Configure mTLS for Apache APISIX client and upstream connections.
npx skills add https://github.com/moonming/a6 --skill a6-recipe-mtls
Please help me install this Agent Skill. Skill: a6-recipe-mtls Source: https://github.com/moonming/a6/tree/main/skills/a6-recipe-mtls Command: npx skills add https://github.com/moonming/a6 --skill a6-recipe-mtls
This Skill simplifies the complex process of configuring mutual TLS (mTLS) within Apache APISIX, ensuring secure communication for both client-to-APISIX and APISIX-to-upstream connections.
Configure APISIX to require client certificates for the domain api.example.com by running the provided a6 ssl create command.
High-intent search queries and answers about installing and using this skill.
Configuring mutual TLS in Apache APISIX involves creating SSL resources using a6 CLI commands to manage certificates for both client-to-APISIX and APISIX-to-upstream communication paths. This enforces certificate verification for incoming requests.
Securing APISIX to upstream communication with mTLS is done by configuring APISIX to present a client certificate when connecting to backend services. This ensures upstream TLS authentication and protects sensitive internal APIs.
Yes, APISIX supports end-to-end mTLS by enforcing client certificate verification for incoming requests and simultaneously configuring APISIX to authenticate with upstream services using its own trusted certificate.
Enforcing client certificate verification for a specific domain in APISIX requires running the a6 ssl create command. This provisions the SSL certificate resource needed to require client authentication for that domain.
Yes, SSL certificate management for APISIX is handled using the a6 CLI. It provides commands to create and update SSL resources, enabling comprehensive security configuration including mutual TLS.
Setting up mutual TLS is necessary when you need to securely expose internal APIs by requiring clients to authenticate with certificates, ensuring trusted communication across the entire client-to-upstream path.
api7Configure mutual TLS end-to-end for APISIX using the a6 CLI.
masermediagroup-stackConfigure and validate TLS and mutual TLS for service traffic.
moonmingConfigure the APISIX proxy-rewrite plugin to modify request URIs, headers, methods, and schemes.
manutejImplement Kong API gateway patterns for routing, authentication, and rate limiting.
