blob: 04ace6793a29c0f164dceb9e568b1d8eabb7b149 [file] [log] [blame]
// Copyright 2016 Istio Authors
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
syntax = "proto3";
// This package defines the Mixer API that the sidecar proxy uses to perform
// precondition checks, manage quotas, and report telemetry.
package istio.mixer.v1;
option go_package = "istio.io/api/mixer/v1";
option cc_generic_services = true;
import "gogoproto/gogo.proto";
import "google/protobuf/duration.proto";
import "google/rpc/status.proto";
import "mixer/v1/attributes.proto";
option (gogoproto.goproto_getters_all) = false;
option (gogoproto.equal_all) = false;
option (gogoproto.gostring_all) = false;
option cc_enable_arenas = true;
// Mixer provides three core features:
//
// - *Precondition Checking*. Enables callers to verify a number of preconditions
// before responding to an incoming request from a service consumer.
// Preconditions can include whether the service consumer is properly
// authenticated, is on the service’s whitelist, passes ACL checks, and more.
//
// - *Quota Management*. Enables services to allocate and free quota on a number
// of dimensions, Quotas are used as a relatively simple resource management tool
// to provide some fairness between service consumers when contending for limited
// resources. Rate limits are examples of quotas.
//
// - *Telemetry Reporting*. Enables services to report logging and monitoring.
// In the future, it will also enable tracing and billing streams intended for
// both the service operator as well as for service consumers.
service Mixer {
// Checks preconditions and allocate quota before performing an operation.
// The preconditions enforced depend on the set of supplied attributes and
// the active configuration.
rpc Check(CheckRequest) returns (CheckResponse) {}
// Reports telemetry, such as logs and metrics.
// The reported information depends on the set of supplied attributes and the
// active configuration.
rpc Report(ReportRequest) returns (ReportResponse) {}
}
// Used to get a thumbs-up/thumbs-down before performing an action.
message CheckRequest {
// parameters for a quota allocation
message QuotaParams {
// Amount of quota to allocate
int64 amount = 1;
// When true, supports returning less quota than what was requested.
bool best_effort = 2;
}
// The attributes to use for this request.
//
// Mixer's configuration determines how these attributes are used to
// establish the result returned in the response.
CompressedAttributes attributes = 1 [(gogoproto.nullable) = false];
// The number of words in the global dictionary, used with to populate the attributes.
// This value is used as a quick way to determine whether the client is using a dictionary that
// the server understands.
uint32 global_word_count = 2;
// Used for deduplicating `Check` calls in the case of failed RPCs and retries. This should be a UUID
// per call, where the same UUID is used for retries of the same call.
string deduplication_id = 3;
// The individual quotas to allocate
map<string, QuotaParams> quotas = 4 [(gogoproto.nullable) = false];
}
// The response generated by the Check method.
message CheckResponse {
// Expresses the result of a precondition check.
message PreconditionResult {
reserved 4;
// A status code of OK indicates all preconditions were satisfied. Any other code indicates not
// all preconditions were satisfied and details describe why.
google.rpc.Status status = 1 [(gogoproto.nullable) = false];
// The amount of time for which this result can be considered valid.
google.protobuf.Duration valid_duration = 2 [(gogoproto.nullable) = false, (gogoproto.stdduration) = true];
// The number of uses for which this result can be considered valid.
int32 valid_use_count = 3;
// The total set of attributes that were used in producing the result
// along with matching conditions.
ReferencedAttributes referenced_attributes = 5;
// An optional routing directive, used to manipulate the traffic metadata
// whenever all preconditions are satisfied.
RouteDirective route_directive = 6;
}
// Expresses the result of a quota allocation.
message QuotaResult {
// The amount of time for which this result can be considered valid.
google.protobuf.Duration valid_duration = 1 [(gogoproto.nullable) = false, (gogoproto.stdduration) = true];
// The amount of granted quota. When `QuotaParams.best_effort` is true, this will be >= 0.
// If `QuotaParams.best_effort` is false, this will be either 0 or >= `QuotaParams.amount`.
int64 granted_amount = 2;
// The total set of attributes that were used in producing the result
// along with matching conditions.
ReferencedAttributes referenced_attributes = 5 [(gogoproto.nullable) = false];
}
// The precondition check results.
PreconditionResult precondition = 2 [(gogoproto.nullable) = false];
// The resulting quota, one entry per requested quota.
map<string, QuotaResult> quotas = 3 [(gogoproto.nullable) = false];
}
// Describes the attributes that were used to determine the response.
// This can be used to construct a response cache.
message ReferencedAttributes {
// How an attribute's value was matched
enum Condition {
CONDITION_UNSPECIFIED = 0; // should not occur
ABSENCE = 1; // match when attribute doesn't exist
EXACT = 2; // match when attribute value is an exact byte-for-byte match
REGEX = 3; // match when attribute value matches the included regex
}
// Describes a single attribute match.
message AttributeMatch {
// The name of the attribute. This is a dictionary index encoded in a manner identical
// to all strings in the [CompressedAttributes][istio.mixer.v1.CompressedAttributes] message.
sint32 name = 1;
// The kind of match against the attribute value.
Condition condition = 2;
// If a REGEX condition is provided for a STRING_MAP attribute,
// clients should use the regex value to match against map keys.
string regex = 3;
// A key in a STRING_MAP. When multiple keys from a STRING_MAP
// attribute were referenced, there will be multiple AttributeMatch
// messages with different map_key values. Values for map_key SHOULD
// be ignored for attributes that are not STRING_MAP.
//
// Indices for the keys are used (taken either from the
// message dictionary from the `words` field or the global dictionary).
//
// If no map_key value is provided for a STRING_MAP attribute, the
// entire STRING_MAP will be used.
sint32 map_key = 4;
}
// The message-level dictionary. Refer to [CompressedAttributes][istio.mixer.v1.CompressedAttributes] for information
// on using dictionaries.
repeated string words = 1;
// Describes a set of attributes.
repeated AttributeMatch attribute_matches = 2 [(gogoproto.nullable) = false];
}
// Operation on HTTP headers to replace, append, or remove a header. Header
// names are normalized to lower-case with dashes, e.g. "x-request-id".
// Pseudo-headers ":path", ":authority", and ":method" are supported to modify
// the request headers.
message HeaderOperation {
// Operation type.
enum Operation {
REPLACE = 0; // replaces the header with the given name
REMOVE = 1; // removes the header with the given name (the value is ignored)
APPEND = 2; // appends the value to the header value, or sets it if not present
}
// Header name.
string name = 1;
// Header value.
string value = 2;
// Header operation.
Operation operation = 3;
}
// Expresses the routing manipulation actions to be performed on behalf of
// Mixer in response to a precondition check.
message RouteDirective {
// Operations on the request headers.
repeated HeaderOperation request_header_operations = 1 [(gogoproto.nullable) = false];
// Operations on the response headers.
repeated HeaderOperation response_header_operations = 2 [(gogoproto.nullable) = false];
// If set, enables a direct response without proxying the request to the routing
// destination. Required to be a value in the 2xx or 3xx range.
uint32 direct_response_code = 3;
// Supplies the response body for the direct response.
// If this setting is omitted, no body is included in the generated response.
string direct_response_body = 4;
}
// Used to report telemetry after performing one or more actions.
message ReportRequest {
// next value: 5
// Used to signal how the sets of compressed attributes should be reconstitued server-side.
enum RepeatedAttributesSemantics {
// Use delta encoding between sets of compressed attributes to reduce the overall on-wire
// request size. Each individual set of attributes is used to modify the previous set.
// NOTE: There is no way with this encoding to specify attribute value deletion. This
// option should be used with extreme caution.
DELTA_ENCODING = 0;
// Treat each set of compressed attributes as complete - independent from other sets
// in this request. This will result in on-wire duplication of attributes and values, but
// will allow for proper accounting of absent values in overall encoding.
INDEPENDENT_ENCODING = 1;
}
// The attributes to use for this request.
//
// Each `Attributes` element represents the state of a single action. Multiple actions
// can be provided in a single message in order to improve communication efficiency. The
// client can accumulate a set of actions and send them all in one single message.
repeated CompressedAttributes attributes = 1 [(gogoproto.nullable) = false];
// Indicates how to decode the attributes sets in this request.
RepeatedAttributesSemantics repeated_attributes_semantics = 4;
// The default message-level dictionary for all the attributes.
// Individual attribute messages can have their own dictionaries, but if they don't
// then this set of words, if it is provided, is used instead.
//
// This makes it possible to share the same dictionary for all attributes in this
// request, which can substantially reduce the overall request size.
repeated string default_words = 2;
// The number of words in the global dictionary.
// To detect global dictionary out of sync between client and server.
uint32 global_word_count = 3;
}
// Used to carry responses to telemetry reports
message ReportResponse {
}