diff --git a/content/en/docs/reference/commands/install-cni/index.html b/content/en/docs/reference/commands/install-cni/index.html index a9d4b9bc8a..479f3620c2 100644 --- a/content/en/docs/reference/commands/install-cni/index.html +++ b/content/en/docs/reference/commands/install-cni/index.html @@ -804,6 +804,12 @@ These environment variables affect the behavior of the install-cni If true, Istio will enable the Dual Stack feature. +ISTIO_ENABLE_CONTROLLER_QUEUE_METRICS +Boolean +false +If enabled, publishes metrics for queue depth, latency and processing times. + + ISTIO_ENABLE_OPTIMIZED_SERVICE_PUSH Boolean true diff --git a/content/en/docs/reference/commands/istioctl/index.html b/content/en/docs/reference/commands/istioctl/index.html index 1686694093..50f0515413 100644 --- a/content/en/docs/reference/commands/istioctl/index.html +++ b/content/en/docs/reference/commands/istioctl/index.html @@ -7092,6 +7092,12 @@ These environment variables affect the behavior of the istioctl com If true, Istio will enable the Dual Stack feature. +ISTIO_ENABLE_CONTROLLER_QUEUE_METRICS +Boolean +false +If enabled, publishes metrics for queue depth, latency and processing times. + + ISTIO_ENABLE_HTTP2_PROBING Boolean true @@ -7754,6 +7760,9 @@ These environment variables affect the behavior of the istioctl com pilot_total_xds_rejectsSumTotal number of XDS responses from pilot rejected by proxy. pilot_virt_servicesLastValueTotal virtual services known to pilot. pilot_vservice_dup_domainLastValueVirtual services with dup domains. +pilot_worker_queue_depthLastValueDepth of the controller queues +pilot_worker_queue_durationDistributionTime taken to process an item +pilot_worker_queue_latencyDistributionLatency before the item is processed pilot_xdsLastValueNumber of endpoints connected to this pilot using XDS. pilot_xds_cds_rejectLastValuePilot rejected CDS configs. pilot_xds_config_size_bytesDistributionDistribution of configuration sizes pushed to clients diff --git a/content/en/docs/reference/commands/operator/index.html b/content/en/docs/reference/commands/operator/index.html index 73c32b153b..a6fd198e8c 100644 --- a/content/en/docs/reference/commands/operator/index.html +++ b/content/en/docs/reference/commands/operator/index.html @@ -503,6 +503,12 @@ These environment variables affect the behavior of the operator com If true, Istio will enable the Dual Stack feature. +ISTIO_ENABLE_CONTROLLER_QUEUE_METRICS +Boolean +false +If enabled, publishes metrics for queue depth, latency and processing times. + + ISTIO_ENABLE_HTTP2_PROBING Boolean true @@ -1165,6 +1171,9 @@ These environment variables affect the behavior of the operator com pilot_total_xds_rejectsSumTotal number of XDS responses from pilot rejected by proxy. pilot_virt_servicesLastValueTotal virtual services known to pilot. pilot_vservice_dup_domainLastValueVirtual services with dup domains. +pilot_worker_queue_depthLastValueDepth of the controller queues +pilot_worker_queue_durationDistributionTime taken to process an item +pilot_worker_queue_latencyDistributionLatency before the item is processed pilot_xdsLastValueNumber of endpoints connected to this pilot using XDS. pilot_xds_cds_rejectLastValuePilot rejected CDS configs. pilot_xds_config_size_bytesDistributionDistribution of configuration sizes pushed to clients diff --git a/content/en/docs/reference/commands/pilot-agent/index.html b/content/en/docs/reference/commands/pilot-agent/index.html index 350e49cce7..9d48bebc40 100644 --- a/content/en/docs/reference/commands/pilot-agent/index.html +++ b/content/en/docs/reference/commands/pilot-agent/index.html @@ -500,17 +500,17 @@ to enable it. You can execute the following once:

--drop-invalid -Enable invalid drop in the iptables rules +Enable invalid drop in the iptables rules. --dry-run -n -Do not call any external dependencies like iptables +Do not call any external dependencies like iptables. --envoy-port <string> -p -Specify the envoy port to which redirect all TCP traffic (default $ENVOY_PORT = 15001) (default ``) +Specify the envoy port to which redirect all TCP traffic (default $ENVOY_PORT = 15001). (default ``) --host-nsenter-exec @@ -520,17 +520,17 @@ to enable it. You can execute the following once:

--inbound-capture-port <string> -z -Port to which all inbound TCP traffic to the pod/VM should be redirected to (default $INBOUND_CAPTURE_PORT = 15006) (default ``) +Port to which all inbound TCP traffic to the pod/VM should be redirected to (default $INBOUND_CAPTURE_PORT = 15006). (default ``) --inbound-tunnel-port <string> -e -Specify the istio tunnel port for inbound tcp traffic (default $INBOUND_TUNNEL_PORT = 15008) (default ``) +Specify the istio tunnel port for inbound tcp traffic (default $INBOUND_TUNNEL_PORT = 15008). (default ``) --iptables-probe-port <string> -set listen port for failure detection (default `15002`) +Set listen port for failure detection. (default `15002`) --iptables-trace-logging @@ -540,17 +540,17 @@ to enable it. You can execute the following once:

--istio-exclude-interfaces <string> -c -Comma separated list of NIC (optional). Neither inbound nor outbound traffic will be captured (default ``) +Comma separated list of NIC (optional). Neither inbound nor outbound traffic will be captured. (default ``) --istio-inbound-interception-mode <string> -m -The mode used to redirect inbound connections to Envoy, either "REDIRECT" or "TPROXY" (default ``) +The mode used to redirect inbound connections to Envoy, either "REDIRECT" or "TPROXY". (default ``) --istio-inbound-ports <string> -b -Comma separated list of inbound ports for which traffic is to be redirected to Envoy (optional). The wildcard character "*" can be used to configure redirection for all ports. An empty list will disable (default ``) +Comma separated list of inbound ports for which traffic is to be redirected to Envoy (optional). The wildcard character "*" can be used to configure redirection for all ports. An empty list will disable. (default ``) --istio-inbound-tproxy-mark <string> @@ -565,32 +565,32 @@ to enable it. You can execute the following once:

--istio-local-exclude-ports <string> -d -Comma separated list of inbound ports to be excluded from redirection to Envoy (optional). Only applies when all inbound traffic (i.e. "*") is being redirected (default to $ISTIO_LOCAL_EXCLUDE_PORTS) (default ``) +Comma separated list of inbound ports to be excluded from redirection to Envoy (optional). Only applies when all inbound traffic (i.e. "*") is being redirected (default to $ISTIO_LOCAL_EXCLUDE_PORTS). (default ``) --istio-local-outbound-ports-exclude <string> -o -Comma separated list of outbound ports to be excluded from redirection to Envoy (default ``) +Comma separated list of outbound ports to be excluded from redirection to Envoy. (default ``) --istio-outbound-ports <string> -q -Comma separated list of outbound ports to be explicitly included for redirection to Envoy (default ``) +Comma separated list of outbound ports to be explicitly included for redirection to Envoy. (default ``) --istio-service-cidr <string> -i -Comma separated list of IP ranges in CIDR form to redirect to envoy (optional). The wildcard character "*" can be used to redirect all outbound traffic. An empty list will disable all outbound (default ``) +Comma separated list of IP ranges in CIDR form to redirect to envoy (optional). The wildcard character "*" can be used to redirect all outbound traffic. An empty list will disable all outbound. (default ``) --istio-service-exclude-cidr <string> -x -Comma separated list of IP ranges in CIDR form to be excluded from redirection. Only applies when all outbound traffic (i.e. "*") is being redirected (default to $ISTIO_SERVICE_EXCLUDE_CIDR) (default ``) +Comma separated list of IP ranges in CIDR form to be excluded from redirection. Only applies when all outbound traffic (i.e. "*") is being redirected (default to $ISTIO_SERVICE_EXCLUDE_CIDR). (default ``) --kube-virt-interfaces <string> -k -Comma separated list of virtual interfaces whose inbound traffic (from VM) will be treated as outbound (default ``) +Comma separated list of virtual interfaces whose inbound traffic (from VM) will be treated as outbound. (default ``) --log_as_json @@ -645,37 +645,37 @@ to enable it. You can execute the following once:

--probe-timeout <duration> -failure detection timeout (default `5s`) +Failure detection timeout. (default `5s`) --proxy-gid <string> -g -Specify the GID of the user for which the redirection is not applied. (same default value as -u param) (default ``) +Specify the GID of the user for which the redirection is not applied (same default value as -u param). (default ``) --proxy-uid <string> -u -Specify the UID of the user for which the redirection is not applied. Typically, this is the UID of the proxy container (default ``) +Specify the UID of the user for which the redirection is not applied. Typically, this is the UID of the proxy container. (default ``) --redirect-dns -Enable capture of dns traffic by istio-agent +Enable capture of dns traffic by istio-agent. --restore-format -f -Print iptables rules in iptables-restore interpretable format +Print iptables rules in iptables-restore interpretable format. --run-validation -Validate iptables +Validate iptables. --skip-rule-apply -Skip iptables apply +Skip iptables apply. --vklog <Level> @@ -1352,6 +1352,12 @@ These environment variables affect the behavior of the pilot-agent If true, Istio will enable the Dual Stack feature. +ISTIO_ENABLE_CONTROLLER_QUEUE_METRICS +Boolean +false +If enabled, publishes metrics for queue depth, latency and processing times. + + ISTIO_ENABLE_HTTP2_PROBING Boolean true @@ -2202,6 +2208,9 @@ Only applies when traffic from all groups (i.e. "*") is being redirected pilot_total_xds_rejectsSumTotal number of XDS responses from pilot rejected by proxy. pilot_virt_servicesLastValueTotal virtual services known to pilot. pilot_vservice_dup_domainLastValueVirtual services with dup domains. +pilot_worker_queue_depthLastValueDepth of the controller queues +pilot_worker_queue_durationDistributionTime taken to process an item +pilot_worker_queue_latencyDistributionLatency before the item is processed pilot_xdsLastValueNumber of endpoints connected to this pilot using XDS. pilot_xds_cds_rejectLastValuePilot rejected CDS configs. pilot_xds_config_size_bytesDistributionDistribution of configuration sizes pushed to clients diff --git a/content/en/docs/reference/commands/pilot-discovery/index.html b/content/en/docs/reference/commands/pilot-discovery/index.html index 346f681b22..602b3d799d 100644 --- a/content/en/docs/reference/commands/pilot-discovery/index.html +++ b/content/en/docs/reference/commands/pilot-discovery/index.html @@ -671,6 +671,12 @@ These environment variables affect the behavior of the pilot-discoveryIf true, Istio will enable the Dual Stack feature. +ISTIO_ENABLE_CONTROLLER_QUEUE_METRICS +Boolean +false +If enabled, publishes metrics for queue depth, latency and processing times. + + ISTIO_ENABLE_HTTP2_PROBING Boolean true @@ -1394,6 +1400,9 @@ These environment variables affect the behavior of the pilot-discoverypilot_total_xds_rejectsSumTotal number of XDS responses from pilot rejected by proxy. pilot_virt_servicesLastValueTotal virtual services known to pilot. pilot_vservice_dup_domainLastValueVirtual services with dup domains. +pilot_worker_queue_depthLastValueDepth of the controller queues +pilot_worker_queue_durationDistributionTime taken to process an item +pilot_worker_queue_latencyDistributionLatency before the item is processed pilot_xdsLastValueNumber of endpoints connected to this pilot using XDS. pilot_xds_cds_rejectLastValuePilot rejected CDS configs. pilot_xds_config_size_bytesDistributionDistribution of configuration sizes pushed to clients diff --git a/content/zh/docs/reference/commands/install-cni/index.html b/content/zh/docs/reference/commands/install-cni/index.html index a9d4b9bc8a..479f3620c2 100644 --- a/content/zh/docs/reference/commands/install-cni/index.html +++ b/content/zh/docs/reference/commands/install-cni/index.html @@ -804,6 +804,12 @@ These environment variables affect the behavior of the install-cni If true, Istio will enable the Dual Stack feature. +ISTIO_ENABLE_CONTROLLER_QUEUE_METRICS +Boolean +false +If enabled, publishes metrics for queue depth, latency and processing times. + + ISTIO_ENABLE_OPTIMIZED_SERVICE_PUSH Boolean true diff --git a/content/zh/docs/reference/commands/istioctl/index.html b/content/zh/docs/reference/commands/istioctl/index.html index 1686694093..50f0515413 100644 --- a/content/zh/docs/reference/commands/istioctl/index.html +++ b/content/zh/docs/reference/commands/istioctl/index.html @@ -7092,6 +7092,12 @@ These environment variables affect the behavior of the istioctl com If true, Istio will enable the Dual Stack feature. +ISTIO_ENABLE_CONTROLLER_QUEUE_METRICS +Boolean +false +If enabled, publishes metrics for queue depth, latency and processing times. + + ISTIO_ENABLE_HTTP2_PROBING Boolean true @@ -7754,6 +7760,9 @@ These environment variables affect the behavior of the istioctl com pilot_total_xds_rejectsSumTotal number of XDS responses from pilot rejected by proxy. pilot_virt_servicesLastValueTotal virtual services known to pilot. pilot_vservice_dup_domainLastValueVirtual services with dup domains. +pilot_worker_queue_depthLastValueDepth of the controller queues +pilot_worker_queue_durationDistributionTime taken to process an item +pilot_worker_queue_latencyDistributionLatency before the item is processed pilot_xdsLastValueNumber of endpoints connected to this pilot using XDS. pilot_xds_cds_rejectLastValuePilot rejected CDS configs. pilot_xds_config_size_bytesDistributionDistribution of configuration sizes pushed to clients diff --git a/content/zh/docs/reference/commands/operator/index.html b/content/zh/docs/reference/commands/operator/index.html index 73c32b153b..a6fd198e8c 100644 --- a/content/zh/docs/reference/commands/operator/index.html +++ b/content/zh/docs/reference/commands/operator/index.html @@ -503,6 +503,12 @@ These environment variables affect the behavior of the operator com If true, Istio will enable the Dual Stack feature. +ISTIO_ENABLE_CONTROLLER_QUEUE_METRICS +Boolean +false +If enabled, publishes metrics for queue depth, latency and processing times. + + ISTIO_ENABLE_HTTP2_PROBING Boolean true @@ -1165,6 +1171,9 @@ These environment variables affect the behavior of the operator com pilot_total_xds_rejectsSumTotal number of XDS responses from pilot rejected by proxy. pilot_virt_servicesLastValueTotal virtual services known to pilot. pilot_vservice_dup_domainLastValueVirtual services with dup domains. +pilot_worker_queue_depthLastValueDepth of the controller queues +pilot_worker_queue_durationDistributionTime taken to process an item +pilot_worker_queue_latencyDistributionLatency before the item is processed pilot_xdsLastValueNumber of endpoints connected to this pilot using XDS. pilot_xds_cds_rejectLastValuePilot rejected CDS configs. pilot_xds_config_size_bytesDistributionDistribution of configuration sizes pushed to clients diff --git a/content/zh/docs/reference/commands/pilot-agent/index.html b/content/zh/docs/reference/commands/pilot-agent/index.html index 350e49cce7..9d48bebc40 100644 --- a/content/zh/docs/reference/commands/pilot-agent/index.html +++ b/content/zh/docs/reference/commands/pilot-agent/index.html @@ -500,17 +500,17 @@ to enable it. You can execute the following once:

--drop-invalid -Enable invalid drop in the iptables rules +Enable invalid drop in the iptables rules. --dry-run -n -Do not call any external dependencies like iptables +Do not call any external dependencies like iptables. --envoy-port <string> -p -Specify the envoy port to which redirect all TCP traffic (default $ENVOY_PORT = 15001) (default ``) +Specify the envoy port to which redirect all TCP traffic (default $ENVOY_PORT = 15001). (default ``) --host-nsenter-exec @@ -520,17 +520,17 @@ to enable it. You can execute the following once:

--inbound-capture-port <string> -z -Port to which all inbound TCP traffic to the pod/VM should be redirected to (default $INBOUND_CAPTURE_PORT = 15006) (default ``) +Port to which all inbound TCP traffic to the pod/VM should be redirected to (default $INBOUND_CAPTURE_PORT = 15006). (default ``) --inbound-tunnel-port <string> -e -Specify the istio tunnel port for inbound tcp traffic (default $INBOUND_TUNNEL_PORT = 15008) (default ``) +Specify the istio tunnel port for inbound tcp traffic (default $INBOUND_TUNNEL_PORT = 15008). (default ``) --iptables-probe-port <string> -set listen port for failure detection (default `15002`) +Set listen port for failure detection. (default `15002`) --iptables-trace-logging @@ -540,17 +540,17 @@ to enable it. You can execute the following once:

--istio-exclude-interfaces <string> -c -Comma separated list of NIC (optional). Neither inbound nor outbound traffic will be captured (default ``) +Comma separated list of NIC (optional). Neither inbound nor outbound traffic will be captured. (default ``) --istio-inbound-interception-mode <string> -m -The mode used to redirect inbound connections to Envoy, either "REDIRECT" or "TPROXY" (default ``) +The mode used to redirect inbound connections to Envoy, either "REDIRECT" or "TPROXY". (default ``) --istio-inbound-ports <string> -b -Comma separated list of inbound ports for which traffic is to be redirected to Envoy (optional). The wildcard character "*" can be used to configure redirection for all ports. An empty list will disable (default ``) +Comma separated list of inbound ports for which traffic is to be redirected to Envoy (optional). The wildcard character "*" can be used to configure redirection for all ports. An empty list will disable. (default ``) --istio-inbound-tproxy-mark <string> @@ -565,32 +565,32 @@ to enable it. You can execute the following once:

--istio-local-exclude-ports <string> -d -Comma separated list of inbound ports to be excluded from redirection to Envoy (optional). Only applies when all inbound traffic (i.e. "*") is being redirected (default to $ISTIO_LOCAL_EXCLUDE_PORTS) (default ``) +Comma separated list of inbound ports to be excluded from redirection to Envoy (optional). Only applies when all inbound traffic (i.e. "*") is being redirected (default to $ISTIO_LOCAL_EXCLUDE_PORTS). (default ``) --istio-local-outbound-ports-exclude <string> -o -Comma separated list of outbound ports to be excluded from redirection to Envoy (default ``) +Comma separated list of outbound ports to be excluded from redirection to Envoy. (default ``) --istio-outbound-ports <string> -q -Comma separated list of outbound ports to be explicitly included for redirection to Envoy (default ``) +Comma separated list of outbound ports to be explicitly included for redirection to Envoy. (default ``) --istio-service-cidr <string> -i -Comma separated list of IP ranges in CIDR form to redirect to envoy (optional). The wildcard character "*" can be used to redirect all outbound traffic. An empty list will disable all outbound (default ``) +Comma separated list of IP ranges in CIDR form to redirect to envoy (optional). The wildcard character "*" can be used to redirect all outbound traffic. An empty list will disable all outbound. (default ``) --istio-service-exclude-cidr <string> -x -Comma separated list of IP ranges in CIDR form to be excluded from redirection. Only applies when all outbound traffic (i.e. "*") is being redirected (default to $ISTIO_SERVICE_EXCLUDE_CIDR) (default ``) +Comma separated list of IP ranges in CIDR form to be excluded from redirection. Only applies when all outbound traffic (i.e. "*") is being redirected (default to $ISTIO_SERVICE_EXCLUDE_CIDR). (default ``) --kube-virt-interfaces <string> -k -Comma separated list of virtual interfaces whose inbound traffic (from VM) will be treated as outbound (default ``) +Comma separated list of virtual interfaces whose inbound traffic (from VM) will be treated as outbound. (default ``) --log_as_json @@ -645,37 +645,37 @@ to enable it. You can execute the following once:

--probe-timeout <duration> -failure detection timeout (default `5s`) +Failure detection timeout. (default `5s`) --proxy-gid <string> -g -Specify the GID of the user for which the redirection is not applied. (same default value as -u param) (default ``) +Specify the GID of the user for which the redirection is not applied (same default value as -u param). (default ``) --proxy-uid <string> -u -Specify the UID of the user for which the redirection is not applied. Typically, this is the UID of the proxy container (default ``) +Specify the UID of the user for which the redirection is not applied. Typically, this is the UID of the proxy container. (default ``) --redirect-dns -Enable capture of dns traffic by istio-agent +Enable capture of dns traffic by istio-agent. --restore-format -f -Print iptables rules in iptables-restore interpretable format +Print iptables rules in iptables-restore interpretable format. --run-validation -Validate iptables +Validate iptables. --skip-rule-apply -Skip iptables apply +Skip iptables apply. --vklog <Level> @@ -1352,6 +1352,12 @@ These environment variables affect the behavior of the pilot-agent If true, Istio will enable the Dual Stack feature. +ISTIO_ENABLE_CONTROLLER_QUEUE_METRICS +Boolean +false +If enabled, publishes metrics for queue depth, latency and processing times. + + ISTIO_ENABLE_HTTP2_PROBING Boolean true @@ -2202,6 +2208,9 @@ Only applies when traffic from all groups (i.e. "*") is being redirected pilot_total_xds_rejectsSumTotal number of XDS responses from pilot rejected by proxy. pilot_virt_servicesLastValueTotal virtual services known to pilot. pilot_vservice_dup_domainLastValueVirtual services with dup domains. +pilot_worker_queue_depthLastValueDepth of the controller queues +pilot_worker_queue_durationDistributionTime taken to process an item +pilot_worker_queue_latencyDistributionLatency before the item is processed pilot_xdsLastValueNumber of endpoints connected to this pilot using XDS. pilot_xds_cds_rejectLastValuePilot rejected CDS configs. pilot_xds_config_size_bytesDistributionDistribution of configuration sizes pushed to clients diff --git a/content/zh/docs/reference/commands/pilot-discovery/index.html b/content/zh/docs/reference/commands/pilot-discovery/index.html index 346f681b22..602b3d799d 100644 --- a/content/zh/docs/reference/commands/pilot-discovery/index.html +++ b/content/zh/docs/reference/commands/pilot-discovery/index.html @@ -671,6 +671,12 @@ These environment variables affect the behavior of the pilot-discoveryIf true, Istio will enable the Dual Stack feature. +ISTIO_ENABLE_CONTROLLER_QUEUE_METRICS +Boolean +false +If enabled, publishes metrics for queue depth, latency and processing times. + + ISTIO_ENABLE_HTTP2_PROBING Boolean true @@ -1394,6 +1400,9 @@ These environment variables affect the behavior of the pilot-discoverypilot_total_xds_rejectsSumTotal number of XDS responses from pilot rejected by proxy. pilot_virt_servicesLastValueTotal virtual services known to pilot. pilot_vservice_dup_domainLastValueVirtual services with dup domains. +pilot_worker_queue_depthLastValueDepth of the controller queues +pilot_worker_queue_durationDistributionTime taken to process an item +pilot_worker_queue_latencyDistributionLatency before the item is processed pilot_xdsLastValueNumber of endpoints connected to this pilot using XDS. pilot_xds_cds_rejectLastValuePilot rejected CDS configs. pilot_xds_config_size_bytesDistributionDistribution of configuration sizes pushed to clients