突然の災害に備える Envoy Lua filter

admin:
  address:
    socket_address: { address: 0.0.0.0, port_value: 9901 }

static_resources:
  listeners:
  - name: listener_0
    address:
      socket_address: { address: 0.0.0.0, port_value: 9902 }
    filter_chains:
    - filters:
      - name: envoy.filters.network.http_connection_manager
        typed_config:
          "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
          stat_prefix: http_routes
          codec_type: AUTO
          http_filters:
          - name: envoy.lua
            typed_config:
              "@type": type.googleapis.com/envoy.extensions.filters.http.lua.v3.Lua
              inline_code: |
                function envoy_on_request(request_handle)
                  local body = ""
                  local content_type = request_handle:headers():get("content-type")
                  if content_type:find("application/json") ~= nil then
                    local body_obj = request_handle:body()
                    local body_bytes = body_obj:getBytes(0, body_obj:length())
                    body = tostring(body_bytes)
                  end
                  if string.find(body, "1234") then
                    local meta = request_handle:streamInfo():dynamicMetadata()
                    meta:set("envoy.filters.http.lua", "group", "x2")
                    request_handle:headers():add("xxxx", "9999")
                  end
                end                
          - name: envoy.filters.http.router
            typed_config:
              "@type": type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
          route_config:
            name: route_1
            virtual_hosts:
            - name: svc_x
              domains: ["*"]
              routes:
              # sepcial route
              - match:
                  prefix: "/"
                  dynamic_metadata:
                  - filter: "envoy.filters.http.lua"
                    path:
                    - key: "group"
                    value:
                      string_match:
                        exact: "x2"
                route: { cluster: svc_secret }
              # default route
              - match: { prefix: "/" }
                direct_response:
                  body:
                    inline_string: '(default response)'
                  status: 200
  clusters:
  - name: svc_secret
    type: STRICT_DNS
    lb_policy: ROUND_ROBIN
    load_assignment:
      cluster_name: svc_secret
      endpoints:
      - lb_endpoints:
        - endpoint:
            address:
              socket_address:
                address: "nginx-2"
                port_value: 80

services:
  envoy-2:
    image: envoyproxy/envoy:v1.24-latest
    volumes:
      - type: bind
        source: "./envoy.yaml"
        target: "/etc/envoy/envoy.yaml"
    ports:
      - "127.0.0.1:19902:9902"
  nginx-2:
    image: nginx

$ curl -v http://localhost:19902/ \
  -H 'Content-Type: application/json; charset=utf-8' \
  --data-binary @- << EOF
  {
    "field1": "1234",
    "field2": {
      "foo": "bar"
    }
  }
EOF

          access_log:
          - name: envoy.access_loggers.file
            typed_config:
              "@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
              path: "/dev/stdout"

$ echo "GET http://nginx-2:80/" \
  | vegeta attack -duration=10s -rate=1000

Requests      [total, rate, throughput]         10000, 999.96, 468.46
Duration      [total, attack, wait]             21.026s, 10s, 11.026s
Latencies     [min, mean, 50, 90, 95, 99, max]  12.141ms, 3.17s, 2.528s, 8.732s, 10.092s, 15.254s, 15.995s
Bytes In      [total, mean]                     88650, 8.87
Bytes Out     [total, mean]                     0, 0.00
Success       [ratio]                           98.50%
Status Codes  [code:count]                      0:150  200:9850  
Error Set:
Get "http://nginx-2:80/": read tcp 172.19.0.6:37159->172.19.0.4:80: read: connection reset by peer
  ...

$ echo "POST http://envoy-2:9902/
Content-Type: application/json; charset=utf-8
@./test.json" \
  | vegeta attack -duration=10s -rate=1000

Requests      [total, rate, throughput]         9093, 909.30, 373.31
Duration      [total, attack, wait]             17.398s, 10s, 7.398s
Latencies     [min, mean, 50, 90, 95, 99, max]  23.004ms, 5.06s, 4.903s, 8.257s, 8.636s, 9.186s, 10.776s
Bytes In      [total, mean]                     268893, 29.57
Bytes Out     [total, mean]                     4810197, 529.00
Success       [ratio]                           71.43%
Status Codes  [code:count]                      200:6495  503:2598  
Error Set:
503 Service Unavailable