-
Notifications
You must be signed in to change notification settings - Fork 4.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Envoy doesn't call ExtAuthz filter for some calls #32058
Comments
Envoy encountered an error querying the authz server. I expect looking at the stats for the |
Thanks @zuercher for your help. Please find TRACE logs below, we didn't get any meaningful insight, would really appreciate your help here, Thanks logs below are from latest to oldest
|
This issue has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in the next 7 days unless it is tagged "help wanted" or "no stalebot" or other activity occurs. Thank you for your contributions. |
This issue has been automatically closed because it has not had activity in the last 37 days. If this issue is still valid, please ping a maintainer and ask them to label it as "help wanted" or "no stalebot". Thank you for your contributions. |
@zuercher This issue is blocking us, appreciate any help on this please. Not sure if this information helps,
Log
stats
|
@zuercher: is there anyway i can reopen this issue. please help. thanks |
Look at the metrics for the ext authz cluster. |
Hello @zuercher, we are experiencing more such failures in load scenario, wondering if there is any way in Envoy to retry the call? (we are using ExtAuthz, configuration above) |
Hello @alyssawilk, @zuercher, any ideas here? I am looking for how can i retry in case of such failures, appreciate any help. thanks |
Description:
We use ExtAuthz type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz filter.
Many routes are configured in envoy config and want all requests to first pass through ExtAuthz filter for authentication.
When there is a load on Envoy say more than 15 RPS, we observed that for couple of requests Envoy doesn't call the ExtAuthz filter and just returns 503. looks like we are missing some configuration.
Below is the trimmed version of our envoy config and logs.
Envoy Configuration
Logs
Failures are random.
We tried playing around with below setting but no success.
max_requests_per_connection: 1
Happy to share more logs if required. Please help. thanks
The text was updated successfully, but these errors were encountered: