mirror of
https://github.com/hanzoai/gateway.git
synced 2026-10-30 15:04:44 +00:00
Every import in this module now resolves to github.com/hanzoai/gateway/v2.
The 34 github.com/krakend/* + github.com/luraproject/lura modules that
supplied the engine and its components are vendored under internal/ and
their 91 packages rewritten onto our own path.
Why fold rather than mirror into 34 hanzoai/* repos:
- It removes the exposure outright. 34 rows leave 34 rows of go.sum to
reason about; zero modules leave nothing. `go list -m all` and go.sum
now contain no krakend/lura entry at all.
- Cross-references cannot go wrong. 28 of the 34 import lura (97 files
inside lura self-reference it). Mirroring means rewriting every one of
those to our lura, and a single miss silently links a SECOND copy of
lura into the binary. With one module that is structurally impossible.
- It creates no duplicates. These are lura-coupled gateway glue with no
consumer outside this binary; publishing 34 repos would be 34 new
things to maintain for zero second caller. internal/ makes that
guarantee mechanical — Go forbids importing it from outside this
module, so none of it can become a competing public package. Verified
no repo outside gateway imports any hanzoai/gateway/v2 subpackage.
Layout mirrors provenance so an upstream re-sync stays a diff:
luraproject/lura/v2 -> internal/lura (the engine, 20 pkgs)
krakend/krakend-<x> -> internal/plugin/<x> (28 components)
krakend/<x> -> internal/pkg/<x> (6 standalone libs)
This commit is PURELY MECHANICAL: 196 of the 197 vendored files are
byte-identical to their upstream original once the import rewrite is
applied. The single exception is bloomfilter's subpackage, which upstream
names `krakend` — the one package name that could not survive as-is; it
becomes internal/pkg/bloomfilter/register. Hand edits land separately in
the next commit so they are readable on their own.
Per `go mod vendor` semantics, dependencies' _test.go files are not
vendored. They test upstream code at a pinned version that we do not
modify, several cannot run at all from a module distribution (they need
TLS certs and compiled .so plugins upstream generates but never ships),
and one is a 100k-request stress test that exhausts the ephemeral port
range and fails every package running beside it. Fold integrity is proven
by the byte-diff above instead, which is the stronger check.
Preserved deliberately — each of these is behaviour, not branding:
- the `github.com/devopsfaith/krakend*` extra_config namespace strings
(35 of them). These are config-surface keys, not import paths;
renaming one silently stops that component finding its config. The
jose validator namespace backs `auth/validator` on 212 endpoints.
- core.KrakendVersion / KrakendUserAgent / the X-KRAKEND consts, whose
VALUES rebrand.go overwrites — that seam is unchanged.
- the KRAKEND_ koanf env prefix (a hardcoded upstream const).
- every vendored module's LICENSE (34 files, Apache-2.0/MIT).
The Makefile/CI -X paths move with the engine. An -X naming a symbol that
does not exist is silently ignored by the linker, so a stale path here
would have shipped an "undefined" version in the backend User-Agent and
X-Api-Version with a perfectly green build. Verified live:
`gateway version` reports 2.13.0, not undefined.
Verification (GOWORK=off CGO_ENABLED=0, both tag modes):
go build ./... OK go build -tags legacy ./... OK
go vet ./... clean go vet -tags legacy ./... clean
go test ./... 6/6 ok go test -tags legacy 5/5 ok
tests/ integration harness 47 fixtures pass
gateway check -c configs/{hanzo,lux}/gateway.json -> Syntax OK!
go list -m all | grep -iE 'krakend|lura' -> empty
go mod verify -> all modules verified
Co-authored-by: Hanzo Dev <[email protected]>
141 lines
3.3 KiB
Go
141 lines
3.3 KiB
Go
// krakendrate contains a collection of curated rate limit adaptors for the KrakenD framework
|
|
package krakendrate
|
|
|
|
import (
|
|
"context"
|
|
"sync"
|
|
"time"
|
|
)
|
|
|
|
func MemoryBackendBuilder(ctx context.Context, ttl, cleanupRate time.Duration,
|
|
cleanUpThreads, amount uint64,
|
|
) []Backend {
|
|
if amount == 0 {
|
|
return []Backend{}
|
|
}
|
|
backends := make([]MemoryBackend, amount)
|
|
for idx := range backends {
|
|
backends[idx].data = map[string]interface{}{}
|
|
backends[idx].lastAccess = map[string]time.Time{}
|
|
backends[idx].mu = new(sync.RWMutex)
|
|
}
|
|
|
|
rv := make([]Backend, amount)
|
|
for idx := range backends {
|
|
rv[idx] = &(backends[idx])
|
|
}
|
|
|
|
if cleanUpThreads <= 1 {
|
|
go manageEvictions(ctx, ttl, cleanupRate, backends)
|
|
return rv
|
|
}
|
|
|
|
if cleanUpThreads > amount {
|
|
// Nop, we wont create more clean up threads than the number of shards
|
|
cleanUpThreads = amount
|
|
}
|
|
|
|
from := 0
|
|
for i := uint64(1); i <= cleanUpThreads; i++ {
|
|
to := int((i * amount) / cleanUpThreads)
|
|
go manageEvictions(ctx, ttl, cleanupRate, backends[from:to])
|
|
from = to
|
|
}
|
|
|
|
return rv
|
|
}
|
|
|
|
func NewMemoryBackend(ctx context.Context, ttl time.Duration) *MemoryBackend {
|
|
backends := []MemoryBackend{
|
|
{
|
|
data: map[string]interface{}{},
|
|
lastAccess: map[string]time.Time{},
|
|
mu: new(sync.RWMutex),
|
|
},
|
|
}
|
|
// to maintain backards compat, we use ttl as the cleanup rate:
|
|
go manageEvictions(ctx, ttl, ttl, backends)
|
|
|
|
return &(backends[0])
|
|
}
|
|
|
|
// MemoryBackend implements the backend interface by wrapping a sync.Map
|
|
type MemoryBackend struct {
|
|
data map[string]interface{}
|
|
lastAccess map[string]time.Time
|
|
mu *sync.RWMutex
|
|
}
|
|
|
|
func manageEvictions(ctx context.Context, ttl, cleanupRate time.Duration, backends []MemoryBackend) {
|
|
t := time.NewTicker(cleanupRate)
|
|
for {
|
|
select {
|
|
case <-ctx.Done():
|
|
t.Stop()
|
|
return
|
|
case now := <-t.C:
|
|
for idx := range backends {
|
|
// We need to do a write lock, because between collecting the keys
|
|
// to delete, and the actual deletion, another thread could have
|
|
// hit one of the keys to delete.
|
|
backends[idx].mu.Lock()
|
|
for k, v := range backends[idx].lastAccess {
|
|
if v.Add(ttl).Before(now) {
|
|
delete(backends[idx].data, k)
|
|
delete(backends[idx].lastAccess, k)
|
|
}
|
|
}
|
|
backends[idx].mu.Unlock()
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Load implements the Backend interface.
|
|
// The f function should always return a non nil value, or that nil value
|
|
// will be assigned and returned on load.
|
|
func (m *MemoryBackend) Load(key string, f func() interface{}) interface{} {
|
|
var lastAccess time.Time
|
|
lastAccessOk := true
|
|
|
|
m.mu.RLock()
|
|
v, ok := m.data[key]
|
|
if ok {
|
|
lastAccess, lastAccessOk = m.lastAccess[key]
|
|
}
|
|
m.mu.RUnlock()
|
|
|
|
n := now()
|
|
if ok {
|
|
if !lastAccessOk || n.After(lastAccess) {
|
|
m.mu.Lock()
|
|
m.lastAccess[key] = n
|
|
m.mu.Unlock()
|
|
}
|
|
return v
|
|
}
|
|
|
|
// we create the new associated data outside the loop (we will
|
|
// discard it if it is already set in parallel by another thread)
|
|
newData := f()
|
|
m.mu.Lock()
|
|
v, ok = m.data[key]
|
|
if ok { // some other thread has just created the value
|
|
m.mu.Unlock()
|
|
return v
|
|
}
|
|
m.lastAccess[key] = n
|
|
m.data[key] = newData
|
|
m.mu.Unlock()
|
|
return newData
|
|
}
|
|
|
|
// Store implements the Backend interface
|
|
func (m *MemoryBackend) Store(key string, v interface{}) error {
|
|
m.mu.Lock()
|
|
m.lastAccess[key] = now()
|
|
m.data[key] = v
|
|
m.mu.Unlock()
|
|
return nil
|
|
}
|