110902ad4b
Add HealthService with Liveness (no-op) and Readiness (DB+Redis ping
with per-component timeout) checks. Expose three endpoints:
- /healthz : new liveness endpoint, zero-dependency, always 200
- /ready : new readiness endpoint, returns 503 with details on dep
failure; suitable for K8s readinessProbe and load balancers
- /health : preserved for backward compatibility, equivalent to
/healthz
Switch primary docker-compose healthcheck to /ready so the container
is only marked healthy once DB+Redis are reachable. Standalone/dev/
local compose files keep /health to avoid disrupting existing setups.
Tests: unit tests cover liveness, readiness with both deps healthy,
each dep failing independently, and per-component timeout enforcement.
106 lines
3.7 KiB
Go
106 lines
3.7 KiB
Go
// Package server provides HTTP server initialization and configuration.
|
||
package server
|
||
|
||
import (
|
||
"log"
|
||
"net/http"
|
||
"time"
|
||
|
||
"github.com/Wei-Shaw/sub2api/internal/config"
|
||
"github.com/Wei-Shaw/sub2api/internal/handler"
|
||
middleware2 "github.com/Wei-Shaw/sub2api/internal/server/middleware"
|
||
"github.com/Wei-Shaw/sub2api/internal/service"
|
||
|
||
"github.com/gin-gonic/gin"
|
||
"github.com/google/wire"
|
||
"github.com/redis/go-redis/v9"
|
||
"golang.org/x/net/http2"
|
||
"golang.org/x/net/http2/h2c"
|
||
)
|
||
|
||
// ProviderSet 提供服务器层的依赖
|
||
var ProviderSet = wire.NewSet(
|
||
ProvideRouter,
|
||
ProvideHTTPServer,
|
||
)
|
||
|
||
// ProvideRouter 提供路由器
|
||
func ProvideRouter(
|
||
cfg *config.Config,
|
||
handlers *handler.Handlers,
|
||
jwtAuth middleware2.JWTAuthMiddleware,
|
||
adminAuth middleware2.AdminAuthMiddleware,
|
||
apiKeyAuth middleware2.APIKeyAuthMiddleware,
|
||
apiKeyService *service.APIKeyService,
|
||
subscriptionService *service.SubscriptionService,
|
||
opsService *service.OpsService,
|
||
settingService *service.SettingService,
|
||
healthService *service.HealthService,
|
||
redisClient *redis.Client,
|
||
) *gin.Engine {
|
||
if cfg.Server.Mode == "release" {
|
||
gin.SetMode(gin.ReleaseMode)
|
||
}
|
||
|
||
r := gin.New()
|
||
r.Use(middleware2.Recovery())
|
||
if len(cfg.Server.TrustedProxies) > 0 {
|
||
if err := r.SetTrustedProxies(cfg.Server.TrustedProxies); err != nil {
|
||
log.Printf("Failed to set trusted proxies: %v", err)
|
||
}
|
||
} else {
|
||
if err := r.SetTrustedProxies(nil); err != nil {
|
||
log.Printf("Failed to disable trusted proxies: %v", err)
|
||
}
|
||
if cfg.Server.Mode == "release" {
|
||
log.Printf("Warning: server.trusted_proxies is empty in release mode; client IP trust chain is disabled")
|
||
}
|
||
}
|
||
|
||
return SetupRouter(r, handlers, jwtAuth, adminAuth, apiKeyAuth, apiKeyService, subscriptionService, opsService, settingService, healthService, cfg, redisClient)
|
||
}
|
||
|
||
// ProvideHTTPServer 提供 HTTP 服务器
|
||
func ProvideHTTPServer(cfg *config.Config, router *gin.Engine) *http.Server {
|
||
httpHandler := http.Handler(router)
|
||
|
||
globalMaxSize := cfg.Server.MaxRequestBodySize
|
||
if globalMaxSize <= 0 {
|
||
globalMaxSize = cfg.Gateway.MaxBodySize
|
||
}
|
||
if globalMaxSize > 0 {
|
||
httpHandler = http.MaxBytesHandler(httpHandler, globalMaxSize)
|
||
log.Printf("Global max request body size: %d bytes (%.2f MB)", globalMaxSize, float64(globalMaxSize)/(1<<20))
|
||
}
|
||
|
||
// 根据配置决定是否启用 H2C
|
||
if cfg.Server.H2C.Enabled {
|
||
h2cConfig := cfg.Server.H2C
|
||
httpHandler = h2c.NewHandler(router, &http2.Server{
|
||
MaxConcurrentStreams: h2cConfig.MaxConcurrentStreams,
|
||
IdleTimeout: time.Duration(h2cConfig.IdleTimeout) * time.Second,
|
||
MaxReadFrameSize: uint32(h2cConfig.MaxReadFrameSize),
|
||
MaxUploadBufferPerConnection: int32(h2cConfig.MaxUploadBufferPerConnection),
|
||
MaxUploadBufferPerStream: int32(h2cConfig.MaxUploadBufferPerStream),
|
||
})
|
||
log.Printf("HTTP/2 Cleartext (h2c) enabled: max_concurrent_streams=%d, idle_timeout=%ds, max_read_frame_size=%d, max_upload_buffer_per_connection=%d, max_upload_buffer_per_stream=%d",
|
||
h2cConfig.MaxConcurrentStreams,
|
||
h2cConfig.IdleTimeout,
|
||
h2cConfig.MaxReadFrameSize,
|
||
h2cConfig.MaxUploadBufferPerConnection,
|
||
h2cConfig.MaxUploadBufferPerStream,
|
||
)
|
||
}
|
||
|
||
return &http.Server{
|
||
Addr: cfg.Server.Address(),
|
||
Handler: httpHandler,
|
||
// ReadHeaderTimeout: 读取请求头的超时时间，防止慢速请求头攻击
|
||
ReadHeaderTimeout: time.Duration(cfg.Server.ReadHeaderTimeout) * time.Second,
|
||
// IdleTimeout: 空闲连接超时时间，释放不活跃的连接资源
|
||
IdleTimeout: time.Duration(cfg.Server.IdleTimeout) * time.Second,
|
||
// 注意：不设置 WriteTimeout，因为流式响应可能持续十几分钟
|
||
// 不设置 ReadTimeout，因为大请求体可能需要较长时间读取
|
||
}
|
||
}
|