Files
gateway/internal/lura/proxy/shadow.go
zeekayandHanzo Dev 53350699b6 deps(vendor): fold the krakend/lura module set into internal/
Every import in this module now resolves to github.com/hanzoai/gateway/v2.
The 34 github.com/krakend/* + github.com/luraproject/lura modules that
supplied the engine and its components are vendored under internal/ and
their 91 packages rewritten onto our own path.

Why fold rather than mirror into 34 hanzoai/* repos:

  - It removes the exposure outright. 34 rows leave 34 rows of go.sum to
    reason about; zero modules leave nothing. `go list -m all` and go.sum
    now contain no krakend/lura entry at all.
  - Cross-references cannot go wrong. 28 of the 34 import lura (97 files
    inside lura self-reference it). Mirroring means rewriting every one of
    those to our lura, and a single miss silently links a SECOND copy of
    lura into the binary. With one module that is structurally impossible.
  - It creates no duplicates. These are lura-coupled gateway glue with no
    consumer outside this binary; publishing 34 repos would be 34 new
    things to maintain for zero second caller. internal/ makes that
    guarantee mechanical — Go forbids importing it from outside this
    module, so none of it can become a competing public package. Verified
    no repo outside gateway imports any hanzoai/gateway/v2 subpackage.

Layout mirrors provenance so an upstream re-sync stays a diff:

  luraproject/lura/v2  -> internal/lura         (the engine, 20 pkgs)
  krakend/krakend-<x>  -> internal/plugin/<x>   (28 components)
  krakend/<x>          -> internal/pkg/<x>      (6 standalone libs)

This commit is PURELY MECHANICAL: 196 of the 197 vendored files are
byte-identical to their upstream original once the import rewrite is
applied. The single exception is bloomfilter's subpackage, which upstream
names `krakend` — the one package name that could not survive as-is; it
becomes internal/pkg/bloomfilter/register. Hand edits land separately in
the next commit so they are readable on their own.

Per `go mod vendor` semantics, dependencies' _test.go files are not
vendored. They test upstream code at a pinned version that we do not
modify, several cannot run at all from a module distribution (they need
TLS certs and compiled .so plugins upstream generates but never ships),
and one is a 100k-request stress test that exhausts the ephemeral port
range and fails every package running beside it. Fold integrity is proven
by the byte-diff above instead, which is the stronger check.

Preserved deliberately — each of these is behaviour, not branding:
  - the `github.com/devopsfaith/krakend*` extra_config namespace strings
    (35 of them). These are config-surface keys, not import paths;
    renaming one silently stops that component finding its config. The
    jose validator namespace backs `auth/validator` on 212 endpoints.
  - core.KrakendVersion / KrakendUserAgent / the X-KRAKEND consts, whose
    VALUES rebrand.go overwrites — that seam is unchanged.
  - the KRAKEND_ koanf env prefix (a hardcoded upstream const).
  - every vendored module's LICENSE (34 files, Apache-2.0/MIT).

The Makefile/CI -X paths move with the engine. An -X naming a symbol that
does not exist is silently ignored by the linker, so a stale path here
would have shipped an "undefined" version in the backend User-Agent and
X-Api-Version with a perfectly green build. Verified live:
`gateway version` reports 2.13.0, not undefined.

Verification (GOWORK=off CGO_ENABLED=0, both tag modes):
  go build ./...              OK      go build -tags legacy ./...   OK
  go vet ./...                clean   go vet -tags legacy ./...     clean
  go test ./...               6/6 ok  go test -tags legacy          5/5 ok
  tests/ integration harness  47 fixtures pass
  gateway check -c configs/{hanzo,lux}/gateway.json  -> Syntax OK!
  go list -m all | grep -iE 'krakend|lura'  -> empty
  go mod verify -> all modules verified

Co-authored-by: Hanzo Dev <[email protected]>
2026-07-25 14:57:19 -07:00

175 lines
4.5 KiB
Go

// SPDX-License-Identifier: Apache-2.0
package proxy
import (
"context"
"time"
"github.com/hanzoai/gateway/v2/internal/lura/config"
"github.com/hanzoai/gateway/v2/internal/lura/logging"
)
const (
shadowKey = "shadow"
shadowTimeoutKey = "shadow_timeout"
)
type shadowFactory struct {
f Factory
}
// New check the Backends for an ExtraConfig with the "shadow" param to true
// implements the Factory interface. Sets the "shadow_timeout" defined in the
// config; uses the backend timeout as fallback.
func (s shadowFactory) New(cfg *config.EndpointConfig) (p Proxy, err error) {
if len(cfg.Backend) == 0 {
err = ErrNoBackends
return
}
cfgCopy := *cfg
var shadow []*config.Backend
var regular []*config.Backend
var maxTimeout time.Duration
for _, b := range cfgCopy.Backend {
if d, ok := isShadowBackend(b); ok {
if maxTimeout < d {
maxTimeout = d
}
shadow = append(shadow, b)
continue
}
regular = append(regular, b)
}
cfgCopy.Backend = regular
p, err = s.f.New(&cfgCopy)
if len(shadow) > 0 {
cfgCopy.Backend = shadow
pShadow, _ := s.f.New(&cfgCopy)
p = ShadowMiddlewareWithTimeout(maxTimeout, p, pShadow)
}
return
}
// NewShadowFactory creates a new shadowFactory using the provided Factory
func NewShadowFactory(f Factory) Factory {
return shadowFactory{f}
}
// ShadowMiddlewareWithLogger is a Middleware that creates a shadowProxy
func ShadowMiddlewareWithLogger(logger logging.Logger, next ...Proxy) Proxy {
switch len(next) {
case 0:
logger.Fatal("not enough proxies for this endpoint: ShadowMiddlewareWithLogger only accepts 1 or 2 proxies, got 0")
return nil
case 1:
return next[0]
case 2:
return NewShadowProxy(next[0], next[1])
default:
logger.Fatal("too many proxies for this proxy middleware: ShadowMiddlewareWithLogger only accepts 1 or 2 proxies, got %d", len(next))
return nil
}
}
// ShadowMiddleware is a Middleware that creates a shadowProxy
func ShadowMiddleware(next ...Proxy) Proxy {
return ShadowMiddlewareWithLogger(logging.NoOp, next...)
}
// ShadowMiddlewareWithTimeoutAndLogger is a Middleware that creates a shadowProxy with a timeout in the context
func ShadowMiddlewareWithTimeoutAndLogger(logger logging.Logger, timeout time.Duration, next ...Proxy) Proxy {
switch len(next) {
case 0:
logger.Fatal("not enough proxies for this endpoint: ShadowMiddlewareWithTimeoutAndLogger only accepts 1 or 2 proxies, got 0")
return nil
case 1:
return next[0]
case 2:
return NewShadowProxyWithTimeout(timeout, next[0], next[1])
default:
logger.Fatal("too many proxies for this proxy middleware: ShadowMiddlewareWithTimeoutAndLogger only accepts 1 or 2 proxies, got %d", len(next))
return nil
}
}
// ShadowMiddlewareWithTimeout is a Middleware that creates a shadowProxy with a timeout in the context
func ShadowMiddlewareWithTimeout(timeout time.Duration, next ...Proxy) Proxy {
return ShadowMiddlewareWithTimeoutAndLogger(logging.NoOp, timeout, next...)
}
// NewShadowProxy returns a Proxy that sends requests to p1 and p2 but ignores
// the response of p2.
func NewShadowProxy(p1, p2 Proxy) Proxy {
return NewShadowProxyWithTimeout(config.DefaultTimeout, p1, p2)
}
// NewShadowProxyWithTimeout returns a Proxy that sends requests to p1 and p2 but ignores
// the response of p2. Sets a timeout in the context.
func NewShadowProxyWithTimeout(timeout time.Duration, p1, p2 Proxy) Proxy {
return func(ctx context.Context, request *Request) (*Response, error) {
shadowCtx, cancel := newContextWrapperWithTimeout(ctx, timeout)
shadowRequest := CloneRequest(request)
go func() {
p2(shadowCtx, shadowRequest)
cancel()
}()
return p1(ctx, request)
}
}
func isShadowBackend(c *config.Backend) (time.Duration, bool) {
duration := c.Timeout
v, ok := c.ExtraConfig[Namespace]
if !ok {
return duration, false
}
e, ok := v.(map[string]interface{})
if !ok {
return duration, false
}
k, ok := e[shadowKey]
if !ok {
return duration, false
}
if s, ok := k.(bool); !ok || !s {
return duration, false
}
t, ok := e[shadowTimeoutKey].(string)
if !ok {
return duration, true
}
if d, err := time.ParseDuration(t); err == nil {
duration = d
}
return duration, true
}
type contextWrapper struct {
context.Context
data context.Context
}
func (c contextWrapper) Value(key interface{}) interface{} {
return c.data.Value(key)
}
func newContextWrapperWithTimeout(data context.Context, timeout time.Duration) (contextWrapper, context.CancelFunc) {
ctx, cancel := context.WithTimeout(context.Background(), timeout)
return contextWrapper{
Context: ctx,
data: data,
}, cancel
}