envoy 代理初始化需要 3 多分钟

如何解决envoy 代理初始化需要 3 多分钟

我正在使用 Envoy 代理路由与在 linux docker 容器上运行的多个集群的调用。我在这里观察到的初始化过程需要 3 分钟以上,这通常发生在集群的端点套接字地址错误时(这是套接字地址被标记化并且在特使代理服务器初始化期间未解析的情况)。 有什么建议可以解决这个延迟问题吗?

[2021-05-07 13:16:39.125][7][info][config] [source/server/configuration_impl.cc:103] loading tracing configuration
[2021-05-07 13:16:39.125][7][info][config] [source/server/configuration_impl.cc:69] loading 0 static secret(s)
[2021-05-07 13:16:39.125][7][info][config] [source/server/configuration_impl.cc:75] loading 13 cluster(s)
[2021-05-07 13:16:39.137][7][info][config] [source/server/configuration_impl.cc:79] loading 6 listener(s)
[2021-05-07 13:16:39.150][7][info][config] [source/server/configuration_impl.cc:129] loading stats sink configuration
[2021-05-07 13:16:39.151][7][info][main] [source/server/server.cc:652] starting main dispatch loop
[2021-05-07 13:19:09.152][7][info][runtime] [source/common/runtime/runtime_impl.cc:524] RTDS has finished initialization
[2021-05-07 13:19:09.152][7][info][upstream] [source/common/upstream/cluster_manager_impl.cc:182] cm init: all clusters initialized
[2021-05-07 13:19:09.152][7][info][main] [source/server/server.cc:631] all clusters initialized. initializing init manager
[2021-05-07 13:19:09.152][7][info][config] [source/server/listener_manager_impl.cc:844] all dependencies initialized. starting workers
[2021-05-07 13:19:09.153][7][warning][main] [source/server/server.cc:537] there is no configured limit to the number of allowed active connections. Set a limit via the runtime key overload.global_downstream_max_connections

此外,我正在阅读有关此 initial_fetch_timeout (https://www.envoyproxy.io/docs/envoy/v1.12.0/api-v2/api/v2/core/config_source.proto#envoy-api-field-core-configsource-initial-fetch-timeout) 的信息,但对其实现的线索并不多。

以下是我正在使用的 yaml:

         admin:
      access_log_path: /var/log/envoy_admin_access.log
      address:
        socket_address:
          protocol: TCP
          address: 0.0.0.0
          port_value: 9901
    static_resources:
      listeners:
      - name: listener_http
        address:
          socket_address:
            protocol: TCP
            address: 0.0.0.0
            port_value: 8080
        filter_chains:
          filters:
          - name: envoy.filters.network.http_connection_manager
            typed_config:
              "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
              stat_prefix: ingress_http
              access_log:
              - name: envoy.access_loggers.file
                typed_config:
                  "@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
                  path: /dev/stdout
              - name: envoy.access_loggers.file
                typed_config:
                  "@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
                  path: /var/log/envoy_httpaccessLog.log
              route_config:
                name: local_route
                virtual_hosts:
                - name: local_service
                  domains: 
                  - "*"
                  routes:
                  - match:
                      prefix: "/"
                    redirect: { https_redirect: true }
              http_filters:
              - name: envoy.filters.http.router
      - name: listener_https
        address:
          socket_address:
            protocol: TCP
            address: 0.0.0.0
            port_value: 8443
        filter_chains:
          transport_socket:
            name: envoy.transport_sockets.tls
            typed_config:
              "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
              common_tls_context:
                tls_certificates:
                - certificate_chain:
                    filename: "/etc/envoy/certificates/envoy.crt"
                  private_key:
                    filename: "/etc/envoy/certificates/envoy.key"
          filters:
          - name: envoy.filters.network.http_connection_manager
            typed_config:
              "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
              stat_prefix: ingress_https
              access_log:
              - name: envoy.access_loggers.file
                typed_config:
                  "@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
                  path: /var/log/envoy_httpsAccessLog.log
              - name: envoy.access_loggers.file
                typed_config:
                  "@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
                  path: /dev/stdout
              route_config:
                name: local_route
                virtual_hosts:
                - name: local_service
                  domains: 
                  - "*"
                  routes:
                  - match:
                      prefix: "/.well-known"
                    route:
                      cluster: AuthServer
                  - match:
                      prefix: "/authserver"
                    route:
                      cluster: AuthServer
                  - match:
                      prefix: "/dl"
                    route:
                      cluster: dlServer
                  - match:
                      prefix: "/api/smart"
                    route:
                      cluster: SmartService
                  - match:
                      prefix: "/MetaData"
                    route:
                      cluster: MetaDataServer
                  - match:
                      prefix: "/MetaInfo"
                    route:
                      cluster: MetaDataServer
              http_filters:
              - name: envoy.filters.http.router 
      - name: listner_grpc
        address:
          socket_address:
            protocol: TCP
            address: 0.0.0.0
            port_value: 8090
        filter_chains:
          transport_socket:
            name: envoy.transport_sockets.tls
            typed_config:
              "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
              common_tls_context:
                alpn_protocols: "h2"
                tls_certificates:
                - certificate_chain:
                    filename: "/etc/envoy/certificates/envoy.crt"
                  private_key:
                    filename: "/etc/envoy/certificates/envoy.key"
          filters:
          - name: envoy.filters.network.http_connection_manager
            typed_config:
              "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
              stat_prefix: ingress_http
              codec_type: auto
              access_log:
              - name: envoy.access_loggers.file
                typed_config:
                  "@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
                  path: /dev/stdout
              - name: envoy.access_loggers.file
                typed_config:
                  "@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
                  path: /var/log/envoy_tcpaccessLog.log
              route_config:
                name: local_grpc
                virtual_hosts:
                - name: local_service
                  domains: 
                  - "*"
                  routes:
                  - match:
                      prefix: "/"
                      grpc: {}
                    route:
                      cluster: gRPCServer
              http_filters:
              - name: envoy.filters.http.router
                typed_config: {}
      - name: listner_progress_grpc
        address:
          socket_address:
            protocol: TCP
            address: 0.0.0.0
            port_value: 8091
        filter_chains:
          transport_socket:
            name: envoy.transport_sockets.tls
            typed_config:
              "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
              common_tls_context:
                alpn_protocols: "h2"
                tls_certificates:
                - certificate_chain:
                    filename: "/etc/envoy/certificates/envoy.crt"
                  private_key:
                    filename: "/etc/envoy/certificates/envoy.key"
          filters:
          - name: envoy.filters.network.http_connection_manager
            typed_config:
              "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
              stat_prefix: ingress_http
              codec_type: auto
              access_log:
              - name: envoy.access_loggers.file
                typed_config:
                  "@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
                  path: /dev/stdout
              - name: envoy.access_loggers.file
                typed_config:
                  "@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
                  path: /var/log/envoy_tcpaccessLog.log
              route_config:
                name: local_grpc
                virtual_hosts:
                - name: local_service
                  domains: 
                  - "*"
                  routes:
                  - match:
                      prefix: "/"
                      grpc: {}
                    route:
                      cluster: gRPCProgressServer
                      timeout: 0s
              http_filters:
              - name: envoy.filters.http.router
                typed_config: {} 
      - name: listener_tcp
        address:
          socket_address:
            protocol: TCP
            address: 0.0.0.0
            port_value: 32914
        filter_chains:
          filters:
          - name: envoy.filters.network.tcp_proxy
            typed_config:
              "@type": type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy        
              stat_prefix: ingress_tcp
              cluster: gateway_cluster
              access_log:
              - name: envoy.access_loggers.file
                typed_config:
                  "@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
                  path: /dev/stdout
              - name: envoy.access_loggers.file
                typed_config:
                  "@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
                  path: /var/log/envoy_tcpaccessLog.log 
      - name: listener_teamviewer_tcp
        address:
          socket_address:
            protocol: TCP
            address: 0.0.0.0
            port_value: 11080
        filter_chains:
          filters:
          - name: envoy.filters.network.tcp_proxy
            typed_config:
              "@type": type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
              stat_prefix: ingress_tcp
              cluster: gateway_teamviewer
              access_log:
              - name: envoy.access_loggers.file
                typed_config:
                  "@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
                  path: /dev/stdout
              - name: envoy.access_loggers.file
                typed_config:
                  "@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
                  path: /var/log/envoy_tcpaccessLog.log            
      clusters:
      - name: AuthServer
        connect_timeout: 0.25s
        type: LOGICAL_DNS
        # Comment out the following line to test on v6 networks
        dns_lookup_family: V4_ONLY
        lb_policy: ROUND_ROBIN
        load_assignment:
          cluster_name: AuthServer
          endpoints:
          - lb_endpoints:
            - endpoint:
                address:
                  socket_address:
                    address: ${WindowsHostName}
                    port_value: 10002
        transport_socket:
          name: envoy.transport_sockets.tls
          typed_config:
            "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
      - name: SmartServer
        connect_timeout: 0.25s
        type: LOGICAL_DNS
        dns_lookup_family: V4_ONLY
        lb_policy: ROUND_ROBIN
        load_assignment:
          cluster_name: SmartServer
          endpoints:
          - lb_endpoints:
            - endpoint:
                address:
                  socket_address:
                    address: smartguide
                    port_value: 8080
      - name: dlServer
        connect_timeout: 0.25s
        type: LOGICAL_DNS
        # Comment out the following line to test on v6 networks
        dns_lookup_family: V4_ONLY
        lb_policy: ROUND_ROBIN
        load_assignment:
          cluster_name: dlServer
          endpoints:
          - lb_endpoints:
            - endpoint:
                address:
                  socket_address:
                    address: ${WindowsHostName}
                    port_value: 10100
      - name: SmartService
        connect_timeout: 0.25s
        type: LOGICAL_DNS
        # Comment out the following line to test on v6 networks
        dns_lookup_family: V4_ONLY
        lb_policy: ROUND_ROBIN
        load_assignment:
          cluster_name: SmartService
          endpoints:
          - lb_endpoints:
            - endpoint:
                address:
                  socket_address:
                    address: ${WindowsHostName}
                    port_value: 10101
      - name: MetaDataServer
        connect_timeout: 0.25s
        type: LOGICAL_DNS
        # Comment out the following line to test on v6 networks
        dns_lookup_family: V4_ONLY
        lb_policy: ROUND_ROBIN
        load_assignment:
          cluster_name: MetaDataServer
          endpoints:
          - lb_endpoints:
            - endpoint:
                address:
                  socket_address:
                    address: ${WindowsHostName}
                    port_value: 10200
      - name: gRPCServer
        connect_timeout: 0.25s
        type: strict_dns
        # Comment out the following line to test on v6 networks
        dns_lookup_family: V4_ONLY
        lb_policy: ROUND_ROBIN
        http2_protocol_options: {}
        load_assignment:
          cluster_name: gRPCServer
          endpoints:
          - lb_endpoints:
            - endpoint:
                address:
                  socket_address:
                    address: ${WindowsHostName}
                    port_value: 32915
      - name: gRPCProgressServer
        connect_timeout: 0.25s
        type: strict_dns
        # Comment out the following line to test on v6 networks
        dns_lookup_family: V4_ONLY
        lb_policy: ROUND_ROBIN
        http2_protocol_options: {}
        load_assignment:
          cluster_name: gRPCProgressServer
          endpoints:
          - lb_endpoints:
            - endpoint:
                address:
                  socket_address:
                    address: ${ReaderHostName}
                    port_value: 44151
      - name: gateway_cluster
        connect_timeout: 0.25s
        type: LOGICAL_DNS
        lb_policy: ROUND_ROBIN
        load_assignment:
          cluster_name: gateway_cluster
          endpoints:
          - lb_endpoints:
            - endpoint:
                address:
                  socket_address:
                    address: ${GatewayHostName}
                    port_value: 32914
      - name: gateway_teamviewer
        connect_timeout: 0.25s
        type: LOGICAL_DNS
        lb_policy: ROUND_ROBIN
        load_assignment:
          cluster_name: gateway_teamviewer
          endpoints:
          - lb_endpoints:
            - endpoint:
                address:
                  socket_address:
                    address: ${GatewayHostName}
                    port_value: 11080    

版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。

相关推荐


依赖报错 idea导入项目后依赖报错,解决方案:https://blog.csdn.net/weixin_42420249/article/details/81191861 依赖版本报错:更换其他版本 无法下载依赖可参考:https://blog.csdn.net/weixin_42628809/a
错误1:代码生成器依赖和mybatis依赖冲突 启动项目时报错如下 2021-12-03 13:33:33.927 ERROR 7228 [ main] o.s.b.d.LoggingFailureAnalysisReporter : *************************** APPL
错误1:gradle项目控制台输出为乱码 # 解决方案:https://blog.csdn.net/weixin_43501566/article/details/112482302 # 在gradle-wrapper.properties 添加以下内容 org.gradle.jvmargs=-Df
错误还原:在查询的过程中,传入的workType为0时,该条件不起作用 <select id="xxx"> SELECT di.id, di.name, di.work_type, di.updated... <where> <if test=&qu
报错如下,gcc版本太低 ^ server.c:5346:31: 错误:‘struct redisServer’没有名为‘server_cpulist’的成员 redisSetCpuAffinity(server.server_cpulist); ^ server.c: 在函数‘hasActiveC
解决方案1 1、改项目中.idea/workspace.xml配置文件,增加dynamic.classpath参数 2、搜索PropertiesComponent,添加如下 <property name="dynamic.classpath" value="tru
删除根组件app.vue中的默认代码后报错:Module Error (from ./node_modules/eslint-loader/index.js): 解决方案:关闭ESlint代码检测,在项目根目录创建vue.config.js,在文件中添加 module.exports = { lin
查看spark默认的python版本 [root@master day27]# pyspark /home/software/spark-2.3.4-bin-hadoop2.7/conf/spark-env.sh: line 2: /usr/local/hadoop/bin/hadoop: No s
使用本地python环境可以成功执行 import pandas as pd import matplotlib.pyplot as plt # 设置字体 plt.rcParams['font.sans-serif'] = ['SimHei'] # 能正确显示负号 p
错误1:Request method ‘DELETE‘ not supported 错误还原:controller层有一个接口,访问该接口时报错:Request method ‘DELETE‘ not supported 错误原因:没有接收到前端传入的参数,修改为如下 参考 错误2:cannot r
错误1:启动docker镜像时报错:Error response from daemon: driver failed programming external connectivity on endpoint quirky_allen 解决方法:重启docker -> systemctl r
错误1:private field ‘xxx‘ is never assigned 按Altʾnter快捷键,选择第2项 参考:https://blog.csdn.net/shi_hong_fei_hei/article/details/88814070 错误2:启动时报错,不能找到主启动类 #
报错如下,通过源不能下载,最后警告pip需升级版本 Requirement already satisfied: pip in c:\users\ychen\appdata\local\programs\python\python310\lib\site-packages (22.0.4) Coll
错误1:maven打包报错 错误还原:使用maven打包项目时报错如下 [ERROR] Failed to execute goal org.apache.maven.plugins:maven-resources-plugin:3.2.0:resources (default-resources)
错误1:服务调用时报错 服务消费者模块assess通过openFeign调用服务提供者模块hires 如下为服务提供者模块hires的控制层接口 @RestController @RequestMapping("/hires") public class FeignControl
错误1:运行项目后报如下错误 解决方案 报错2:Failed to execute goal org.apache.maven.plugins:maven-compiler-plugin:3.8.1:compile (default-compile) on project sb 解决方案:在pom.
参考 错误原因 过滤器或拦截器在生效时,redisTemplate还没有注入 解决方案:在注入容器时就生效 @Component //项目运行时就注入Spring容器 public class RedisBean { @Resource private RedisTemplate<String
使用vite构建项目报错 C:\Users\ychen\work>npm init @vitejs/app @vitejs/create-app is deprecated, use npm init vite instead C:\Users\ychen\AppData\Local\npm-