-
Notifications
You must be signed in to change notification settings - Fork 5.5k
http_filter: add addEncodedTrailers and addDecodedTrailers #3980
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from 11 commits
34bd3d1
688bc4d
e0b74f3
acfa3d8
baee8aa
42443b0
52c5780
8495e41
36103a1
f6ca600
483b48b
5412bb8
cd25726
c3a900b
90c6233
3667d6a
7637fa3
f2b6210
815a07b
2321031
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -190,6 +190,15 @@ class StreamDecoderFilterCallbacks : public virtual StreamFilterCallbacks { | |
| */ | ||
| virtual void addDecodedData(Buffer::Instance& data, bool streaming_filter) PURE; | ||
|
|
||
| /** | ||
| * Adds decoded trailers. May only be called in decodeData when end_stream is set to true. | ||
| * If called in any other context, an assertion will be triggered. | ||
| * | ||
| * When called in decodeData, the trailers map will be initialized to an empty map and returned by | ||
| * reference. Calling this function more than once is invalid. | ||
| */ | ||
| virtual HeaderMap& addDecodedTrailers() PURE; | ||
|
|
||
| /** | ||
| * Create a locally generated response using the provided response_code and body_text parameters. | ||
| * If the request was a gRPC request the local reply will be encoded as a gRPC response with a 200 | ||
|
|
@@ -395,6 +404,15 @@ class StreamEncoderFilterCallbacks : public virtual StreamFilterCallbacks { | |
| */ | ||
| virtual void addEncodedData(Buffer::Instance& data, bool streaming_filter) PURE; | ||
|
|
||
| /** | ||
| * Adds encoded trailers. May only be called in encodeData when end_stream is set to true. | ||
| * If called in any other context, an assertion will be triggered. | ||
| * | ||
| * When called in encodeData, the trailers map will be initialized to an empty map and returned by | ||
| * reference. Calling this function more than once is invalid. | ||
| */ | ||
| virtual HeaderMap& addEncodedTrailers() PURE; | ||
|
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. unsure what the best signature was here - it seems like
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. How does this work if the target stream protocol is not able to support trailers?
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. From what I understand the http/1.1 codec will just ignore the trailers: https://github.com/envoyproxy/envoy/blob/master/source/common/http/http1/codec_impl.cc#L148
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Perhaps we should just pass a HeaderMapPtr via move? This would just overwrite existing trailers? It would be uyp to the user to figure out if trailers already exist? Thoughts?
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
In that case you'll leaking HeaderMapImpl into filter codes and let filter create the HeaderMapPtr. Can we somehow (e.g. ASSERT) make sure this can be only called after or in
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. We will want to make sure for any protocol which doesn't support trailers we don't then lose the end_stream=true passing through the pipeline, but that's what tests are for :-) |
||
|
|
||
| /** | ||
| * Called when an encoder filter goes over its high watermark. | ||
| */ | ||
|
|
||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -775,15 +775,44 @@ void ConnectionManagerImpl::ActiveStream::decodeData(ActiveStreamDecoderFilter* | |
|
|
||
| for (; entry != decoder_filters_.end(); entry++) { | ||
| ASSERT(!(state_.filter_call_state_ & FilterCallState::DecodeData)); | ||
|
|
||
| // We check the request_trailers_ pointer here in case addDecodedTrailers | ||
| // is called in decodeData - at which point we communicate to the filter | ||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. "is called in decodeData during a previous filter invocation, at which point we communicate to the current and future filters that the stream has not yet ended." |
||
| // that the stream has not yet ended. | ||
| bool end_stream_no_trailers = end_stream && !request_trailers_; | ||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Mind adding a comment that we check the state of end stream inside the loop in case a filter adds trailers? |
||
| if (end_stream_no_trailers) { | ||
| state_.filter_call_state_ |= FilterCallState::LastDataFrame; | ||
| } | ||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I'd argue changing HCM state probably bumps this up to a medium-risk change.
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. +1
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. What does HCM stand for in this context?
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Http Connection Manager (HCM) |
||
| state_.filter_call_state_ |= FilterCallState::DecodeData; | ||
| FilterDataStatus status = (*entry)->handle_->decodeData(data, end_stream); | ||
| FilterDataStatus status = (*entry)->handle_->decodeData(data, end_stream_no_trailers); | ||
| state_.filter_call_state_ &= ~FilterCallState::DecodeData; | ||
| if (end_stream_no_trailers) { | ||
| state_.filter_call_state_ &= ~FilterCallState::LastDataFrame; | ||
| } | ||
| ENVOY_STREAM_LOG(trace, "decode data called: filter={} status={}", *this, | ||
| static_cast<const void*>((*entry).get()), static_cast<uint64_t>(status)); | ||
| if (!(*entry)->commonHandleAfterDataCallback(status, data, state_.decoder_filters_streaming_)) { | ||
| return; | ||
| // break here to ensure that we call decodeTrailers below | ||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. if commonHandleAfterDataCallback fails, doesn't it mean some data filter has requested the pipeline pause iteration? Let's say we have filter A which adds trailers and filter B which waits for full body and then does an RPC. If B gets the full body and asks the pipeline to pause while it does a callback, I believe we have to pause (not process trailers) until we get commonContinue. Are the added trailers not being processed there?
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Yeah I was a bit unsure how to handle this. The problem I ran into was that the router filter will stop iteration after Open to other suggestions
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Actually that might not be feasible since we'd hide some data from filters behind the one that stopped iteration...
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Oh yeah, I see the problem now. Hmm.... The best workaround I can think of is fairly inelegant, which is when trailers are added to schedule a closure which basically fakes the "you have received trailers from a client" path but gets called safely from not under the stack of the connection manager pipeline. Maybe @mattklein123 has a better suggestion?
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I think this is exactly the same situation that is handled here with body added in the headers callback? https://github.com/envoyproxy/envoy/blob/master/source/common/http/conn_manager_impl.cc#L721. Can we handle in the same way?
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I don't think this comment is correct. We are returning. Can you replicate a similar comment as we have in the headers case about why we are checking if this is the last filter? |
||
| break; | ||
| } | ||
| } | ||
|
|
||
| // If trailers were adding during decodeData we need to trigger decodeTrailers in order | ||
| // to allow filters to process the trailers. | ||
| if (end_stream && request_trailers_) { | ||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. again let's comment this is explicitly for the case that the remote side didn't send trailers but a filter added them. |
||
| decodeTrailers(filter, *request_trailers_); | ||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Don't we need to actually only send trailers to the filter that set the trailer and filters after it? I think we need to actually track which filter added the trailers... (See how this is handled in the headers/data case). |
||
| } | ||
| } | ||
|
|
||
| HeaderMap& ConnectionManagerImpl::ActiveStream::addDecodedTrailers() { | ||
| // trailers can only be added during the last data frame (i.e. end_stream = true) | ||
| ASSERT(state_.filter_call_state_ & FilterCallState::LastDataFrame); | ||
|
|
||
| // traileres can only be added once | ||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. -> Trailers can only be added once. |
||
| ASSERT(!request_trailers_); | ||
|
|
||
| request_trailers_ = std::make_unique<HeaderMapImpl>(); | ||
| return *request_trailers_; | ||
| } | ||
|
|
||
| void ConnectionManagerImpl::ActiveStream::addDecodedData(ActiveStreamDecoderFilter& filter, | ||
|
|
@@ -1058,6 +1087,22 @@ void ConnectionManagerImpl::ActiveStream::encodeHeaders(ActiveStreamEncoderFilte | |
| } | ||
| } | ||
|
|
||
| HeaderMap& ConnectionManagerImpl::ActiveStream::addEncodedTrailers() { | ||
| // trailers can only be added during the last data frame (i.e. end_stream = true) | ||
| ASSERT(state_.filter_call_state_ & FilterCallState::LastDataFrame); | ||
|
|
||
| // traileres can only be added once | ||
| ASSERT(!response_trailers_); | ||
|
|
||
| // local_complete_ is set to true at the start of encodeData(..., true), but since | ||
| // we've now added trailers we have to undo this to prevent encodeTrailers from | ||
| // blowing up when it assert on local_complete_ | ||
| state_.local_complete_ = false; | ||
|
|
||
| response_trailers_ = std::make_unique<HeaderMapImpl>(); | ||
| return *response_trailers_; | ||
| } | ||
|
|
||
| void ConnectionManagerImpl::ActiveStream::addEncodedData(ActiveStreamEncoderFilter& filter, | ||
| Buffer::Instance& data, bool streaming) { | ||
| if (state_.filter_call_state_ == 0 || | ||
|
|
@@ -1085,9 +1130,20 @@ void ConnectionManagerImpl::ActiveStream::encodeData(ActiveStreamEncoderFilter* | |
| std::list<ActiveStreamEncoderFilterPtr>::iterator entry = commonEncodePrefix(filter, end_stream); | ||
| for (; entry != encoder_filters_.end(); entry++) { | ||
| ASSERT(!(state_.filter_call_state_ & FilterCallState::EncodeData)); | ||
|
|
||
| // We check the request_trailers_ pointer here in case addEncodedTrailers | ||
| // is called in encodeData - at which point we communicate to the filter | ||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Same comment about the comment and the local variable. |
||
| // that the stream has not yet ended. | ||
| bool end_stream_no_trailers = end_stream && !response_trailers_; | ||
| state_.filter_call_state_ |= FilterCallState::EncodeData; | ||
| FilterDataStatus status = (*entry)->handle_->encodeData(data, end_stream); | ||
| if (end_stream_no_trailers) { | ||
| state_.filter_call_state_ |= FilterCallState::LastDataFrame; | ||
| } | ||
| FilterDataStatus status = (*entry)->handle_->encodeData(data, end_stream_no_trailers); | ||
| state_.filter_call_state_ &= ~FilterCallState::EncodeData; | ||
| if (end_stream_no_trailers) { | ||
| state_.filter_call_state_ &= ~FilterCallState::LastDataFrame; | ||
| } | ||
| ENVOY_STREAM_LOG(trace, "encode data called: filter={} status={}", *this, | ||
| static_cast<const void*>((*entry).get()), static_cast<uint64_t>(status)); | ||
| if (!(*entry)->commonHandleAfterDataCallback(status, data, state_.encoder_filters_streaming_)) { | ||
|
|
@@ -1099,8 +1155,16 @@ void ConnectionManagerImpl::ActiveStream::encodeData(ActiveStreamEncoderFilter* | |
| end_stream); | ||
|
|
||
| request_info_.addBytesSent(data.length()); | ||
| response_encoder_->encodeData(data, end_stream); | ||
| maybeEndEncode(end_stream); | ||
|
|
||
| // If trailers were adding during encodeData we need to trigger decodeTrailers in order | ||
| // to allow filters to process the trailers. | ||
| if (end_stream && response_trailers_) { | ||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I'm a little confused about the semantics here. When is a filter expected to add trailers for the first time? Do we want to support setting trailers during the final data frame where end_stream was otherwise true? I don't think we want to support that and we probably do? Also where is the parallel to this code on the decoding side?
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. What happens right now (since you can override trailers whenever)
3 is definitely confusing, so I'd be happy to prevent that. The question to me that remains is whether we want trailers to be written out at the end of What steered me away from that originally was that was that it doesn't seem like So after thinking about it some, how about this: This does mean we get both a
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
I think this is more on the right track.
I don't think this is going to work as it will completely confuse filters that do things when end_stream is true. I think this is the behavior you want:
I don't think this should be too hard to implement and should cleanly cover both encode/decode. Does that make sense? For the error checking side of things, IMO I would probably just block trailers being added in any context other than decodeData(..., true). Does it make sense anywhere else? The otehr thing to consider is what if someone calls this when a filter has been paused and then calls continue? Will it work correctly?
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Yeah that makes sense for the most part. One question:
Do you mean
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. No I meant what I said, that I think the only valid context to add trailers should be within a
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Ah, that makes perfect sense. Thanks for clarifying. |
||
| response_encoder_->encodeData(data, false); | ||
| encodeTrailers(filter, *response_trailers_); | ||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Same comment here about keeping track of which filter added the trailers? As an aside, I'm a little confused as to why the logic in encodeHeaders() does not mirror decodeHeaders() WRT to handling continue/last filter. (And yes I know I wrote this code!) I can look into this more tomorrow or Friday, but if you feel like taking a look that would be appreciated.
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I looked into it a little bit: adding the same last filter check to encodHeaders causes a test failure in which presumably comes from hitting this code more than once (towards the end of The test that's failing is Unclear whether this is why we don't special case the last filter in
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. OK, thanks for looking. I can take a look tomorrow or this weekend more. I wouldn't worry about it for now but it seemed strange to me that it wasn't symmetrical and I couldn't remember why. |
||
| } else { | ||
| response_encoder_->encodeData(data, end_stream); | ||
| maybeEndEncode(end_stream); | ||
| } | ||
| } | ||
|
|
||
| void ConnectionManagerImpl::ActiveStream::encodeTrailers(ActiveStreamEncoderFilter* filter, | ||
|
|
@@ -1380,6 +1444,10 @@ Buffer::WatermarkBufferPtr ConnectionManagerImpl::ActiveStreamDecoderFilter::cre | |
| return buffer; | ||
| } | ||
|
|
||
| HeaderMap& ConnectionManagerImpl::ActiveStreamDecoderFilter::addDecodedTrailers() { | ||
| return parent_.addDecodedTrailers(); | ||
| } | ||
|
|
||
| void ConnectionManagerImpl::ActiveStreamDecoderFilter::addDecodedData(Buffer::Instance& data, | ||
| bool streaming) { | ||
| parent_.addDecodedData(*this, data, streaming); | ||
|
|
@@ -1473,6 +1541,10 @@ void ConnectionManagerImpl::ActiveStreamEncoderFilter::addEncodedData(Buffer::In | |
| return parent_.addEncodedData(*this, data, streaming); | ||
| } | ||
|
|
||
| HeaderMap& ConnectionManagerImpl::ActiveStreamEncoderFilter::addEncodedTrailers() { | ||
| return parent_.addEncodedTrailers(); | ||
| } | ||
|
|
||
| void ConnectionManagerImpl::ActiveStreamEncoderFilter:: | ||
| onEncoderFilterAboveWriteBufferHighWatermark() { | ||
| ENVOY_STREAM_LOG(debug, "Disabling upstream stream due to filter callbacks.", parent_); | ||
|
|
||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -162,6 +162,7 @@ class ConnectionManagerImpl : Logger::Loggable<Logger::Id::http>, | |
|
|
||
| // Http::StreamDecoderFilterCallbacks | ||
| void addDecodedData(Buffer::Instance& data, bool streaming) override; | ||
| HeaderMap& addDecodedTrailers() override; | ||
| void continueDecoding() override; | ||
| const Buffer::Instance* decodingBuffer() override { | ||
| return parent_.buffered_request_data_.get(); | ||
|
|
@@ -229,6 +230,7 @@ class ConnectionManagerImpl : Logger::Loggable<Logger::Id::http>, | |
|
|
||
| // Http::StreamEncoderFilterCallbacks | ||
| void addEncodedData(Buffer::Instance& data, bool streaming) override; | ||
| HeaderMap& addEncodedTrailers() override; | ||
| void onEncoderFilterAboveWriteBufferHighWatermark() override; | ||
| void onEncoderFilterBelowWriteBufferLowWatermark() override; | ||
| void setEncoderBufferLimit(uint32_t limit) override { parent_.setBufferLimit(limit); } | ||
|
|
@@ -267,11 +269,13 @@ class ConnectionManagerImpl : Logger::Loggable<Logger::Id::http>, | |
| commonEncodePrefix(ActiveStreamEncoderFilter* filter, bool end_stream); | ||
| const Network::Connection* connection(); | ||
| void addDecodedData(ActiveStreamDecoderFilter& filter, Buffer::Instance& data, bool streaming); | ||
| HeaderMap& addDecodedTrailers(); | ||
| void decodeHeaders(ActiveStreamDecoderFilter* filter, HeaderMap& headers, bool end_stream); | ||
| void decodeData(ActiveStreamDecoderFilter* filter, Buffer::Instance& data, bool end_stream); | ||
| void decodeTrailers(ActiveStreamDecoderFilter* filter, HeaderMap& trailers); | ||
| void maybeEndDecode(bool end_stream); | ||
| void addEncodedData(ActiveStreamEncoderFilter& filter, Buffer::Instance& data, bool streaming); | ||
| HeaderMap& addEncodedTrailers(); | ||
| void sendLocalReply(bool is_grpc_request, Code code, const std::string& body, | ||
| std::function<void(HeaderMap& headers)> modify_headers); | ||
| void encode100ContinueHeaders(ActiveStreamEncoderFilter* filter, HeaderMap& headers); | ||
|
|
@@ -339,6 +343,9 @@ class ConnectionManagerImpl : Logger::Loggable<Logger::Id::http>, | |
| // to verify we do not encode100Continue headers more than once per | ||
| // filter. | ||
| static constexpr uint32_t Encode100ContinueHeaders = 0x40; | ||
| // Used to indicate that we're processing the final [en|de]Code frame, | ||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. nit: |
||
| // i.e. end_stream = true | ||
| static constexpr uint32_t LastDataFrame = 0x80; | ||
| }; | ||
| // clang-format on | ||
|
|
||
|
|
||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sorry, I should have called this out before, but please doc the return as @return here and below