etcd.go 21 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754
  1. // Copyright 2016 The etcd Authors
  2. //
  3. // Licensed under the Apache License, Version 2.0 (the "License");
  4. // you may not use this file except in compliance with the License.
  5. // You may obtain a copy of the License at
  6. //
  7. // http://www.apache.org/licenses/LICENSE-2.0
  8. //
  9. // Unless required by applicable law or agreed to in writing, software
  10. // distributed under the License is distributed on an "AS IS" BASIS,
  11. // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12. // See the License for the specific language governing permissions and
  13. // limitations under the License.
  14. package embed
  15. import (
  16. "context"
  17. "crypto/tls"
  18. "fmt"
  19. "io/ioutil"
  20. defaultLog "log"
  21. "net"
  22. "net/http"
  23. "net/url"
  24. "sort"
  25. "strconv"
  26. "sync"
  27. "time"
  28. "github.com/coreos/etcd/etcdserver"
  29. "github.com/coreos/etcd/etcdserver/api/etcdhttp"
  30. "github.com/coreos/etcd/etcdserver/api/rafthttp"
  31. "github.com/coreos/etcd/etcdserver/api/v2http"
  32. "github.com/coreos/etcd/etcdserver/api/v2v3"
  33. "github.com/coreos/etcd/etcdserver/api/v3client"
  34. "github.com/coreos/etcd/etcdserver/api/v3rpc"
  35. "github.com/coreos/etcd/pkg/debugutil"
  36. runtimeutil "github.com/coreos/etcd/pkg/runtime"
  37. "github.com/coreos/etcd/pkg/transport"
  38. "github.com/coreos/etcd/pkg/types"
  39. "github.com/coreos/pkg/capnslog"
  40. "github.com/grpc-ecosystem/go-grpc-prometheus"
  41. "github.com/soheilhy/cmux"
  42. "go.uber.org/zap"
  43. "google.golang.org/grpc"
  44. "google.golang.org/grpc/keepalive"
  45. )
  46. var plog = capnslog.NewPackageLogger("github.com/coreos/etcd", "embed")
  47. const (
  48. // internal fd usage includes disk usage and transport usage.
  49. // To read/write snapshot, snap pkg needs 1. In normal case, wal pkg needs
  50. // at most 2 to read/lock/write WALs. One case that it needs to 2 is to
  51. // read all logs after some snapshot index, which locates at the end of
  52. // the second last and the head of the last. For purging, it needs to read
  53. // directory, so it needs 1. For fd monitor, it needs 1.
  54. // For transport, rafthttp builds two long-polling connections and at most
  55. // four temporary connections with each member. There are at most 9 members
  56. // in a cluster, so it should reserve 96.
  57. // For the safety, we set the total reserved number to 150.
  58. reservedInternalFDNum = 150
  59. )
  60. // Etcd contains a running etcd server and its listeners.
  61. type Etcd struct {
  62. Peers []*peerListener
  63. Clients []net.Listener
  64. // a map of contexts for the servers that serves client requests.
  65. sctxs map[string]*serveCtx
  66. metricsListeners []net.Listener
  67. Server *etcdserver.EtcdServer
  68. cfg Config
  69. stopc chan struct{}
  70. errc chan error
  71. closeOnce sync.Once
  72. }
  73. type peerListener struct {
  74. net.Listener
  75. serve func() error
  76. close func(context.Context) error
  77. }
  78. // StartEtcd launches the etcd server and HTTP handlers for client/server communication.
  79. // The returned Etcd.Server is not guaranteed to have joined the cluster. Wait
  80. // on the Etcd.Server.ReadyNotify() channel to know when it completes and is ready for use.
  81. func StartEtcd(inCfg *Config) (e *Etcd, err error) {
  82. if err = inCfg.Validate(); err != nil {
  83. return nil, err
  84. }
  85. serving := false
  86. e = &Etcd{cfg: *inCfg, stopc: make(chan struct{})}
  87. cfg := &e.cfg
  88. defer func() {
  89. if e == nil || err == nil {
  90. return
  91. }
  92. if !serving {
  93. // errored before starting gRPC server for serveCtx.serversC
  94. for _, sctx := range e.sctxs {
  95. close(sctx.serversC)
  96. }
  97. }
  98. e.Close()
  99. e = nil
  100. }()
  101. if e.cfg.logger != nil {
  102. e.cfg.logger.Info(
  103. "configuring peer listeners",
  104. zap.Strings("listen-peer-urls", e.cfg.getLPURLs()),
  105. )
  106. }
  107. if e.Peers, err = configurePeerListeners(cfg); err != nil {
  108. return e, err
  109. }
  110. if e.cfg.logger != nil {
  111. e.cfg.logger.Info(
  112. "configuring client listeners",
  113. zap.Strings("listen-client-urls", e.cfg.getLCURLs()),
  114. )
  115. }
  116. if e.sctxs, err = configureClientListeners(cfg); err != nil {
  117. return e, err
  118. }
  119. for _, sctx := range e.sctxs {
  120. e.Clients = append(e.Clients, sctx.l)
  121. }
  122. var (
  123. urlsmap types.URLsMap
  124. token string
  125. )
  126. memberInitialized := true
  127. if !isMemberInitialized(cfg) {
  128. memberInitialized = false
  129. urlsmap, token, err = cfg.PeerURLsMapAndToken("etcd")
  130. if err != nil {
  131. return e, fmt.Errorf("error setting up initial cluster: %v", err)
  132. }
  133. }
  134. // AutoCompactionRetention defaults to "0" if not set.
  135. if len(cfg.AutoCompactionRetention) == 0 {
  136. cfg.AutoCompactionRetention = "0"
  137. }
  138. autoCompactionRetention, err := parseCompactionRetention(cfg.AutoCompactionMode, cfg.AutoCompactionRetention)
  139. if err != nil {
  140. return e, err
  141. }
  142. srvcfg := etcdserver.ServerConfig{
  143. Name: cfg.Name,
  144. ClientURLs: cfg.ACUrls,
  145. PeerURLs: cfg.APUrls,
  146. DataDir: cfg.Dir,
  147. DedicatedWALDir: cfg.WalDir,
  148. SnapshotCount: cfg.SnapshotCount,
  149. MaxSnapFiles: cfg.MaxSnapFiles,
  150. MaxWALFiles: cfg.MaxWalFiles,
  151. InitialPeerURLsMap: urlsmap,
  152. InitialClusterToken: token,
  153. DiscoveryURL: cfg.Durl,
  154. DiscoveryProxy: cfg.Dproxy,
  155. NewCluster: cfg.IsNewCluster(),
  156. PeerTLSInfo: cfg.PeerTLSInfo,
  157. TickMs: cfg.TickMs,
  158. ElectionTicks: cfg.ElectionTicks(),
  159. InitialElectionTickAdvance: cfg.InitialElectionTickAdvance,
  160. AutoCompactionRetention: autoCompactionRetention,
  161. AutoCompactionMode: cfg.AutoCompactionMode,
  162. QuotaBackendBytes: cfg.QuotaBackendBytes,
  163. MaxTxnOps: cfg.MaxTxnOps,
  164. MaxRequestBytes: cfg.MaxRequestBytes,
  165. StrictReconfigCheck: cfg.StrictReconfigCheck,
  166. ClientCertAuthEnabled: cfg.ClientTLSInfo.ClientCertAuth,
  167. AuthToken: cfg.AuthToken,
  168. BcryptCost: cfg.BcryptCost,
  169. CORS: cfg.CORS,
  170. HostWhitelist: cfg.HostWhitelist,
  171. InitialCorruptCheck: cfg.ExperimentalInitialCorruptCheck,
  172. CorruptCheckTime: cfg.ExperimentalCorruptCheckTime,
  173. PreVote: cfg.PreVote,
  174. Logger: cfg.logger,
  175. LoggerConfig: cfg.loggerConfig,
  176. LoggerCore: cfg.loggerCore,
  177. LoggerWriteSyncer: cfg.loggerWriteSyncer,
  178. Debug: cfg.Debug,
  179. ForceNewCluster: cfg.ForceNewCluster,
  180. }
  181. if e.Server, err = etcdserver.NewServer(srvcfg); err != nil {
  182. return e, err
  183. }
  184. if len(e.cfg.CORS) > 0 {
  185. ss := make([]string, 0, len(e.cfg.CORS))
  186. for v := range e.cfg.CORS {
  187. ss = append(ss, v)
  188. }
  189. sort.Strings(ss)
  190. if e.cfg.logger != nil {
  191. e.cfg.logger.Info("configured CORS", zap.Strings("cors", ss))
  192. } else {
  193. plog.Infof("%s starting with cors %q", e.Server.ID(), ss)
  194. }
  195. }
  196. if len(e.cfg.HostWhitelist) > 0 {
  197. ss := make([]string, 0, len(e.cfg.HostWhitelist))
  198. for v := range e.cfg.HostWhitelist {
  199. ss = append(ss, v)
  200. }
  201. sort.Strings(ss)
  202. if e.cfg.logger != nil {
  203. e.cfg.logger.Info("configured host whitelist", zap.Strings("hosts", ss))
  204. } else {
  205. plog.Infof("%s starting with host whitelist %q", e.Server.ID(), ss)
  206. }
  207. }
  208. // buffer channel so goroutines on closed connections won't wait forever
  209. e.errc = make(chan error, len(e.Peers)+len(e.Clients)+2*len(e.sctxs))
  210. // newly started member ("memberInitialized==false")
  211. // does not need corruption check
  212. if memberInitialized {
  213. if err = e.Server.CheckInitialHashKV(); err != nil {
  214. // set "EtcdServer" to nil, so that it does not block on "EtcdServer.Close()"
  215. // (nothing to close since rafthttp transports have not been started)
  216. e.Server = nil
  217. return e, err
  218. }
  219. }
  220. e.Server.Start()
  221. if err = e.servePeers(); err != nil {
  222. return e, err
  223. }
  224. if err = e.serveClients(); err != nil {
  225. return e, err
  226. }
  227. if err = e.serveMetrics(); err != nil {
  228. return e, err
  229. }
  230. if e.cfg.logger != nil {
  231. e.cfg.logger.Info(
  232. "now serving peer/client/metrics",
  233. zap.String("local-member-id", e.Server.ID().String()),
  234. zap.Strings("initial-advertise-peer-urls", e.cfg.getAPURLs()),
  235. zap.Strings("listen-peer-urls", e.cfg.getLPURLs()),
  236. zap.Strings("advertise-client-urls", e.cfg.getACURLs()),
  237. zap.Strings("listen-client-urls", e.cfg.getLCURLs()),
  238. zap.Strings("listen-metrics-urls", e.cfg.getMetricsURLs()),
  239. )
  240. }
  241. serving = true
  242. return e, nil
  243. }
  244. // Config returns the current configuration.
  245. func (e *Etcd) Config() Config {
  246. return e.cfg
  247. }
  248. // Close gracefully shuts down all servers/listeners.
  249. // Client requests will be terminated with request timeout.
  250. // After timeout, enforce remaning requests be closed immediately.
  251. func (e *Etcd) Close() {
  252. fields := []zap.Field{
  253. zap.String("name", e.cfg.Name),
  254. zap.String("data-dir", e.cfg.Dir),
  255. zap.Strings("advertise-peer-urls", e.cfg.getAPURLs()),
  256. zap.Strings("advertise-client-urls", e.cfg.getACURLs()),
  257. }
  258. lg := e.GetLogger()
  259. if lg != nil {
  260. lg.Info("closing etcd server", fields...)
  261. }
  262. defer func() {
  263. if lg != nil {
  264. lg.Info("closed etcd server", fields...)
  265. lg.Sync()
  266. }
  267. }()
  268. e.closeOnce.Do(func() { close(e.stopc) })
  269. // close client requests with request timeout
  270. timeout := 2 * time.Second
  271. if e.Server != nil {
  272. timeout = e.Server.Cfg.ReqTimeout()
  273. }
  274. for _, sctx := range e.sctxs {
  275. for ss := range sctx.serversC {
  276. ctx, cancel := context.WithTimeout(context.Background(), timeout)
  277. stopServers(ctx, ss)
  278. cancel()
  279. }
  280. }
  281. for _, sctx := range e.sctxs {
  282. sctx.cancel()
  283. }
  284. for i := range e.Clients {
  285. if e.Clients[i] != nil {
  286. e.Clients[i].Close()
  287. }
  288. }
  289. for i := range e.metricsListeners {
  290. e.metricsListeners[i].Close()
  291. }
  292. // close rafthttp transports
  293. if e.Server != nil {
  294. e.Server.Stop()
  295. }
  296. // close all idle connections in peer handler (wait up to 1-second)
  297. for i := range e.Peers {
  298. if e.Peers[i] != nil && e.Peers[i].close != nil {
  299. ctx, cancel := context.WithTimeout(context.Background(), time.Second)
  300. e.Peers[i].close(ctx)
  301. cancel()
  302. }
  303. }
  304. }
  305. func stopServers(ctx context.Context, ss *servers) {
  306. shutdownNow := func() {
  307. // first, close the http.Server
  308. ss.http.Shutdown(ctx)
  309. // then close grpc.Server; cancels all active RPCs
  310. ss.grpc.Stop()
  311. }
  312. // do not grpc.Server.GracefulStop with TLS enabled etcd server
  313. // See https://github.com/grpc/grpc-go/issues/1384#issuecomment-317124531
  314. // and https://github.com/coreos/etcd/issues/8916
  315. if ss.secure {
  316. shutdownNow()
  317. return
  318. }
  319. ch := make(chan struct{})
  320. go func() {
  321. defer close(ch)
  322. // close listeners to stop accepting new connections,
  323. // will block on any existing transports
  324. ss.grpc.GracefulStop()
  325. }()
  326. // wait until all pending RPCs are finished
  327. select {
  328. case <-ch:
  329. case <-ctx.Done():
  330. // took too long, manually close open transports
  331. // e.g. watch streams
  332. shutdownNow()
  333. // concurrent GracefulStop should be interrupted
  334. <-ch
  335. }
  336. }
  337. func (e *Etcd) Err() <-chan error { return e.errc }
  338. func configurePeerListeners(cfg *Config) (peers []*peerListener, err error) {
  339. if err = updateCipherSuites(&cfg.PeerTLSInfo, cfg.CipherSuites); err != nil {
  340. return nil, err
  341. }
  342. if err = cfg.PeerSelfCert(); err != nil {
  343. if cfg.logger != nil {
  344. cfg.logger.Fatal("failed to get peer self-signed certs", zap.Error(err))
  345. } else {
  346. plog.Fatalf("could not get certs (%v)", err)
  347. }
  348. }
  349. if !cfg.PeerTLSInfo.Empty() {
  350. if cfg.logger != nil {
  351. cfg.logger.Info(
  352. "starting with peer TLS",
  353. zap.String("tls-info", fmt.Sprintf("%+v", cfg.PeerTLSInfo)),
  354. zap.Strings("cipher-suites", cfg.CipherSuites),
  355. )
  356. } else {
  357. plog.Infof("peerTLS: %s", cfg.PeerTLSInfo)
  358. }
  359. }
  360. peers = make([]*peerListener, len(cfg.LPUrls))
  361. defer func() {
  362. if err == nil {
  363. return
  364. }
  365. for i := range peers {
  366. if peers[i] != nil && peers[i].close != nil {
  367. if cfg.logger != nil {
  368. cfg.logger.Warn(
  369. "closing peer listener",
  370. zap.String("address", cfg.LPUrls[i].String()),
  371. zap.Error(err),
  372. )
  373. } else {
  374. plog.Info("stopping listening for peers on ", cfg.LPUrls[i].String())
  375. }
  376. ctx, cancel := context.WithTimeout(context.Background(), time.Second)
  377. peers[i].close(ctx)
  378. cancel()
  379. }
  380. }
  381. }()
  382. for i, u := range cfg.LPUrls {
  383. if u.Scheme == "http" {
  384. if !cfg.PeerTLSInfo.Empty() {
  385. if cfg.logger != nil {
  386. cfg.logger.Warn("scheme is HTTP while key and cert files are present; ignoring key and cert files", zap.String("peer-url", u.String()))
  387. } else {
  388. plog.Warningf("The scheme of peer url %s is HTTP while peer key/cert files are presented. Ignored peer key/cert files.", u.String())
  389. }
  390. }
  391. if cfg.PeerTLSInfo.ClientCertAuth {
  392. if cfg.logger != nil {
  393. cfg.logger.Warn("scheme is HTTP while --peer-client-cert-auth is enabled; ignoring client cert auth for this URL", zap.String("peer-url", u.String()))
  394. } else {
  395. plog.Warningf("The scheme of peer url %s is HTTP while client cert auth (--peer-client-cert-auth) is enabled. Ignored client cert auth for this url.", u.String())
  396. }
  397. }
  398. }
  399. peers[i] = &peerListener{close: func(context.Context) error { return nil }}
  400. peers[i].Listener, err = rafthttp.NewListener(u, &cfg.PeerTLSInfo)
  401. if err != nil {
  402. return nil, err
  403. }
  404. // once serve, overwrite with 'http.Server.Shutdown'
  405. peers[i].close = func(context.Context) error {
  406. return peers[i].Listener.Close()
  407. }
  408. }
  409. return peers, nil
  410. }
  411. // configure peer handlers after rafthttp.Transport started
  412. func (e *Etcd) servePeers() (err error) {
  413. ph := etcdhttp.NewPeerHandler(e.GetLogger(), e.Server)
  414. var peerTLScfg *tls.Config
  415. if !e.cfg.PeerTLSInfo.Empty() {
  416. if peerTLScfg, err = e.cfg.PeerTLSInfo.ServerConfig(); err != nil {
  417. return err
  418. }
  419. }
  420. for _, p := range e.Peers {
  421. u := p.Listener.Addr().String()
  422. gs := v3rpc.Server(e.Server, peerTLScfg)
  423. m := cmux.New(p.Listener)
  424. go gs.Serve(m.Match(cmux.HTTP2()))
  425. srv := &http.Server{
  426. Handler: grpcHandlerFunc(gs, ph),
  427. ReadTimeout: 5 * time.Minute,
  428. ErrorLog: defaultLog.New(ioutil.Discard, "", 0), // do not log user error
  429. }
  430. go srv.Serve(m.Match(cmux.Any()))
  431. p.serve = func() error { return m.Serve() }
  432. p.close = func(ctx context.Context) error {
  433. // gracefully shutdown http.Server
  434. // close open listeners, idle connections
  435. // until context cancel or time-out
  436. if e.cfg.logger != nil {
  437. e.cfg.logger.Info(
  438. "stopping serving peer traffic",
  439. zap.String("address", u),
  440. )
  441. }
  442. stopServers(ctx, &servers{secure: peerTLScfg != nil, grpc: gs, http: srv})
  443. if e.cfg.logger != nil {
  444. e.cfg.logger.Info(
  445. "stopped serving peer traffic",
  446. zap.String("address", u),
  447. )
  448. }
  449. return nil
  450. }
  451. }
  452. // start peer servers in a goroutine
  453. for _, pl := range e.Peers {
  454. go func(l *peerListener) {
  455. u := l.Addr().String()
  456. if e.cfg.logger != nil {
  457. e.cfg.logger.Info(
  458. "serving peer traffic",
  459. zap.String("address", u),
  460. )
  461. } else {
  462. plog.Info("listening for peers on ", u)
  463. }
  464. e.errHandler(l.serve())
  465. }(pl)
  466. }
  467. return nil
  468. }
  469. func configureClientListeners(cfg *Config) (sctxs map[string]*serveCtx, err error) {
  470. if err = updateCipherSuites(&cfg.ClientTLSInfo, cfg.CipherSuites); err != nil {
  471. return nil, err
  472. }
  473. if err = cfg.ClientSelfCert(); err != nil {
  474. if cfg.logger != nil {
  475. cfg.logger.Fatal("failed to get client self-signed certs", zap.Error(err))
  476. } else {
  477. plog.Fatalf("could not get certs (%v)", err)
  478. }
  479. }
  480. if cfg.EnablePprof {
  481. if cfg.logger != nil {
  482. cfg.logger.Info("pprof is enabled", zap.String("path", debugutil.HTTPPrefixPProf))
  483. } else {
  484. plog.Infof("pprof is enabled under %s", debugutil.HTTPPrefixPProf)
  485. }
  486. }
  487. sctxs = make(map[string]*serveCtx)
  488. for _, u := range cfg.LCUrls {
  489. sctx := newServeCtx(cfg.logger)
  490. if u.Scheme == "http" || u.Scheme == "unix" {
  491. if !cfg.ClientTLSInfo.Empty() {
  492. if cfg.logger != nil {
  493. cfg.logger.Warn("scheme is HTTP while key and cert files are present; ignoring key and cert files", zap.String("client-url", u.String()))
  494. } else {
  495. plog.Warningf("The scheme of client url %s is HTTP while peer key/cert files are presented. Ignored key/cert files.", u.String())
  496. }
  497. }
  498. if cfg.ClientTLSInfo.ClientCertAuth {
  499. if cfg.logger != nil {
  500. cfg.logger.Warn("scheme is HTTP while --client-cert-auth is enabled; ignoring client cert auth for this URL", zap.String("client-url", u.String()))
  501. } else {
  502. plog.Warningf("The scheme of client url %s is HTTP while client cert auth (--client-cert-auth) is enabled. Ignored client cert auth for this url.", u.String())
  503. }
  504. }
  505. }
  506. if (u.Scheme == "https" || u.Scheme == "unixs") && cfg.ClientTLSInfo.Empty() {
  507. return nil, fmt.Errorf("TLS key/cert (--cert-file, --key-file) must be provided for client url %s with HTTPs scheme", u.String())
  508. }
  509. network := "tcp"
  510. addr := u.Host
  511. if u.Scheme == "unix" || u.Scheme == "unixs" {
  512. network = "unix"
  513. addr = u.Host + u.Path
  514. }
  515. sctx.network = network
  516. sctx.secure = u.Scheme == "https" || u.Scheme == "unixs"
  517. sctx.insecure = !sctx.secure
  518. if oldctx := sctxs[addr]; oldctx != nil {
  519. oldctx.secure = oldctx.secure || sctx.secure
  520. oldctx.insecure = oldctx.insecure || sctx.insecure
  521. continue
  522. }
  523. if sctx.l, err = net.Listen(network, addr); err != nil {
  524. return nil, err
  525. }
  526. // net.Listener will rewrite ipv4 0.0.0.0 to ipv6 [::], breaking
  527. // hosts that disable ipv6. So, use the address given by the user.
  528. sctx.addr = addr
  529. if fdLimit, fderr := runtimeutil.FDLimit(); fderr == nil {
  530. if fdLimit <= reservedInternalFDNum {
  531. if cfg.logger != nil {
  532. cfg.logger.Fatal(
  533. "file descriptor limit of etcd process is too low; please set higher",
  534. zap.Uint64("limit", fdLimit),
  535. zap.Int("recommended-limit", reservedInternalFDNum),
  536. )
  537. } else {
  538. plog.Fatalf("file descriptor limit[%d] of etcd process is too low, and should be set higher than %d to ensure internal usage", fdLimit, reservedInternalFDNum)
  539. }
  540. }
  541. sctx.l = transport.LimitListener(sctx.l, int(fdLimit-reservedInternalFDNum))
  542. }
  543. if network == "tcp" {
  544. if sctx.l, err = transport.NewKeepAliveListener(sctx.l, network, nil); err != nil {
  545. return nil, err
  546. }
  547. }
  548. defer func() {
  549. if err == nil {
  550. return
  551. }
  552. sctx.l.Close()
  553. if cfg.logger != nil {
  554. cfg.logger.Warn(
  555. "closing peer listener",
  556. zap.String("address", u.Host),
  557. zap.Error(err),
  558. )
  559. } else {
  560. plog.Info("stopping listening for client requests on ", u.Host)
  561. }
  562. }()
  563. for k := range cfg.UserHandlers {
  564. sctx.userHandlers[k] = cfg.UserHandlers[k]
  565. }
  566. sctx.serviceRegister = cfg.ServiceRegister
  567. if cfg.EnablePprof || cfg.Debug {
  568. sctx.registerPprof()
  569. }
  570. if cfg.Debug {
  571. sctx.registerTrace()
  572. }
  573. sctxs[addr] = sctx
  574. }
  575. return sctxs, nil
  576. }
  577. func (e *Etcd) serveClients() (err error) {
  578. if !e.cfg.ClientTLSInfo.Empty() {
  579. if e.cfg.logger != nil {
  580. e.cfg.logger.Info(
  581. "starting with client TLS",
  582. zap.String("tls-info", fmt.Sprintf("%+v", e.cfg.ClientTLSInfo)),
  583. zap.Strings("cipher-suites", e.cfg.CipherSuites),
  584. )
  585. } else {
  586. plog.Infof("ClientTLS: %s", e.cfg.ClientTLSInfo)
  587. }
  588. }
  589. // Start a client server goroutine for each listen address
  590. var h http.Handler
  591. if e.Config().EnableV2 {
  592. if len(e.Config().ExperimentalEnableV2V3) > 0 {
  593. srv := v2v3.NewServer(e.cfg.logger, v3client.New(e.Server), e.cfg.ExperimentalEnableV2V3)
  594. h = v2http.NewClientHandler(e.GetLogger(), srv, e.Server.Cfg.ReqTimeout())
  595. } else {
  596. h = v2http.NewClientHandler(e.GetLogger(), e.Server, e.Server.Cfg.ReqTimeout())
  597. }
  598. } else {
  599. mux := http.NewServeMux()
  600. etcdhttp.HandleBasic(mux, e.Server)
  601. h = mux
  602. }
  603. gopts := []grpc.ServerOption{}
  604. if e.cfg.GRPCKeepAliveMinTime > time.Duration(0) {
  605. gopts = append(gopts, grpc.KeepaliveEnforcementPolicy(keepalive.EnforcementPolicy{
  606. MinTime: e.cfg.GRPCKeepAliveMinTime,
  607. PermitWithoutStream: false,
  608. }))
  609. }
  610. if e.cfg.GRPCKeepAliveInterval > time.Duration(0) &&
  611. e.cfg.GRPCKeepAliveTimeout > time.Duration(0) {
  612. gopts = append(gopts, grpc.KeepaliveParams(keepalive.ServerParameters{
  613. Time: e.cfg.GRPCKeepAliveInterval,
  614. Timeout: e.cfg.GRPCKeepAliveTimeout,
  615. }))
  616. }
  617. // start client servers in a goroutine
  618. for _, sctx := range e.sctxs {
  619. go func(s *serveCtx) {
  620. e.errHandler(s.serve(e.Server, &e.cfg.ClientTLSInfo, h, e.errHandler, gopts...))
  621. }(sctx)
  622. }
  623. return nil
  624. }
  625. func (e *Etcd) serveMetrics() (err error) {
  626. if e.cfg.Metrics == "extensive" {
  627. grpc_prometheus.EnableHandlingTimeHistogram()
  628. }
  629. if len(e.cfg.ListenMetricsUrls) > 0 {
  630. metricsMux := http.NewServeMux()
  631. etcdhttp.HandleMetricsHealth(metricsMux, e.Server)
  632. for _, murl := range e.cfg.ListenMetricsUrls {
  633. tlsInfo := &e.cfg.ClientTLSInfo
  634. if murl.Scheme == "http" {
  635. tlsInfo = nil
  636. }
  637. ml, err := transport.NewListener(murl.Host, murl.Scheme, tlsInfo)
  638. if err != nil {
  639. return err
  640. }
  641. e.metricsListeners = append(e.metricsListeners, ml)
  642. go func(u url.URL, ln net.Listener) {
  643. if e.cfg.logger != nil {
  644. e.cfg.logger.Info(
  645. "serving metrics",
  646. zap.String("address", u.String()),
  647. )
  648. } else {
  649. plog.Info("listening for metrics on ", u.String())
  650. }
  651. e.errHandler(http.Serve(ln, metricsMux))
  652. }(murl, ml)
  653. }
  654. }
  655. return nil
  656. }
  657. func (e *Etcd) errHandler(err error) {
  658. select {
  659. case <-e.stopc:
  660. return
  661. default:
  662. }
  663. select {
  664. case <-e.stopc:
  665. case e.errc <- err:
  666. }
  667. }
  668. // GetLogger returns the logger.
  669. func (e *Etcd) GetLogger() *zap.Logger {
  670. e.cfg.loggerMu.RLock()
  671. l := e.cfg.logger
  672. e.cfg.loggerMu.RUnlock()
  673. return l
  674. }
  675. func parseCompactionRetention(mode, retention string) (ret time.Duration, err error) {
  676. h, err := strconv.Atoi(retention)
  677. if err == nil {
  678. switch mode {
  679. case CompactorModeRevision:
  680. ret = time.Duration(int64(h))
  681. case CompactorModePeriodic:
  682. ret = time.Duration(int64(h)) * time.Hour
  683. }
  684. } else {
  685. // periodic compaction
  686. ret, err = time.ParseDuration(retention)
  687. if err != nil {
  688. return 0, fmt.Errorf("error parsing CompactionRetention: %v", err)
  689. }
  690. }
  691. return ret, nil
  692. }