Skip to content

[ISSUE #6396] Document Admin network isolation requirements.#1125

Merged
Aias00 merged 1 commit into
apache:mainfrom
BobSong-dev:docs/6396-admin-network-isolation
Jul 13, 2026
Merged

[ISSUE #6396] Document Admin network isolation requirements.#1125
Aias00 merged 1 commit into
apache:mainfrom
BobSong-dev:docs/6396-admin-network-isolation

Conversation

@BobSong-dev

Copy link
Copy Markdown
Contributor

What this PR does

Adds an Admin-plane deployment security checklist to the current and 2.7.0.3 English and Chinese documentation.

The checklist explains that:

  • the ShenYu Admin listening port must be restricted to trusted networks;
  • /websocket is unauthenticated by design for Admin-to-Gateway data synchronization and requires network-level protection;
  • the Gateway data plane and Admin management plane should be exposed separately.

Verification

  • Ran markdownlint-cli@0.25.0 against all four changed documentation files.

Related to apache/shenyu#6396.

@Aias00

Aias00 commented Jul 12, 2026

Copy link
Copy Markdown
Contributor

pls add my wechat: aias00

@Aias00 Aias00 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@Aias00
Aias00 merged commit f7f96e4 into apache:main Jul 13, 2026
2 checks passed
@Aias00

Aias00 commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

thx for your pr, you Chinese? can add my wechat: aias00

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants