pomerium/internal/testutil
Kenneth Jenkins c7c2087483
envoy: enable TCP keepalive for internal clusters (#4902)
In split service mode, and during periods of inactivity, the gRPC
connections to the databroker may fall idle. Some network firewalls may
eventually time out an idle TCP connection and even start dropping
subsequent packets once connection traffic resumes. Combined with Linux
default TCP retransmission settings, this could cause a broken
connection to persist for over 15 minutes.

In an attempt to avoid this scenario, enable TCP keepalive for outbound
gRPC connections, matching the Go standard library default settings for
time & interval: 15 seconds for both. (The probe count does not appear
to be set, so it will remain at the OS default.)

Add a test case exercising the BuildClusters() method with the default
configuration options, comparing the results with a reference "golden"
file in the testdata directory. Also add an '-update' flag to make it
easier to update the reference golden when needed:

  go test ./config/envoyconfig -update
2024-01-11 09:12:45 -08:00
..
gcs.go autocert: add support for storage in gcs (#3794) 2022-12-09 08:22:32 -07:00
log.go chore(deps): bump github.com/spf13/viper from 1.16.0 to 1.18.2 (#4861) 2023-12-27 16:16:38 -07:00
minio.go autocert: add support for storage in gcs (#3794) 2022-12-09 08:22:32 -07:00
postgres.go postgres: upgrade to pgx v5 (#3826) 2022-12-19 12:47:35 -07:00
testutil.go envoy: enable TCP keepalive for internal clusters (#4902) 2024-01-11 09:12:45 -08:00