APISIX ingress + WAF setup

General
1

Hello everyone,

We’re planning to switch from ingress-nginx to APISIX as the ingress controller in our k8s cluster, and I wanted to ask what the best approach would be for installing the sigsci-agent alongside APISIX so it can inspect incoming traffic.

Thanks,

Robert T.

2

Hey @robertta – we don’t support APISIX at the moment, but our product team spotted this thread and are factoring it in for future consideration.

That said, out of personal curiosity, if you tried standing it up independently, I’d love to know your experience with the experiment.

3

Hey @aspires , the way we got it working was:

  • Take the base image of APISIX, say version 3.16.0 and add to it the fastly apt repo, after which we installed package: sigsci-module-nginx.

  • Once that’s done, we created an ApisixGlobalRule whereby using APISIX’s serverless plugin, we force load the SignalSciences module during the access phase(serverless-pre-function) and log phase(serverless-post-function)

From our tests so far, WAF has been working okay and it seems to be behaving as expected.

4

Thanks @cosminc, that’s amazing! Keep us posted if anything changes with that implementation, good or bad