社区首页 >问答首页 >使用特使进行节俭费率限制

问使用特使进行节俭费率限制
EN

Stack Overflow用户

提问于 2019-10-30 20:03:41

回答 1查看 263关注 0票数 1

我正在扩展Istio以提供Thrift功能。我现在正在开发的Istio组件是Pilot (特使配置服务)。我使用基本的Thrift routing对其进行了扩展，以便它可以提供特使配置，以便将侦听器路由到正确的集群。我的开发环境类似于：

现在我正在尝试添加速率限制。我在跟踪the docs。我已经用RouteAction修补了我的配置，但没有应用，因为没有速率限制过滤器。这可以很好地工作，并像以前一样传递流量：

...
       {
        "filters": [
         {
          "name": "envoy.filters.network.thrift_proxy",
          "typed_config": {
           "@type": "type.googleapis.com/envoy.config.filter.network.thrift_proxy.v2alpha1.ThriftProxy",
           "stat_prefix": "10.97.28.169_9090",
           "transport": "HEADER",
           "protocol": "BINARY",
           "route_config": {
            "name": "outbound|9090||backend.default.svc.cluster.local",
            "routes": [
             {
              "match": {
               "method_name": ""
              },
              "route": {
               "cluster": "outbound|9090||backend.default.svc.cluster.local",
               "rate_limits": [
                {
                 "actions": [
                  {
                   "request_headers": {
                    "header_name": ":method-name",
                    "descriptor_key": "method-name"
                   }
                  }
                 ]
                }
               ]
              }
             }
            ]
           }
          }
         }
        ]
       }
      ],
      "deprecated_v1": {
       "bind_to_port": false
      },
      "listener_filters_timeout": "0.100s",
      "traffic_direction": "OUTBOUND",
      "continue_on_listener_filters_timeout": true
     },
     "last_updated": "2019-10-30T16:26:39.203Z"
    },
...

我已经构建了一个函数来创建一个envoy.filters.thrift.rate_limit过滤器，使特使调用我设置的速率限制服务(我已经尝试了GoogleGrpc和EnvoyGrpc)：

func buildThriftRatelimit(ratelimitServiceUri, domain string) *thrift_ratelimit.RateLimit {
    var thriftRateLimit  *thrift_ratelimit.RateLimit
    timeout := 2000 * time.Millisecond

    thriftRateLimit = &thrift_ratelimit.RateLimit{
        Domain: domain,
        Timeout: &timeout,
        FailureModeDeny: false,
        RateLimitService: &ratelimit.RateLimitServiceConfig{
            GrpcService: &core.GrpcService{
                TargetSpecifier: &core.GrpcService_GoogleGrpc_{
                    GoogleGrpc: &core.GrpcService_GoogleGrpc{
                        StatPrefix: ratelimitServiceUri,
                        TargetUri:  ratelimitServiceUri,
                    },
                },
            },
        },
    }

    thriftRateLimit.Validate()
    if err := thriftRateLimit.Validate(); err != nil {
        panic(err)
    }

    return thriftRateLimit
}

这会产生：

...
       {
        "filters": [
         {
          "name": "envoy.filters.network.thrift_proxy",
          "typed_config": {
           "@type": "type.googleapis.com/envoy.config.filter.network.thrift_proxy.v2alpha1.ThriftProxy",
           "stat_prefix": "10.97.28.169_9090",
           "transport": "HEADER",
           "protocol": "BINARY",
           "route_config": {
            "name": "outbound|9090||backend.default.svc.cluster.local",
            "routes": [
             {
              "match": {
               "method_name": ""
              },
              "route": {
               "cluster": "outbound|9090||backend.default.svc.cluster.local",
               "rate_limits": [
                {
                 "actions": [
                  {
                   "request_headers": {
                    "header_name": ":method-name",
                    "descriptor_key": "method-name"
                   }
                  }
                 ]
                }
               ]
              }
             }
            ]
           },
           "thrift_filters": [
            {
             "name": "envoy.filters.thrift.rate_limit",
             "typed_config": {
              "@type": "type.googleapis.com/envoy.config.filter.thrift.rate_limit.v2alpha1.RateLimit",
              "domain": "backend.default.svc.cluster.local",
              "timeout": "2s",
              "rate_limit_service": {
               "grpc_service": {
                "google_grpc": {
                 "target_uri": "istio-lyft-ratelimit.istio-system.svc.cluster.local:80",
                 "stat_prefix": "istio-lyft-ratelimit.istio-system.svc.cluster.local:80"
                }
               }
              }
             }
            }
           ]
          }
         }
        ]
       }
      ],
      "deprecated_v1": {
       "bind_to_port": false
      },
      "listener_filters_timeout": "0.100s",
      "traffic_direction": "OUTBOUND",
      "continue_on_listener_filters_timeout": true
     },
     "last_updated": "2019-10-30T16:26:39.203Z"
    },
...

当应用速率限制过滤器时，与后端的连接无效，不会向客户端返回错误，也不会显示在特使的日志中。

istio

envoyproxy

CDN&音视频通信出海专场

提供游戏出海、社交娱乐等方案，助力企业抢占出海市场

回答 1

Stack Overflow用户

发布于 2019-10-30 20:03:41

如果提供了Thrift筛选器，则需要将路由器筛选器添加为链中的最后一个筛选器，如下所示：

...
       {
        "filters": [
         {
          "name": "envoy.filters.network.thrift_proxy",
          "typed_config": {
           "@type": "type.googleapis.com/envoy.config.filter.network.thrift_proxy.v2alpha1.ThriftProxy",
           "stat_prefix": "10.97.28.169_9090",
           "transport": "HEADER",
           "protocol": "BINARY",
           "route_config": {
            "name": "outbound|9090||backend.default.svc.cluster.local",
            "routes": [
             {
              "match": {
               "method_name": ""
              },
              "route": {
               "cluster": "outbound|9090||backend.default.svc.cluster.local",
               "rate_limits": [
                {
                 "actions": [
                  {
                   "request_headers": {
                    "header_name": ":method-name",
                    "descriptor_key": "method-name"
                   }
                  }
                 ]
                }
               ]
              }
             }
            ]
           },
           "thrift_filters": [
            {
             "name": "envoy.filters.thrift.rate_limit",
             "typed_config": {
              "@type": "type.googleapis.com/envoy.config.filter.thrift.rate_limit.v2alpha1.RateLimit",
              "domain": "backend.default.svc.cluster.local",
              "timeout": "2s",
              "rate_limit_service": {
               "grpc_service": {
                "google_grpc": {
                 "target_uri": "istio-lyft-ratelimit.istio-system.svc.cluster.local:80",
                 "stat_prefix": "istio-lyft-ratelimit.istio-system.svc.cluster.local:80"
                }
               }
              }
             }
            },
            {
             "name": "envoy.filters.thrift.router"
            }
           ]
          }
         }
        ]
       }
      ],
      "deprecated_v1": {
       "bind_to_port": false
      },
      "listener_filters_timeout": "0.100s",
      "traffic_direction": "OUTBOUND",
      "continue_on_listener_filters_timeout": true
     },
     "last_updated": "2019-10-30T16:26:39.203Z"
    },
...