mirror of
https://github.com/rustfs/rustfs.git
synced 2026-08-12 16:16:55 +00:00
escapecode
a80699b6dd
feat(targets): add an opt-in NATS JetStream publish path for the notify and audit targets The NATS notify and audit targets publish through NATS Core, which returns before the server has durably accepted the message. A broker restart or a connection drop between the publish and the flush loses the event, even though the send queue has already cleared it, and no acknowledgement gates that clear. An opt-in JetStream publish path clears a queued event only after the server returns a durable PublishAck, so delivery is at-least-once across a broker restart or a reconnect. It applies to both the notify and audit NATS targets, is off by default, and is byte-identical to the NATS Core path when disabled. The path includes durable store-and-forward, a stable dedup id sent as the Nats-Msg-Id header so a replayed event is collapsed by the stream duplicate window, pre-flight stream validation, and a bounded failed-events store for terminally-failed and retry-exhausted events. Three configuration keys per target select it: JETSTREAM_ENABLE, JETSTREAM_STREAM_NAME, and JETSTREAM_ACK_TIMEOUT_SECS, under the RUSTFS_NOTIFY_NATS_ and RUSTFS_AUDIT_NATS_ prefixes. The on-disk batch filename separator changes from colon to underscore so batch names are valid on Windows filesystems, with transparent read-back of files written under the previous separator. The migration affects the shared queue store for every target type and lands with this feature because the store gains its first Windows-exercised paths here. Co-authored-by: houseme <housemecn@gmail.com>
70 lines
2.9 KiB
Rust
70 lines
2.9 KiB
Rust
// Copyright 2024 RustFS Team
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
pub const ENV_AUDIT_NATS_ENABLE: &str = "RUSTFS_AUDIT_NATS_ENABLE";
|
|
pub const ENV_AUDIT_NATS_ADDRESS: &str = "RUSTFS_AUDIT_NATS_ADDRESS";
|
|
pub const ENV_AUDIT_NATS_SUBJECT: &str = "RUSTFS_AUDIT_NATS_SUBJECT";
|
|
pub const ENV_AUDIT_NATS_USERNAME: &str = "RUSTFS_AUDIT_NATS_USERNAME";
|
|
pub const ENV_AUDIT_NATS_PASSWORD: &str = "RUSTFS_AUDIT_NATS_PASSWORD";
|
|
pub const ENV_AUDIT_NATS_TOKEN: &str = "RUSTFS_AUDIT_NATS_TOKEN";
|
|
pub const ENV_AUDIT_NATS_CREDENTIALS_FILE: &str = "RUSTFS_AUDIT_NATS_CREDENTIALS_FILE";
|
|
pub const ENV_AUDIT_NATS_TLS_CA: &str = "RUSTFS_AUDIT_NATS_TLS_CA";
|
|
pub const ENV_AUDIT_NATS_TLS_CLIENT_CERT: &str = "RUSTFS_AUDIT_NATS_TLS_CLIENT_CERT";
|
|
pub const ENV_AUDIT_NATS_TLS_CLIENT_KEY: &str = "RUSTFS_AUDIT_NATS_TLS_CLIENT_KEY";
|
|
pub const ENV_AUDIT_NATS_TLS_REQUIRED: &str = "RUSTFS_AUDIT_NATS_TLS_REQUIRED";
|
|
pub const ENV_AUDIT_NATS_QUEUE_DIR: &str = "RUSTFS_AUDIT_NATS_QUEUE_DIR";
|
|
pub const ENV_AUDIT_NATS_QUEUE_LIMIT: &str = "RUSTFS_AUDIT_NATS_QUEUE_LIMIT";
|
|
pub const ENV_AUDIT_NATS_JETSTREAM_ENABLE: &str = "RUSTFS_AUDIT_NATS_JETSTREAM_ENABLE";
|
|
pub const ENV_AUDIT_NATS_JETSTREAM_STREAM_NAME: &str = "RUSTFS_AUDIT_NATS_JETSTREAM_STREAM_NAME";
|
|
pub const ENV_AUDIT_NATS_JETSTREAM_ACK_TIMEOUT_SECS: &str = "RUSTFS_AUDIT_NATS_JETSTREAM_ACK_TIMEOUT_SECS";
|
|
|
|
pub const ENV_AUDIT_NATS_KEYS: &[&str; 16] = &[
|
|
ENV_AUDIT_NATS_ENABLE,
|
|
ENV_AUDIT_NATS_ADDRESS,
|
|
ENV_AUDIT_NATS_SUBJECT,
|
|
ENV_AUDIT_NATS_USERNAME,
|
|
ENV_AUDIT_NATS_PASSWORD,
|
|
ENV_AUDIT_NATS_TOKEN,
|
|
ENV_AUDIT_NATS_CREDENTIALS_FILE,
|
|
ENV_AUDIT_NATS_TLS_CA,
|
|
ENV_AUDIT_NATS_TLS_CLIENT_CERT,
|
|
ENV_AUDIT_NATS_TLS_CLIENT_KEY,
|
|
ENV_AUDIT_NATS_TLS_REQUIRED,
|
|
ENV_AUDIT_NATS_QUEUE_DIR,
|
|
ENV_AUDIT_NATS_QUEUE_LIMIT,
|
|
ENV_AUDIT_NATS_JETSTREAM_ENABLE,
|
|
ENV_AUDIT_NATS_JETSTREAM_STREAM_NAME,
|
|
ENV_AUDIT_NATS_JETSTREAM_ACK_TIMEOUT_SECS,
|
|
];
|
|
|
|
pub const AUDIT_NATS_KEYS: &[&str] = &[
|
|
crate::ENABLE_KEY,
|
|
crate::NATS_ADDRESS,
|
|
crate::NATS_SUBJECT,
|
|
crate::NATS_USERNAME,
|
|
crate::NATS_PASSWORD,
|
|
crate::NATS_TOKEN,
|
|
crate::NATS_CREDENTIALS_FILE,
|
|
crate::NATS_TLS_CA,
|
|
crate::NATS_TLS_CLIENT_CERT,
|
|
crate::NATS_TLS_CLIENT_KEY,
|
|
crate::NATS_TLS_REQUIRED,
|
|
crate::NATS_QUEUE_DIR,
|
|
crate::NATS_QUEUE_LIMIT,
|
|
crate::NATS_JETSTREAM_ENABLE,
|
|
crate::NATS_JETSTREAM_STREAM_NAME,
|
|
crate::NATS_JETSTREAM_ACK_TIMEOUT_SECS,
|
|
crate::COMMENT_KEY,
|
|
];
|