0:9443->9443/tcp, :::9443->9443/tcp, 0.0.0.0:9090->9092/tcp, :::9090->9092/tcp   apisix-quickstart
c132befe013c   bitnami/etcd:3.5.7             "/opt/bitnami/script…"   2 hours ago    Up 2 hours    2379-2380/tcp                                 etcd-quickstart

#如果APISIX是是基于2.2的二进制包安装，执行下面
[root@ubuntu2404 ~]#apt update && apt -y install docker.io
[root@ubuntu2404 ~]#docker run -d --name dashboard --network host -v /tmp/conf.yaml:/usr/local/apisix-dashboard/conf/conf.yaml   apache/apisix-dashboard

#确认容器启动
[root@ubuntu2404 ~]#docker ps
CONTAINER ID   IMAME                  COMMAND                  CREATED        STATUS        PORTS     NAMES
398f521946ab   apache/apisix-dashboard   "/usr/local/apisix-d…"   2 minutes ago   Up 2 minutes             dashboard

#浏览器访问:默认用户名和密码都是admin
http://apisix.wang.org:9000/

#1. install RPM package
sudo yum install -y https://github.com/apache/apisix-dashboard/releases/download/v3.0.1/apisix-dashboard-
3.0.1-0.el7.x86_64.rpm
#run dashboard in the shell
sudo manager-api -p /usr/local/apisix/dashboard/
#or run dashboard as a service
systemctl start apisix-dashboard
#浏览器访问http://127.0.0.1:9000 默认用户名和密码都是admin

#先安装ETCD和APISIX,参看2.2.1和2.2.3节
#安装
[root@rocky8 ~]#wget https://github.com/apache/apisix-dashboard/releases/download/v3.0.1/apisix-dashboard-3.0.1-0.el8.x86_64.rpm
[root@rocky8 ~]#yum -y install apisix-dashboard-3.0.1-0.el8.x86_64.rpm
[root@rocky8 ~]#ls /usr/local/apisix/dashboard/
conf dag-to-lua html logs manager-api
[root@rocky8 ~]#ls /usr/local/apisix/dashboard/conf
conf.yaml customize_schema.json schema.json

#修改配置文件
[root@rocky8 ~]#cat /usr/local/apisix/dashboard/conf/conf.yaml 
#
#Licensed to the Apache Software Foundation (ASF) under one or more
#contributor license agreements. See the NOTICE file distributed with
#this work for additional information regarding copyright ownership.
#The ASF licenses this file to You under the Apache License, Version 2.0
#(the "License"); you may not use this file except in compliance with
#the License.
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
#Unless required by applicable law or agreed to in writing, software
#distributed under the License is distributed on an "AS IS" BASIS,
#WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#See the License for the specific language governing permissions and
#limitations under the License.
#
#yamllint disable rule:comments-indentation
conf:
  listen:
    #host: 127.0.0.1     #the address on which the `Manager API` should listen.
                          #The default value is 0.0.0.0, if want to specify, please enable it.
                          #This value accepts IPv4, IPv6, and hostname.
    port: 9000            #The port on which the `Manager API` should listen.
  #ssl:
  #  host: 127.0.0.1     #the address on which the `Manager API` should listen for HTTPS.
                          #The default value is 0.0.0.0, if want to specify, please enable it.
  #  port: 9001           #The port on which the `Manager API` should listen for HTTPS.
  #  cert: "/tmp/cert/example.crt" #Path of your SSL cert.
  #  key: "/tmp/cert/example.key" #Path of your SSL key.
  allow_list:             #If we don't set any IP list, then any IP access is allowed by default.
    - 0.0.0.0/0           #修改此行,默认只允许本机访问
    - 127.0.0.1           #The rules are checked in sequence until the first match is found.
    - ::1                 #In this example, access is allowed only for IPv4 network 127.0.0.1, and for IPv6 network ::1.
                          #It also support CIDR like 192.168.1.0/24 and 2001:0db8::/32
  etcd:
    endpoints:            #supports defining multiple etcd host addresses for an etcd cluster
      - 127.0.0.1:2379

                          #yamllint disable rule:comments-indentation
                          #etcd basic auth info
    #username: "root"   #ignore etcd username if not enable etcd auth
    #password: "123456" #ignore etcd password if not enable etcd auth
    mtls:
      key_file: ""          #Path of your self-signed client side key
      cert_file: ""         #Path of your self-signed client side cert
      ca_file: ""           #Path of your self-signed ca cert, the CA is used to sign callers' certificates
    #prefix: /apisix       #apisix config's prefix in etcd, /apisix by default
  log:
    error_log:
      level: warn       #supports levels, lower to higher: debug, info, warn, error, panic, fatal
      file_path:
        logs/error.log  #supports relative path, absolute path, standard output
                        #such as: logs/error.log, /tmp/logs/error.log, /dev/stdout, /dev/stderr
                        #such as absolute path on Windows: winfile:///C:\error.log
    access_log:
      file_path:
        logs/access.log  #supports relative path, absolute path, standard output
                         #such as: logs/access.log, /tmp/logs/access.log, /dev/stdout, /dev/stderr
                         #such as absolute path on Windows: winfile:///C:\access.log
                         #log example: 2020-12-09T16:38:09.039+0800 INFO filter/logging.go:46 /apisix/admin/routes/r1 {"status": 401, "host": "127.0.0.1:9000", "query": "asdfsafd=adf&a=a", "requestId": "3d50ecb8-758c-46d1-af5b-cd9d1c820156", "latency": 0, "remoteIP": "127.0.0.1", "method": "PUT", "errs": []}
  max_cpu: 0               #supports tweaking with the number of OS threads are going to be used for parallelism. Default value: 0 [will use max number of available cpu cores considering hyperthreading (if any)]. If the value is negative, is will not touch the existing parallelism profile.
  #security:
  #  access_control_allow_origin: "http://httpbin.org"
  #  access_control_allow_credentials: true         #support using custom cors configration
  #  access_control_allow_headers: "Authorization"
  #  access_control-allow_methods: "*"
  #  x_frame_options: "deny"
  #  content_security_policy: "default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; frame-src xx.xx.xx.xx:3000" #You can set frame-src to provide content for your grafana panel.
authentication:
  secret:
    secret              #secret for jwt token generation.
                        #NOTE: Highly recommended to modify this value to protect `manager api`.
                        #if it's default value, when `manager api` start, it will generate a random string to replace it.
  expire_time: 3600     #jwt token expire time, in second
  users:                #yamllint enable rule:comments-indentation
    - username: admin   #username and password for login `manager api`
      password: admin
    - username: user
      password: user
oidc:
  enabled: false
  expire_time: 3600
  client_id: dashboard
  client_secret: dashboard
  auth_url: http://172.17.0.1:8080/auth/realms/master/protocol/openid-connect/auth
  token_url: http://172.17.0.1:8080/auth/realms/master/protocol/openid-connect/token
  user_info_url: http://172.17.0.1:8080/auth/realms/master/protocol/openid-connect/userinfo
  redirect_url: http://127.0.0.1:9000/apisix/admin/oidc/callback
  scope: openid
plugins:
  - api-breaker
  - authz-casbin
  - authz-casdoor
  - authz-keycloak
  - aws-lambda
  - azure-functions
  - basic-auth
  #- batch-requests
  - clickhouse-logger
  - client-control
  - consumer-restriction
  - cors
  - csrf
  - datadog
  #- dubbo-proxy
  - echo
  - error-log-logger
  #- example-plugin
  - ext-plugin-post-req
  - ext-plugin-post-resp
  - ext-plugin-pre-req
  - fault-injection
  - file-logger
  - forward-auth
  - google-cloud-logging
  - grpc-transcode
  - grpc-web
  - gzip
  - hmac-auth
  - http-logger
  - ip-restriction
  - jwt-auth
  - kafka-logger
  - kafka-proxy
  - key-auth
  - ldap-auth
  - limit-conn
  - limit-count
  - limit-req
  - loggly
  #- log-rotate
  - mocking
  #- node-status
  - opa
  - openid-connect
  - opentelemetry
  - openwhisk
  - prometheus
  - proxy-cache
  - proxy-control
  - proxy-mirror
  - proxy-rewrite
  - public-api
  - real-ip
  - redirect
  - referer-restriction
  - request-id
  - request-validation
  - response-rewrite
  - rocketmq-logger
  - server-info
  - serverless-post-function
  - serverless-pre-function
  - skywalking
  - skywalking-logger
  - sls-logger
  - splunk-hec-logging
  - syslog
  - tcp-logger
  - traffic-split
  - ua-restriction
  - udp-logger
  - uri-blocker
  - wolf-rbac
  - zipkin
  - elasticsearch-logge
  - openfunction
  - tencent-cloud-cls
  - ai
  - cas-auth

[root@rocky8 ~]#systemctl status apisix-dashboard.service 
● apisix-dashboard.service - apisix-dashboard
   Loaded: loaded (/usr/lib/systemd/system/apisix-dashboard.service; static; vendor preset: disabled)
   Active: active (running) since Tue 2023-11-07 13:54:09 CST; 5s ago
 Main PID: 2032 (manager-api)
   Tasks: 7 (limit: 11175)
   Memory: 15.0M
   CGroup: /system.slice/apisix-dashboard.service
           └─2032 /usr/local/apisix/dashboard/manager-api -c /usr/local/apisix/dashboard/conf/conf.yaml

Nov 07 13:54:09 rocky8.wang.org systemd[1]: apisix-dashboard.service: Dependency Conflicts=apisix-dashboard.service dropped
Nov 07 13:54:09 rocky8.wang.org systemd[1]: Started apisix-dashboard.
Nov 07 13:54:09 rocky8.wang.org manager-api[2032]: The manager-api is running successfully!
Nov 07 13:54:09 rocky8.wang.org manager-api[2032]: Version : 3.0.1
Nov 07 13:54:09 rocky8.wang.org manager-api[2032]: GitHash : 397c0cb
Nov 07 13:54:09 rocky8.wang.org manager-api[2032]: Config File: /usr/local/apisix/dashboard/conf/conf.yaml
Nov 07 13:54:09 rocky8.wang.org manager-api[2032]: Listen : 0.0.0.0:9000
Nov 07 13:54:09 rocky8.wang.org manager-api[2032]: Loglevel: warn
Nov 07 13:54:09 rocky8.wang.org manager-api[2032]: ErrorLogFile: /usr/local/apisix/dashboard/logs/error.log
Nov 07 13:54:09 rocky8.wang.org manager-api[2032]: AccessLogFile: /usr/local/apisix/dashboard/logs/access.log

[root@rocky8 ~]#ss -ntlp|grep api
LISTEN 0      128                *:9000             *:*    users:(("manager-api",pid=2032,fd=10))

$ go env -w GOPROXY=https://goproxy.cn, direct

https://apisix.apache.org/zh/docs/dashboard/install/#source-download

git clone -b release/3.0 https://github.com/apache/apisix-database.git && cd apisix-database

https://apisix.apache.org/zh/docs/dashboard/install/#source-build

cd apisix-database
make build

cd ./output
./manager-api

mkdir -p /usr/local/apisix-database
cp -rf ./output/* /usr/local/apisix-database

Create service unit

Copy the following or use this file directly, you need to copy it to the /usr/lib/systemd/system directory and execute the systemctl daemon-reload command.

copy service unit

cp ./api/service/apisix-database.service /usr/lib/systemd/system/apisix-database.service
systemctl daemon-reload
or: If you need to modify the service unit, you can use the following command
echo "[unit]
Description=apisix-database
Conflicts=apisix-database.service
After=network-online.target
[Service]
WorkingDirectory=/usr/local/apisix-database
ExecStart=/usr/local/apisix-database/manager-api -c /usr/local/apisix-database/conf/conf.yaml" > /usr/lib/systemd/system/apisix-database.service

[root@ubuntu2404 ~]#curl -s "http://127.0.0.1:9080" --head | grep Server
Server: APISIX/3.13.0
[root@ubuntu2404 ~]#vim /usr/local/apisix/conf/config.yaml
deployment:
 admin:
   enable_admin_cors: true
   admin_listen:
     ip: 0.0.0.0
     port: 9180
   admin_key:
    - key: edd1c9f034335f136f87ad84b625c8f1
     role: admin
     name: admin
   enable_admin_ui: true #默认开启UI

#访问链接
http://10.0.0.100:9180/ui/    

[root@ubuntu2404 ~]#curl -X GET "https://httpbin.org/anything/class?name=wangxiaochun"
{
  "args": {
    "name": "wangxiaochun"
  },
  "data": "",
  "files": {},
  "form": {},
  "headers": {
    "Accept": "*/*",
    "Host": "httpbin.org",
    "User-Agent": "curl/8.5.0",
    "X-Amzn-Trace-Id": "Root=1-6882f752-2acdcdcd7baad83e04634a47"
  },
  "json": null,
  "method": "GET",
  "origin": "219.142.151.32",
  "url": "https://httpbin.org/anything/class?name=wangxiaochun"
}

[root@ubuntu2404 ~]#docker run --name httpbin -d -p 80:80 registry.cn- beijing.aliyun.com/zhangqing/httpbin:2019
[root@ubuntu2404 ~]#docker run --name httpbin -d -p 80:80 kennethreitz/httpbin
Unable to find image 'kennethreitz/httpbin:latest' locally
latest:Pulling from kennethreitz/httpbin
473ede7ed136:Pull complete
c46b5fa4d940:Pull complete
93ae3df89c92:Pull complete
6b1eed27cade:Pull complete
0373952b589d:Pull complete

7b82cd0ee527: Pull complete
a36b2d884a89: Pull complete
Digest: sha256:599fe5e5073102ddb0ee3ddb65f049dbab44fa9fc251f6835c9990f8fb196a72b
Status: Downloaded newer image for kennethreitz/httpbin:latest
[2023-12-06 03:45:33 +0000] [1] [INFO] Starting gunicorn 19.9.0
[2023-12-06 03:45:33 +0000] [1] [INFO] Listening at: http://0.0.0.0:80 (1)
[2023-12-06 03:45:33 +0000] [1] [INFO] Using worker: gevent
[2023-12-06 03:45:33 +0000] [9] [INFO] Booting worker with pid: 9

[root@ubuntu2404 ~]#docker run -d --name httpbin -p 80:80 registry.cnbeijing.aliyuncs.com/zhangqing/httpbin:2019

[root@ubuntu2404 ~]#docker run -d --name httpbin -p 80:80 kennethreitz/httpbin

#测试访问
[root@ubuntu2404 ~]#curl -XGET -H"host: www.wang.org" http://127.0.0.1:9080/anything/wang?name=18

{
  "args": {
    "name": "18"
  },
  "data": "",
  "files": {},
  "form": {},
  "headers": {
    "Accept": "*/*",
    "Host": "www.wang.org",
    "User-Agent": "curl/7.81.0",
    "X-Forwarded-Host": "www.wang.org"
  },
  "json": null,
  "method": "GET",
  "origin": "172.20.0.1",
  "url": "http://www.wang.org/anything/wang?name=18"
}

#在10.0.0.100上关闭服务,再访问可以看到下面显示结果
[root@ubuntu2404 ~]#curl -XGET -H"host: www.wang.org" http://127.0.0.1:9080/anything/wang?name=18
<html>
<head><title>502 Bad Gateway</title></head>
<body>
<center><h1>502 Bad Gateway</h1></center>
<hr><center>openresty</center>
<p><em>Powered by <a href="https://apisix.apache.org/">APISIX</a>.</em></p>
</body>
</html>

#在10.0.0.101上开启服务
[root@ubuntu2404 ~]#docker run -p 80:80 kennethreitz/httpbin

#再次访问,如下显示
[root@ubuntu2404 ~]#curl -XGET -H"host: www.wang.org" http://127.0.0.1:9080/anything/wang?name=18
{
  "args": {
    "name": "18"
  },
  "data": "",
  "files": {},
  "form": {},
  "headers": {
    "Accept": "*/*",
    "Host": "www.wang.org",
    "User-Agent": "curl/7.81.0",
    "X-Forwarded-Host": "www.wang.org"
  },
  "json": null,
  "method": "GET",
  "origin": "172.20.0.1",
  "url": "http://www.wang.org/anything/wang?name=18"
}

#只要后台upstream主机开启服务,就可以看到下面显示
[root@ubuntu2404 ~]#curl -XGET -H"host: www.wang.org" http://127.0.0.1:9080/anything/wang?name=18
{
  "args": {
    "name": "18"
  },
  "data": "",
  "files": {},
  "form": {},
  "headers": {
    "Accept": "*/*",
    "Host": "www.wang.org",
    "User-Agent": "curl/7.81.0",
    "X-Forwarded-Host": "www.wang.org"
  },
  "json": null,
  "method": "GET",
  "origin": "172.20.0.1",
  "url": "http://www.wang.org/anything/wang?name=18"
}

#停止后面所有服务,再访问可看到下面提示
[root@ubuntu2404 ~]#curl -XGET -H"host: www.wang.org" http://127.0.0.1:9080/anything/wang?name=18
<html>
<head><title>502 Bad Gateway</title></head>
<body>
<center><h1>502 Bad Gateway</h1></center>
<hr><center>openresty</center>
<p><em>Powered by <a href="https://apisix.apache.org/">APISIX</a>.</em></p>
</body>
</html>

#测试错误的路由
[root@ubuntu2404 ~]#curl -XGET -H"host: www.wang.com" http://127.0.0.1:9080/anything/wang?name=18
{"error_msg":"404 Route Not Found"}

[root@ubuntu2404 ~]#curl -XGET -H"host: www.wang.org" http://127.0.0.1:9080
{"error_msg":"404 Route Not Found"}

[root@ubuntu2404 ~]#curl -XGET -H"host: www.wang.org" http://127.0.0.1:9080/anything
{"error_msg":"404 Route Not Found"}

[root@ubuntu2404 ~]#curl --location --request GET "http://httpbin.org/get?foo1=bar1&foo2=bar2"
{
  "args": {
    "foo1": "bar1", 
    "foo2": "bar2"
 }, 
  "headers": {
    "Accept": "*/*", 
    "Host": "httpbin.org", 
    "User-Agent": "curl/7.81.0", 
    "X-Amzn-Trace-Id": "Root=1-6549e617-04677a9d31de10326f61686d"
 }, 
  "origin": "1.203.173.227", 
  "url": "http://httpbin.org/get?foo1=bar1&foo2=bar2"
}

[root@ubuntu2404 ~]#docker run --name httpbin -d -p 80:80 registry.cnbeijing.aliyuncs.com/wangxiaochun/httpbin:2019
[root@ubuntu2404 ~]#docker run --name httpbin -d -p 80:80 kennethreitz/httpbin
Unable to find image 'kennethreitz/httpbin:latest' locally
latest: Pulling from kennethreitz/httpbin
473ede7ed136: Pull complete 
c46b5fa4d940: Pull complete 
93ae3df89c92: Pull complete 
6b1eed27cade: Pull complete 
0373952b589d: Pull complete 
7b82cd0ee527: Pull complete 
a36b2d884a89: Pull complete 
Digest: sha256:599fe5e5073102dbb0ee3dbb65f049dab44fa9fc251f6835c9990f8fb196a72b
Status: Downloaded newer image for kennethreitz/httpbin:latest
[2023-11-07 08:22:39 +0000] [1] [INFO] Starting gunicorn 19.9.0
[2023-11-07 08:22:39 +0000] [1] [INFO] Listening at: http://0.0.0.0:80 (1)
[2023-11-07 08:22:39 +0000] [1] [INFO] Using worker: gevent
[2023-11-07 08:22:39 +0000] [8] [INFO] Booting worker with pid: 8
[root@ubuntu2404 ~]#curl http://127.0.0.1/anything/foo?age=18
{
  "args": {
    "age": "18"
 }, 
  "data": "", 
  "files": {}, 
  "form": {}, 
  "headers": {
    "Accept": "*/*", 
    "Host": "127.0.0.1", 
    "User-Agent": "curl/7.81.0"
 }, 
  "json": null, 
  "method": "GET", 
  "origin": "172.17.0.1", 
  "url": "http://127.0.0.1/anything/foo?age=18"
}

[root@ubuntu2404 ~]#curl "http://127.0.0.1:9180/apisix/admin/services" -H "X-API-KEY: 
edd1c9f034335f136f87ad84b625c8f1"
{"list":[],"total":0}
[root@ubuntu2404 ~]#curl -I "http://127.0.0.1:9180/apisix/admin/services" -H "X-API-KEY: 
edd1c9f034335f136f87ad84b625c8f1" 
HTTP/1.1 404 Not Found
Date: Tue, 26 Sep 2023 08:20:25 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 225
Connection: keep-alive
Server: APISIX/3.5.0
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: *
Access-Control-Max-Age: 3600
#说明:edd1c9f034335f136f87ad84b625c8f1是config.yml文件的key的值

#Route 对象 JSON 配置示例：
{
    "id": "1",                            #id，非必填
    "uris": ["/a","/b"],                  #一组 URL 路径
    "methods": ["GET","POST"],            #可以填多个方法
    "hosts": ["a.com","b.com"],           #一组 host 域名
    "plugins": {},                        #指定 route 绑定的插件
    "priority": 0,                        #apisix 支持多种匹配方式，可能会在一次匹配中同时匹配到多条路由，此时优先级高的优
先匹配中
    "name": "路由 xxx",
    "desc": "hello world",
    "remote_addrs": ["127.0.0.1"],        #一组客户端请求 IP 地址
    "vars": [["http_user", "==", "ios"]], #由一个或多个 [var, operator, val] 元素组成的列表
    "upstream_id": "1",                   #upstream 对象在 etcd 中的 id ，建议使用此值
    "upstream": {},                       #upstream 信息对象，建议尽量不要使用
    "timeout": {                          #为 route 设置 upstream 的连接、发送消息、接收消息的超时时间。
        "connect": 3,
        "send": 3,
        "read": 3
   },
    "filter_func": ""                     #用户自定义的过滤函数，非必填
}

https://apisix.apache.org/zh/docs/apisix/admin-api/#route-example

#测试上游服务
[root@ubuntu2404 ~]#curl -H"host: www.example.com" http://httpbin.org/anything/foo?arg=18
#返回结果如下
{
  "args": {
    "arg": "18"
 }, 
  "data": "", 
  "files": {}, 
  "form": {}, 
  "headers": {
    "Accept": "*/*", 
    "Host": "www.example.com", 
    "User-Agent": "curl/7.81.0", 
    "X-Amzn-Trace-Id": "Root=1-6549f122-6a9539412936f9da26226cc5"
 }, 
  "json": null, 
  "method": "GET", 
  "origin": "1.203.173.227", 
  "url": "http://www.example.com/anything/foo?arg=18"
}
#创建路由
[root@ubuntu2404 ~]#curl http://127.0.0.1:9180/apisix/admin/routes/1 \
-H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' -X PUT -i -d '
{
    "name": "testroute1",
    "methods": ["GET"],
    "hosts": ["www.example.com"],
    "uri": "/anything/*",
    "upstream": {
        "type": "roundrobin",
        "nodes": {
            "httpbin.org:80": 1
       }
   }
}'
#返回结果如下
HTTP/1.1 201 Created
Date: Tue, 07 Nov 2023 08:16:36 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Server: APISIX/3.6.0
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Expose-Headers: *
Access-Control-Max-Age: 3600
X-API-VERSION: v3
{"value":{"uri":"/anything/*","hosts":["www.example.com"],"status":1,"methods":
["GET"],"priority":0,"upstream":{"pass_host":"pass","nodes":
{"httpbin.org:80":1},"hash_on":"vars","scheme":"http","type":"roundrobin"},"id":"1","create_time":1699344996,"
update_time":1699344996},"key":"/apisix/routes/1"}
#访问APISIX
[root@ubuntu2404 ~]#curl -XGET -H"host: www.example.com" http://127.0.0.1:9080/anything/foo?arg=18
{
  "args": {
    "arg": "18"
 }, 
  "data": "", 
  "files": {}, 
  "form": {}, 
  "headers": {
    "Accept": "*/*", 
    "Host": "www.example.com", 
    "User-Agent": "curl/7.81.0", 
    "X-Amzn-Trace-Id": "Root=1-6549f292-744f27f967c045d027e940a8", 
    "X-Forwarded-Host": "www.example.com"
 }, 
  "json": null, 
  "method": "GET", 
  "origin": "172.18.0.1, 1.203.173.227", 
  "url": "http://www.example.com/anything/foo?arg=18"
}

[root@ubuntu2404 ~]#curl -X DELETE http://127.0.0.1:9180/admin/admin/routes/1 -H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1'

#添加一个新的上游
[root@ubuntu2404 ~]#curl http://127.0.0.1:9180/apisix/admin/routes/1 \
-H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' -X PATCH -i -d '
{
    "upstream": {
        "nodes": {
            "127.0.0.1:80": 1
       }
   }
}'
[root@ubuntu2404 ~]#curl -XGET -H"host: www.example.com" http://127.0.0.1:9080/anything/foo?arg=18
{
  "args": {
    "arg": "18"
 }, 
  "data": "", 
  "files": {}, 
  "form": {}, 
  "headers": {
    "Accept": "*/*", 
    "Host": "www.example.com", 
    "User-Agent": "curl/7.81.0", 
    "X-Amzn-Trace-Id": "Root=1-6549f7d8-0de75e125f3af0e2733c6131", 
    "X-Forwarded-Host": "www.example.com"
 }, 
  "json": null, 
  "method": "GET", 
  "origin": "172.18.0.1, 1.203.173.227", 
  "url": "http://www.example.com/anything/foo?arg=18"
}

[root@ubuntu2404 ~]#curl http://127.0.0.1:9180/apisix/admin/routes/1 \
-H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' -X PATCH -i -d '
{
    "upstream": {
        "nodes": {
            "127.0.0.1:80": null
       }
   }
}'

curl http://127.0.0.1:9180/apisix/admin/routes/1 \
-H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' -X PATCH -i -d '
{
    "status": 0
}'
#结果显示
 HTTP/1.1 200 OK
...
#执行成功后，`status` 将更新为：
{
    "status": 0
}

curl http://127.0.0.1:9180/apisix/admin/routes/1 \
-H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' -X PATCH -i -d '
{
    "status": 1
}'
#结果显示
 HTTP/1.1 200 OK
...
#执行成功后，`status` 将更新为：
{
    "status": 1
}

curl http://127.0.0.1:9180/apisix/admin/routes/1 \
-H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' -X PATCH -i -d '
{
    "status": 1
}'
#结果显示
 HTTP/1.1 200 OK
...
#执行成功后，`status` 将更新为：
{
    "status": 1
}

curl 'http://127.0.0.1:9180/apisix/admin/routes/2?ttl=60' \
-H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' -X PUT -i -d '
{
    "uri": "/aa/index.html",
    "upstream": {
        "type": "roundrobin",
        "nodes": {
            "127.0.0.1:1980": 1
       }
   }
}'
#显示结果
HTTP/1.1 201 Created
date: Sat, 31 Aug 2019 01:17:15 GMT
...
#通过dashboard 可以查看到如下,过一分钟后则被删除

curl http://127.0.0.1:9180/apisix/admin/routes/1 \
-H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' -X PATCH -i -d '
{
    "upstream": {
        "nodes": {
            "127.0.0.1:1981": 1
        }
    }
}'

#结果显示
HTTP/1.1 200 OK
...

#执行成功后，上游节点将更新为：
{
    "127.0.0.1:1980": 1,
    "127.0.0.1:1981": 1
}

curl http://127.0.0.1:9180/apisix/admin/routes/1 \
-H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' -X PATCH -i -d '
{
    "upstream": {
        "nodes": {
            "127.0.0.1:1980": null
        }
    }
}'

#结果显示
HTTP/1.1 200 OK
...

#执行成功后，Upstream `nodes` 将更新为：
{
    "127.0.0.1:1981": 10
}

curl http://127.0.0.1:9180/apisix/admin/routes/1 \
-H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' -X PATCH -i -d '{
    "methods": ["GET", "POST"]
}'
#结果显示
HTTP/1.1 200 OK
...

["GET", "POST"]

curl http://127.0.0.1:9180/apisix/admin/routes/1/upstream/nodes \
-H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' -X PATCH -i -d '
{
    "127.0.0.1:1982": 1
}'
#结果显示
 HTTP/1.1 200 OK
...
#执行成功后，`nodes` 将不保留原来的数据，整个更新为：
{
   "127.0.0.1:1982": 1
}

curl http://127.0.0.1:9180/apisix/admin/routes/1/methods \
-H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' -X PATCH -i -d '["POST", "DELETE", "PATCH"]'
#结果显示
HTTP/1.1 200 OK
...
#执行成功后，`methods` 将不保留原来的数据，更新为：
["POST", "DELETE", "PATCH"

https://apisix.apache.org/zh/docs apisix/admin-api/#upstream