mirror of
https://github.com/mulgadc/spinifex.git
synced 2026-10-15 17:11:30 +00:00
Josh Siviour
554c5d96c7
* feat(elbv2): NLB L4 data plane on nginx stream (mulga-siv-952) Network load balancers render an nginx `stream` config (TCP/UDP/TLS/ TCP_UDP) instead of HAProxy, which cannot load-balance UDP in any release. The gateway tags GetLBConfig with Engine=nginx; the LB agent dispatches to the nginx engine (config/pid/cert paths + reload) and skips HAProxy stats polling. ALB stays on HAProxy. nginx is added to the microvm image. * docs(elbv2): note NLB runs nginx stream, ALB runs HAProxy (mulga-siv-952) * fix(elbv2): load nginx stream module for NLB data plane Alpine's `nginx` apk is built without the stream module — it ships separately as `nginx-mod-stream`. Without it, the generated NLB config fails `nginx -t` with [emerg] unknown directive "stream", so the agent never applies it. Add the package to the microvm image and emit a `load_module .../ngx_stream_module.so;` directive at the top of the generated config. * fix(elbv2-ui): allow single-subnet LB + full NLB protocols in listener edit Create-LB form required min 2 subnets while the CLI/backend accept 1; relax to min(1) to match. Listener add/edit only offered HTTP/HTTPS — add the NLB protocol set (TCP, UDP, TLS, TCP_UDP), driven by LB type, with cert/ssl-policy fields gated on secure protocols (HTTPS/TLS). * feat(elbv2): active target health checks for nginx NLBs nginx stream has no active upstream probing, so NLB targets never advanced past initial — DescribeTargetHealth stayed initial forever and WaitForTargetsHealthy timed out for every NLB. GetLBConfig now delivers per-target HealthTarget specs (daemon-computed server name, probe address, protocol/path) for network LBs; the lb-agent probes each target every tick (TCP dial or HTTP/HTTPS GET) and reports UP/DOWN via the existing heartbeat path, so the daemon's threshold hysteresis advances targets to healthy. ALBs are unchanged (HAProxy stats). Adds an Internal_NLB_UDP e2e suite gating on WaitForTargetsHealthy plus a UDP datagram round-trip through the VIP.
33 lines
1.3 KiB
Bash
33 lines
1.3 KiB
Bash
#!/bin/bash
|
|
# App instance user-data: triple-purpose responder for LB E2E tests.
|
|
# HTTP:80 serves JSON {"instance_id": "<hostname>"} for ALB suites
|
|
# TCP:9000 echoes <hostname> for NLB TCP suites (also UDP-TG TCP health check)
|
|
# UDP:9001 echoes <hostname> for NLB UDP suites
|
|
INSTANCE_ID=$(hostname)
|
|
|
|
mkdir -p /tmp/httpd/alpha /tmp/httpd/beta && cd /tmp/httpd
|
|
echo "{\"instance_id\": \"${INSTANCE_ID}\"}" > index.html
|
|
echo "{\"instance_id\": \"${INSTANCE_ID}\"}" > alpha/index.html
|
|
echo "{\"instance_id\": \"${INSTANCE_ID}\"}" > beta/index.html
|
|
nohup python3 -m http.server 80 --bind 0.0.0.0 > /dev/null 2>&1 &
|
|
|
|
cat > /tmp/tcp_echo.py << 'PYEOF'
|
|
import socketserver, os
|
|
class Handler(socketserver.StreamRequestHandler):
|
|
def handle(self):
|
|
self.wfile.write((os.uname()[1] + "\n").encode())
|
|
socketserver.TCPServer.allow_reuse_address = True
|
|
socketserver.TCPServer(("0.0.0.0", 9000), Handler).serve_forever()
|
|
PYEOF
|
|
nohup python3 /tmp/tcp_echo.py > /dev/null 2>&1 &
|
|
|
|
cat > /tmp/udp_echo.py << 'PYEOF'
|
|
import socketserver, os
|
|
class Handler(socketserver.DatagramRequestHandler):
|
|
def handle(self):
|
|
self.wfile.write((os.uname()[1] + "\n").encode())
|
|
socketserver.UDPServer.allow_reuse_address = True
|
|
socketserver.UDPServer(("0.0.0.0", 9001), Handler).serve_forever()
|
|
PYEOF
|
|
nohup python3 /tmp/udp_echo.py > /dev/null 2>&1 &
|