Mandar U Jog mandarjog
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Source: twoPodTest/templates/als.yaml | |
| apiVersion: extensions/v1beta1 | |
| kind: Deployment | |
| metadata: | |
| labels: | |
| app: accesslog-grpc | |
| name: accesslog-grpc | |
| spec: | |
| selector: | |
| matchLabels: |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [2019-06-11 04:01:16.200][196][debug][filter] [src/envoy/http/mixer/filter.cc:162] Called Mixer::Filter : check complete OK | |
| [2019-06-11 04:01:16.200][196][trace][http] [external/envoy/source/common/http/conn_manager_impl.cc:833] [C2165][S12105457795138984540] decode headers called: filter=0x5145770 status=0 | |
| [2019-06-11 04:01:16.200][196][trace][http] [external/envoy/source/common/http/conn_manager_impl.cc:833] [C2165][S12105457795138984540] decode headers called: filter=0x538d270 status=0 | |
| [2019-06-11 04:01:16.200][196][trace][http] [external/envoy/source/common/http/conn_manager_impl.cc:833] [C2165][S12105457795138984540] decode headers called: filter=0x5266c30 status=0 | |
| [2019-06-11 04:01:16.200][196][debug][router] [external/envoy/source/common/router/router.cc:332] [C2165][S12105457795138984540] cluster 'outbound|8080||fortioclient.twopods.svc.cluster.local' match for URL '/lgraph2' | |
| [2019-06-11 04:01:16.200][196][debug][router] [external/envoy/source/common/router/router.cc:393] [C2165][S12105457795138984540 |
mandarjog
/ GCLB with istio-on-gke-1.1.3
Created
June 4, 2019 17:20
GCLB Istio-addon 1.1.3 NodePort gateway
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Istio 1.1.3 Istio-add-on does not support a NodePort option for gateway. | |
| We therefore clone the istio-ingressgateway as istio-ingressgateway-private | |
| 1. Clone istio-ingressgateway service | |
| a. Modify name | |
| b. Remove all unnecessary config | |
| %> kubectl -n istio-system get svc istio-ingressgateway -o yaml | sed -e 's/istio-ingressgateway/istio-ingressgateway-private/g' -e '/clusterIP/d' -e '/nodePort/d' -e '/targetPort/d' -e 's/type: LoadBalancer/type: NodePort/g' -e '/addonmanager.kubernetes.io/d' -e '/kubernetes.io\/cluster-service/d' > private-svc.yaml | |
| 2. Clone istio-ingressgateway deployment |
mandarjog
/ GCLB with istio-on-gke-1.0.6.yaml
Last active
April 2, 2020 02:19
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # The following solution is used to enable GCLB with 1.0.x istio-on-gke add on. | |
| # | |
| # Ingress gateway in gke-add-on cannot be modified because it is reconciled. | |
| # | |
| # 1. Create a new ilgateway deployment with `--statusPort 15020`. | |
| # 2. Create a new service of type 'NodePort` to point to the above deployment | |
| # 3. In the target namespace, create a `gateway` resource to point to the ilbgateway by using | |
| # `selector: { "istio": "ilgateway" } | |
| # 4. Point k8s (GCLB) ingress resource to ilgateway | |
| # 5. Add advanced health-check for GCLB |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "name": "svc01-0.local:80", | |
| "domains": [ | |
| "svc01-0.local", | |
| "svc01-0.local:80" | |
| ], | |
| "routes": [ | |
| { | |
| "match": { | |
| "prefix": "/" |
mandarjog
/ gist:d83e8e1f2dc8cf8a085dd4c291c81034
Created
March 22, 2019 05:27
Espn actively redirecting to non https site
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ``` | |
| $ curl -v https://www.espn.com | |
| * Rebuilt URL to: https://www.espn.com/ | |
| * Trying 52.33.100.133... | |
| * TCP_NODELAY set | |
| * Connected to www.espn.com (52.33.100.133) port 443 (#0) | |
| * ALPN, offering h2 | |
| * ALPN, offering http/1.1 | |
| * Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH |
mandarjog
/ istio-ingressgateway-config.json
Last active
March 25, 2019 19:15
istio ingress large config example
This file has been truncated, but you can view the full file.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "configs": [ | |
| { | |
| "@type": "type.googleapis.com/envoy.admin.v2alpha.BootstrapConfigDump", | |
| "bootstrap": { | |
| "node": { | |
| "id": "router~10.16.42.131~istio-ingressgateway-6db44bd95b-5hrbj.istio-system~istio-system.svc.cluster.local", | |
| "cluster": "istio-ingressgateway", | |
| "metadata": { | |
| "POD_NAME": "istio-ingressgateway-6db44bd95b-5hrbj", |
mandarjog
/ fortio file format
Created
February 22, 2019 18:07
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "RunType": "HTTP", | |
| "Labels": "5d71950c_qps_2000_c_32_1024_nopol_both", | |
| "StartTime": "2019-02-22T09:12:54.002803656Z", | |
| "RequestedQPS": "2000", | |
| "RequestedDuration": "1m0s", | |
| "ActualQPS": 1999.5091668548246, | |
| "ActualDuration": 60014728609, | |
| "NumThreads": 32, | |
| "Version": "1.3.1", |
mandarjog
/ wrk2 output format
Last active
February 22, 2019 18:12
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| mjog@devinstance:/mnt/disks/sdb/go/src/istio.io/tools/perf/servicegraph/templates$ wrk -c 1000 -t 30 -d 120 -R 5000 -U http://fortioserver.v11.perf.qualistio.org/echo?size=1024 | |
| Running 2m test @ http://fortioserver.v11.perf.qualistio.org/echo?size=1024 | |
| 30 threads and 1000 connections | |
| Thread calibration: mean lat.: 3.271ms, rate sampling interval: 10ms | |
| Thread calibration: mean lat.: 3.320ms, rate sampling interval: 10ms | |
| Thread calibration: mean lat.: 3.414ms, rate sampling interval: 10ms | |
| Thread calibration: mean lat.: 3.272ms, rate sampling interval: 10ms | |
| Thread calibration: mean lat.: 3.276ms, rate sampling interval: 10ms | |
| Thread calibration: mean lat.: 3.168ms, rate sampling interval: 10ms | |
| Thread calibration: mean lat.: 3.198ms, rate sampling interval: 10ms |
mandarjog
/ gist:d9e8aaec4dac90766390a3cccfba4175
Created
November 18, 2018 20:01
mixer_in_envoy memory measurements
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Process Size in MB. Resident memory on Mac | |
| 36: base proxy | |
| 193: smaller mixer+envoy (trimmed down adapters, no k8s) | |
| 198: full mixer+envoy | |
| 156: mixs binary only, no proxy | |
| 58: Envoy + with no-op go extension | |