Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.
Go to file
Eliza Weisman 13b33b6f3a
proxy: Add `tls="true"` metric label to connections accepted with TLS (#1050)
Depends on #1047.

This PR adds a `tls="true"` label to metrics produced by TLS connections and
requests/responses on those connections, and a `tls="no_config"` label on 
connections where TLS was enabled but the proxy has not been able to load
a valid TLS configuration.

Currently, these labels are only set on accepted connections, as we are not yet
opening encrypted connections, but I wired through the `tls_status` field on 
the `Client` transport context as well, so when we start opening client 
connections with TLS, the label will be applied to their metrics as well.

Closes #1046

Signed-off-by: Eliza Weisman <eliza@buoyanbt.io>
2018-06-19 12:30:11 -07:00
.github Add a newline to dco.yml (#254) 2018-02-01 15:16:02 -08:00
bin Fix unbound variable issue in docker-build script (#1146) 2018-06-18 11:29:09 -07:00
cli Enable get for nodes/proxy for Prometheus RBAC (#1142) 2018-06-18 17:49:23 +01:00
controller Propagate errors in conduit containers to the api (#1117) 2018-06-14 16:22:31 -07:00
doc Release v0.4.2 (#1063) 2018-06-04 15:37:04 -07:00
grafana Grafana: remove fill and stack from individual resource breakouts (#1092) 2018-06-18 10:14:39 -07:00
pkg Move controller/util and web/util packages to pkg (#1109) 2018-06-13 11:25:56 -07:00
proto Propagate errors in conduit containers to the api (#1117) 2018-06-14 16:22:31 -07:00
proxy proxy: Add `tls="true"` metric label to connections accepted with TLS (#1050) 2018-06-19 12:30:11 -07:00
proxy-init dst svc: use shared informer instead of custom endpoints informer (#1079) 2018-06-13 11:11:57 -07:00
test test: Use proxy instead of lb for external test traffic (#1129) 2018-06-15 12:54:12 -07:00
testutil test: Use proxy instead of lb for external test traffic (#1129) 2018-06-15 12:54:12 -07:00
web Upgrade to webpack 4 and webpack-dev-server 3 (#1138) 2018-06-18 14:38:38 -07:00
.dockerignore Update babel to use `env` and `react-app` as presets. (#976) 2018-05-22 17:17:44 -07:00
.editorconfig Add protobuf files to .editorconfig (#1042) 2018-05-30 15:09:38 -07:00
.gcp.json.enc Fix docker-build stage in CI (#21) 2017-12-08 00:52:06 -06:00
.gitattributes proxy: Update `rand` to 0.5.1 (#1125) 2018-06-14 15:09:58 -07:00
.gitignore Link to Grafana from Conduit Dashboard (#678) 2018-04-06 10:56:42 -07:00
.prometheus.dev.yml Remove the telemetry service (#757) 2018-04-13 11:21:29 -07:00
.travis.yml Fix conduit version issue in integration tests (#1139) 2018-06-15 16:35:51 -07:00
BUILD.md Fix unbound variable issue in docker-build script (#1146) 2018-06-18 11:29:09 -07:00
CHANGES.md v0.4.4 release notes (#1145) 2018-06-18 11:29:31 -07:00
CONTRIBUTING.md Add contributing doc and DCO file (#88) 2017-12-22 14:54:27 -08:00
Cargo.lock proxy: Upgrade h2 to 0.1.10 (#1149) 2018-06-18 14:56:54 -07:00
Cargo.toml Update Rustls to the latest Git version to fix a bug. (#1143) 2018-06-16 08:09:42 -10:00
DCO Add contributing doc and DCO file (#88) 2017-12-22 14:54:27 -08:00
Dockerfile-base Introducing Conduit, the ultralight service mesh 2017-12-05 00:24:55 +00:00
Dockerfile-go-deps Go: update k8s dependencies to 1.10.2 (#962) 2018-05-17 15:46:58 -07:00
Gopkg.lock dst svc: use shared informer instead of custom endpoints informer (#1079) 2018-06-13 11:11:57 -07:00
Gopkg.toml Go: update k8s dependencies to 1.10.2 (#962) 2018-05-17 15:46:58 -07:00
LICENSE Introducing Conduit, the ultralight service mesh 2017-12-05 00:24:55 +00:00
README.md update readme: experimental -> alpha, and minor tweaks (#391) 2018-02-19 15:41:04 -08:00
TEST.md Add tests/utils/scripts for running integration tests (#608) 2018-03-27 15:06:55 -07:00
docker-compose.yml Upgrade Prometheus from 2.1.0 to 2.2.1 (#816) 2018-04-19 18:00:53 -07:00

README.md

conduit

Build Status GitHub license Slack Status

🎈 Welcome to Conduit! 👋

Conduit is an ultralight service mesh for Kubernetes. It features a minimalist control plane written in Go, and a native proxy data plane written in Rust that boasts the performance of C without the heartbleed.

Conduit is alpha. It is capable of proxying all TCP traffic, and reporting top-line metrics (success rates, latencies, etc) for all HTTP, HTTP/2, and gRPC traffic. It currently does not work with websockets or with HTTP tunneling--see the --skip-outbound-ports flag for how to exclude these types of traffic.

Get involved

Documentation

View Conduit docs for more a more comprehensive guide to getting started, or view the full Conduit roadmap.

Getting started with Conduit

  1. Install the Conduit CLI with curl https://run.conduit.io/install | sh .

  2. Add $HOME/.conduit/bin to your PATH.

  3. Install Conduit into your Kubernetes cluster with: conduit install | kubectl apply -f -.

  4. Verify that the installation succeeded with conduit check.

  5. Explore the Conduit controller with conduit dashboard.

  6. Optionally, install a demo application to run with Conduit.

  7. Add your own service to the Conduit mesh!

Working in this repo

BUILD.md includes general information on how to work in this repo.

Code of conduct

This project is for everyone. We ask that our users and contributors take a few minutes to review our code of conduct.

License

Conduit is copyright 2018 Buoyant, Inc. All rights reserved.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use these files except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.