Ilia Denisov
8878711cf3
- GATEWAY_MAX_BODY_BYTES (1 MiB): connect WithReadMaxBytes + http.MaxBytesReader
on the public mux; explicit http2.Server MaxConcurrentStreams/IdleTimeout and
an http.Server ReadHeaderTimeout (R2 report follow-up).
- gateway_rate_limited_total{class} counter, Debug per rejection, a rejection
tracker drained every 30 s into a Warn summary per key and a report POST to
/api/v1/internal/ratelimit/report (feeds the admin view + auto-flag).
- The dead AdminPerMinute/AdminBurst policy now guards the /_gm mount (429),
ahead of its Basic-Auth.
- resolve() logs the cause of infra session-resolve failures at Warn (the
transient unauthenticated dips from the R2 run); unknown tokens stay silent.
93 lines
2.8 KiB
Go
93 lines
2.8 KiB
Go
package connectsrv
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
"time"
|
|
|
|
"go.opentelemetry.io/otel/attribute"
|
|
sdkmetric "go.opentelemetry.io/otel/sdk/metric"
|
|
"go.opentelemetry.io/otel/sdk/metric/metricdata"
|
|
)
|
|
|
|
// TestEdgeMetric records Execute outcomes through a manual reader and asserts the
|
|
// edge_request_duration histogram splits by message_type and result.
|
|
func TestEdgeMetric(t *testing.T) {
|
|
ctx := context.Background()
|
|
reader := sdkmetric.NewManualReader()
|
|
meter := sdkmetric.NewMeterProvider(sdkmetric.WithReader(reader)).Meter("test")
|
|
m := newServerMetrics(meter)
|
|
|
|
m.recordEdge(ctx, "game.submit_play", "ok", time.Now().Add(-time.Millisecond))
|
|
m.recordEdge(ctx, "game.submit_play", "ok", time.Now().Add(-time.Millisecond))
|
|
m.recordEdge(ctx, "auth.guest", "domain", time.Now().Add(-time.Millisecond))
|
|
|
|
var rm metricdata.ResourceMetrics
|
|
if err := reader.Collect(ctx, &rm); err != nil {
|
|
t.Fatalf("collect: %v", err)
|
|
}
|
|
|
|
type key struct{ messageType, result string }
|
|
counts := map[key]uint64{}
|
|
for _, sm := range rm.ScopeMetrics {
|
|
for _, md := range sm.Metrics {
|
|
if md.Name != "edge_request_duration" {
|
|
continue
|
|
}
|
|
h, ok := md.Data.(metricdata.Histogram[float64])
|
|
if !ok {
|
|
t.Fatalf("edge_request_duration is not a float64 histogram")
|
|
}
|
|
for _, dp := range h.DataPoints {
|
|
mt, _ := dp.Attributes.Value(attribute.Key("message_type"))
|
|
res, _ := dp.Attributes.Value(attribute.Key("result"))
|
|
counts[key{mt.AsString(), res.AsString()}] += dp.Count
|
|
}
|
|
}
|
|
}
|
|
if got := counts[key{"game.submit_play", "ok"}]; got != 2 {
|
|
t.Errorf("edge game.submit_play/ok = %d, want 2", got)
|
|
}
|
|
if got := counts[key{"auth.guest", "domain"}]; got != 1 {
|
|
t.Errorf("edge auth.guest/domain = %d, want 1", got)
|
|
}
|
|
}
|
|
|
|
// TestRateLimitedMetric records limiter rejections through a manual reader and
|
|
// asserts gateway_rate_limited_total splits by class.
|
|
func TestRateLimitedMetric(t *testing.T) {
|
|
ctx := context.Background()
|
|
reader := sdkmetric.NewManualReader()
|
|
meter := sdkmetric.NewMeterProvider(sdkmetric.WithReader(reader)).Meter("test")
|
|
m := newServerMetrics(meter)
|
|
|
|
m.recordRateLimited(ctx, "user")
|
|
m.recordRateLimited(ctx, "user")
|
|
m.recordRateLimited(ctx, "public")
|
|
|
|
var rm metricdata.ResourceMetrics
|
|
if err := reader.Collect(ctx, &rm); err != nil {
|
|
t.Fatalf("collect: %v", err)
|
|
}
|
|
|
|
counts := map[string]int64{}
|
|
for _, sm := range rm.ScopeMetrics {
|
|
for _, md := range sm.Metrics {
|
|
if md.Name != "gateway_rate_limited_total" {
|
|
continue
|
|
}
|
|
sum, ok := md.Data.(metricdata.Sum[int64])
|
|
if !ok {
|
|
t.Fatalf("gateway_rate_limited_total is not an int64 sum")
|
|
}
|
|
for _, dp := range sum.DataPoints {
|
|
class, _ := dp.Attributes.Value(attribute.Key("class"))
|
|
counts[class.AsString()] += dp.Value
|
|
}
|
|
}
|
|
}
|
|
if counts["user"] != 2 || counts["public"] != 1 {
|
|
t.Errorf("rate_limited counts = %v, want user=2 public=1", counts)
|
|
}
|
|
}
|