pomerium/config
Caleb Doxsey 5ac7ae9c26
config: add circuit breaker thresholds (#5650)
## Summary
Add a new `circuit_breaker_thresholds` option:

```yaml
circuit_breaker_thresholds:
  max_connections: 1
  max_pending_requests: 2
  max_requests: 3
  max_retries: 4
  max_connection_pools: 5
```

This option can be set at the global level or at the route level. Each
threshold is optional and when not set a default will be used. For
internal clusters we will disable the circuit breaker. For normal routes
we will use the envoy defaults.

## Related issues
-
[ENG-2310](https://linear.app/pomerium/issue/ENG-2310/add-circuit-breaker-settings-per-route)

## Checklist
- [x] reference any related issues
- [x] updated unit tests
- [x] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [x] ready for review
2025-06-16 09:38:39 -06:00
..
envoyconfig config: add circuit breaker thresholds (#5650) 2025-06-16 09:38:39 -06:00
otelconfig Refactor trace config to match supported otel options (#5447) 2025-01-30 11:59:19 -05:00
testdata
autocert.go core/ci: update linting (#4844) 2023-12-14 09:07:54 -08:00
autocert_test.go upgrade to go v1.24 (#5562) 2025-04-02 15:53:09 -06:00
bearer_token_format.go authorize: support authenticating with idp tokens (#5484) 2025-02-18 13:02:06 -07:00
circuit_breaker_thresholds.go config: add circuit breaker thresholds (#5650) 2025-06-16 09:38:39 -06:00
codec_type.go HTTP/3 Support (#5349) 2024-11-19 08:48:30 -07:00
codec_type_test.go
config.go config: minor cleanup in GenerateCatchAllCertificate (#5397) 2024-12-18 13:21:48 -08:00
config_source.go logging: standardize on hyphens in attribute names (#5577) 2025-04-22 10:57:19 -07:00
config_source_test.go fileutil: reimplement file watcher (#5498) 2025-02-26 09:21:06 -07:00
config_test.go upgrade to go v1.24 (#5562) 2025-04-02 15:53:09 -06:00
constants.go config: add circuit breaker thresholds (#5650) 2025-06-16 09:38:39 -06:00
custom.go config: add circuit breaker thresholds (#5650) 2025-06-16 09:38:39 -06:00
custom_test.go core/lint: upgrade golangci-lint, replace interface{} with any (#5099) 2024-05-02 14:33:52 -06:00
doc.go
from.go core/config: add support for stripping the port for matching routes (#5085) 2024-04-26 08:24:46 -06:00
from_test.go change Policy.Matches to accept a URL pointer (#5360) 2024-11-07 14:55:44 -05:00
helpers.go core/redis: remove redis (#4768) 2023-11-28 13:14:36 -07:00
helpers_test.go
http.go core/logging: change log.Error function (#5251) 2024-09-05 15:42:46 -06:00
http_test.go core/lint: upgrade golangci-lint, replace interface{} with any (#5099) 2024-05-02 14:33:52 -06:00
identity.go authorize: support authenticating with idp tokens (#5484) 2025-02-18 13:02:06 -07:00
layered.go core/logging: change log.Error function (#5251) 2024-09-05 15:42:46 -06:00
layered_test.go core/lint: upgrade golangci-lint, replace interface{} with any (#5099) 2024-05-02 14:33:52 -06:00
log.go New tracing system (#5388) 2025-01-21 13:26:32 -05:00
log_level.go config: validate log levels (#4367) 2023-07-17 16:41:48 -06:00
metrics.go cleanup logs (#5571) 2025-04-14 08:20:10 -06:00
metrics_test.go core/lint: upgrade golangci-lint, replace interface{} with any (#5099) 2024-05-02 14:33:52 -06:00
mtls.go Core-Zero Import (#5288) 2024-10-09 18:51:56 -04:00
mtls_test.go add mTLS UserPrincipalName SAN match (#5177) 2024-07-26 10:23:19 -07:00
options.go config: add circuit breaker thresholds (#5650) 2025-06-16 09:38:39 -06:00
options_check.go Refactor trace config to match supported otel options (#5447) 2025-01-30 11:59:19 -05:00
options_test.go config: add circuit breaker thresholds (#5650) 2025-06-16 09:38:39 -06:00
policy.go config: add circuit breaker thresholds (#5650) 2025-06-16 09:38:39 -06:00
policy_ppl.go ppl: fix empty/no-op allow block added in some cases to converted PPL policies (#5289) 2024-09-16 18:52:54 -04:00
policy_ppl_test.go policy: support emails from directory user (#5504) 2025-02-27 13:39:28 -07:00
policy_test.go config: support weighted URLs in To field (#5624) 2025-05-20 12:15:10 -06:00
runtime_flags.go mcp: add global runtime flag (#5604) 2025-05-02 16:33:42 -04:00
session.go core: more metrics (#5629) 2025-05-29 09:34:41 -06:00
session_test.go only support loading idp tokens via bearer tokens (#5545) 2025-03-26 09:47:40 -06:00
validate.go config: add cookie_same_site option (#4148) 2023-05-03 14:36:42 -06:00