mirror of
https://github.com/google/nomulus.git
synced 2025-05-09 08:18:21 +02:00
84eab90000
When not running locally, the logging formatter is set to convert the log record to a single-line JSON string that Stackdriver logging agent running in GKE will pick up and parse correctly. Also removed redundant logging handler in the proxy frontend connection. They have two problems: 1) it is possible to leak PII when all frontend traffic is logged, such as client IPs. Even though this is less of a concern because the GCP TCP proxy load balancer masquerade source IPs. 2) We are only logging the HTTP request/response that the frontend connection is sending to/receiving from the backend connection, but the backend already has its own logging handler to log the same message that it gets from/sends to the GAE app, so the logging in the frontend connection does not really give extra information. Logging of some potential PII information such as the source IP of a proxied connection are also removed. Thirdly, added a k8s autoscaling object that scales the containers based on CPU load. The default target load is 80%. This, in connection with GKE cluster VM autoscaling, means that when traffic is low, we'll only have one VM running one container of the proxy. Fixes a bug where the MetricsComponent generates a separate ProxyConfig that does not call parse method on the command line args passed, resulting default Environment always being used in constructing the metric reporter. Lastly a little bit of cleaning of the MOE config script, no newlines are necessary as the BUILD are formatted after string substitution. ------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=188029019
80 lines
2 KiB
Text
80 lines
2 KiB
Text
# Description:
|
|
# This package contains the code for the binary that proxies TCP traffic from
|
|
# the GCE/GKE to AppEngine.
|
|
|
|
load("@io_bazel_rules_docker//container:container.bzl", "container_image", "container_push")
|
|
|
|
package(
|
|
default_visibility = ["//java/google/registry:registry_project"],
|
|
)
|
|
|
|
licenses(["notice"]) # Apache 2.0
|
|
|
|
java_library(
|
|
name = "proxy",
|
|
srcs = glob(["**/*.java"]),
|
|
resources = glob([
|
|
"resources/*",
|
|
"config/*.yaml",
|
|
]),
|
|
deps = [
|
|
"//java/google/registry/config",
|
|
"//java/google/registry/util",
|
|
"@com_beust_jcommander",
|
|
"@com_fasterxml_jackson_core",
|
|
"@com_fasterxml_jackson_core_jackson_annotations",
|
|
"@com_fasterxml_jackson_core_jackson_databind",
|
|
"@com_google_api_client",
|
|
"@com_google_apis_google_api_services_cloudkms",
|
|
"@com_google_apis_google_api_services_monitoring",
|
|
"@com_google_auto_value",
|
|
"@com_google_code_findbugs_jsr305",
|
|
"@com_google_dagger",
|
|
"@com_google_guava",
|
|
"@com_google_monitoring_client_metrics",
|
|
"@com_google_monitoring_client_stackdriver",
|
|
"@io_netty_buffer",
|
|
"@io_netty_codec",
|
|
"@io_netty_codec_http",
|
|
"@io_netty_common",
|
|
"@io_netty_handler",
|
|
"@io_netty_transport",
|
|
"@javax_inject",
|
|
"@joda_time",
|
|
"@org_bouncycastle_bcpkix_jdk15on",
|
|
],
|
|
)
|
|
|
|
java_binary(
|
|
name = "proxy_server",
|
|
main_class = "google.registry.proxy.ProxyServer",
|
|
runtime_deps = [
|
|
":proxy",
|
|
"@io_netty_tcnative",
|
|
],
|
|
)
|
|
|
|
container_image(
|
|
name = "proxy_image",
|
|
base = "@java_base//image",
|
|
entrypoint = [
|
|
"java",
|
|
"-jar",
|
|
"proxy_server_deploy.jar",
|
|
],
|
|
files = [":proxy_server_deploy.jar"],
|
|
ports = [
|
|
"30000",
|
|
"30001",
|
|
"30002",
|
|
],
|
|
)
|
|
|
|
container_push(
|
|
name = "proxy_push",
|
|
format = "Docker",
|
|
image = ":proxy_image",
|
|
registry = "gcr.io",
|
|
repository = "GCP_PROJECT/IMAGE_NAME",
|
|
tag = "bazel",
|
|
)
|