Files
gateway/backend_factory.go
zeekay d28d976a08 feat(gateway): base_ha upstream type — leader-aware write routing
New upstream kind that polls /_ha/leader on base-ha pods and pins
POST/PUT/PATCH/DELETE to the current writer. GET round-robins via
K8s Service.

  upstream:
    type: base_ha
    service_dns: foo-hs.hanzo.svc.cluster.local
    port: 8090
    leader_poll_interval: 1s
    write_methods: [POST, PUT, PATCH, DELETE]

Implementation:
  - Per-upstream goroutine polls /_ha/leader every 1s
  - atomic.Pointer[writerState] holds current writer URL
  - On writer 5xx/connect-refused: force refresh, retry once
  - X-Base-TxSeq response pin for read-your-writes (5s window)

Files:
  base_ha_backend.go (new, 604L)
  base_ha_backend_test.go (new, 642L, 10 unit tests)
  base_ha_integration_test.go (new, 235L, 3-pod failover)
  backend_factory.go +3 (register factory)
  LLM.md +25

Failover transcript: writer kill → new writer elected in ~1.5s,
gateway next poll picks up within 1s; client sees no 307, no retry.
2026-04-22 15:01:34 -07:00

98 lines
4.3 KiB
Go

package gateway
import (
"context"
"fmt"
amqp "github.com/krakend/krakend-amqp/v2"
cel "github.com/krakend/krakend-cel/v2"
cb "github.com/krakend/krakend-circuitbreaker/v2/gobreaker/proxy"
httpcache "github.com/krakend/krakend-httpcache/v2"
lambda "github.com/krakend/krakend-lambda/v2"
lua "github.com/krakend/krakend-lua/v2/proxy"
martian "github.com/krakend/krakend-martian/v2"
metrics "github.com/krakend/krakend-metrics/v2/gin"
oauth2client "github.com/krakend/krakend-oauth2-clientcredentials/v2"
opencensus "github.com/krakend/krakend-opencensus/v2"
otellura "github.com/krakend/krakend-otel/lura"
pubsub "github.com/krakend/krakend-pubsub/v2"
ratelimit "github.com/krakend/krakend-ratelimit/v3/proxy"
"github.com/luraproject/lura/v2/config"
"github.com/luraproject/lura/v2/logging"
"github.com/luraproject/lura/v2/proxy"
"github.com/luraproject/lura/v2/transport/http/client"
httprequestexecutor "github.com/luraproject/lura/v2/transport/http/client/plugin"
)
// NewBackendFactory creates a BackendFactory by stacking all the available middlewares:
// - oauth2 client credentials
// - http cache
// - martian
// - pubsub
// - amqp
// - cel
// - lua
// - rate-limit
// - circuit breaker
// - metrics collector
// - opencensus collector
func NewBackendFactory(logger logging.Logger, metricCollector *metrics.Metrics) proxy.BackendFactory {
return NewBackendFactoryWithContext(context.Background(), logger, metricCollector)
}
func newRequestExecutorFactory(logger logging.Logger) func(*config.Backend) client.HTTPRequestExecutor {
requestExecutorFactory := func(cfg *config.Backend) client.HTTPRequestExecutor {
clientFactory := client.NewHTTPClient
if _, ok := cfg.ExtraConfig[oauth2client.Namespace]; ok {
clientFactory = oauth2client.NewHTTPClient(cfg)
}
clientFactory = httpcache.NewHTTPClient(cfg, clientFactory)
clientFactory = otellura.InstrumentedHTTPClientFactory(clientFactory, cfg)
// TODO: check what happens if we have both, opencensus and otel enabled ?
return opencensus.HTTPRequestExecutorFromConfig(clientFactory, cfg)
}
return httprequestexecutor.HTTPRequestExecutor(logger, requestExecutorFactory)
}
func internalNewBackendFactory(ctx context.Context, requestExecutorFactory func(*config.Backend) client.HTTPRequestExecutor,
logger logging.Logger, metricCollector *metrics.Metrics) proxy.BackendFactory {
backendFactory := martian.NewConfiguredBackendFactory(logger, requestExecutorFactory)
bf := pubsub.NewBackendFactory(ctx, logger, backendFactory)
backendFactory = bf.New
backendFactory = amqp.NewBackendFactory(ctx, logger, backendFactory)
backendFactory = lambda.BackendFactory(logger, backendFactory)
backendFactory = cel.BackendFactory(logger, backendFactory)
backendFactory = lua.BackendFactory(logger, backendFactory)
backendFactory = ratelimit.BackendFactory(logger, backendFactory)
backendFactory = cb.BackendFactory(backendFactory, logger)
backendFactory = metricCollector.BackendFactory("backend", backendFactory)
backendFactory = opencensus.BackendFactory(backendFactory)
backendFactory = otellura.BackendFactory(backendFactory)
// ZAP transport: zero-copy binary protocol for internal services
backendFactory = ZapBackendFactory(logger, backendFactory)
// base-network: shard-aware routing over base/network-enabled services
// (ATS, BD, TA, IAM, KMS, AML). See base_network_backend.go.
backendFactory = BaseNetworkBackendFactory(logger, backendFactory)
// base_ha: leader-pin + round-robin routing over hanzoai/base-ha
// clusters (BaseApp CRD). See base_ha_backend.go.
backendFactory = BaseHABackendFactory(logger, backendFactory)
return func(remote *config.Backend) proxy.Proxy {
logger.Debug(fmt.Sprintf("[BACKEND: %s] Building the backend pipe", remote.URLPattern))
return backendFactory(remote)
}
}
// NewBackendFactoryWithContext creates a BackendFactory by stacking all the available middlewares and injecting the received context
func NewBackendFactoryWithContext(ctx context.Context, logger logging.Logger, metricCollector *metrics.Metrics) proxy.BackendFactory {
requestExecutorFactory := newRequestExecutorFactory(logger)
return internalNewBackendFactory(ctx, requestExecutorFactory, logger, metricCollector)
}
type backendFactory struct{}
func (backendFactory) NewBackendFactory(ctx context.Context, l logging.Logger, m *metrics.Metrics) proxy.BackendFactory {
return NewBackendFactoryWithContext(ctx, l, m)
}