route/vendor/google.golang.org/grpc/transport/http2_server.go

1216 lines
34 KiB
Go
Raw Normal View History

2017-01-26 15:51:44 +00:00
/*
*
2017-09-30 16:47:47 +00:00
* Copyright 2014 gRPC authors.
2017-01-26 15:51:44 +00:00
*
2017-09-30 16:47:47 +00:00
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
2017-01-26 15:51:44 +00:00
*
2017-09-30 16:47:47 +00:00
* http://www.apache.org/licenses/LICENSE-2.0
2017-01-26 15:51:44 +00:00
*
2017-09-30 16:47:47 +00:00
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
2017-01-26 15:51:44 +00:00
*
*/
package transport
import (
"bytes"
"errors"
2018-01-03 19:19:49 +00:00
"fmt"
2017-01-26 15:51:44 +00:00
"io"
"math"
2017-09-30 16:47:47 +00:00
"math/rand"
2017-01-26 15:51:44 +00:00
"net"
"strconv"
"sync"
2017-09-30 16:47:47 +00:00
"sync/atomic"
"time"
2017-01-26 15:51:44 +00:00
2017-09-30 16:47:47 +00:00
"github.com/golang/protobuf/proto"
2017-01-26 15:51:44 +00:00
"golang.org/x/net/context"
"golang.org/x/net/http2"
"golang.org/x/net/http2/hpack"
"google.golang.org/grpc/codes"
"google.golang.org/grpc/credentials"
2017-09-30 16:47:47 +00:00
"google.golang.org/grpc/keepalive"
2017-01-26 15:51:44 +00:00
"google.golang.org/grpc/metadata"
"google.golang.org/grpc/peer"
"google.golang.org/grpc/stats"
2017-09-30 16:47:47 +00:00
"google.golang.org/grpc/status"
2017-01-26 15:51:44 +00:00
"google.golang.org/grpc/tap"
)
// ErrIllegalHeaderWrite indicates that setting header is illegal because of
// the stream's state.
var ErrIllegalHeaderWrite = errors.New("transport: the stream is done or WriteHeader was already called")
// http2Server implements the ServerTransport interface with HTTP2.
type http2Server struct {
ctx context.Context
2018-01-03 19:19:49 +00:00
cancel context.CancelFunc
2017-01-26 15:51:44 +00:00
conn net.Conn
remoteAddr net.Addr
localAddr net.Addr
maxStreamID uint32 // max stream ID ever seen
authInfo credentials.AuthInfo // auth info about the connection
inTapHandle tap.ServerInHandle
2018-01-03 19:19:49 +00:00
framer *framer
hBuf *bytes.Buffer // the buffer for HPACK encoding
hEnc *hpack.Encoder // HPACK encoder
2017-01-26 15:51:44 +00:00
// The max number of concurrent streams.
maxStreams uint32
// controlBuf delivers all the control related tasks (e.g., window
// updates, reset streams, and various settings) to the controller.
2017-09-30 16:47:47 +00:00
controlBuf *controlBuffer
2017-01-26 15:51:44 +00:00
fc *inFlow
// sendQuotaPool provides flow control to outbound message.
sendQuotaPool *quotaPool
2018-01-03 19:19:49 +00:00
// localSendQuota limits the amount of data that can be scheduled
// for writing before it is actually written out.
localSendQuota *quotaPool
stats stats.Handler
2017-09-30 16:47:47 +00:00
// Flag to keep track of reading activity on transport.
// 1 is true and 0 is false.
activity uint32 // Accessed atomically.
// Keepalive and max-age parameters for the server.
kp keepalive.ServerParameters
// Keepalive enforcement policy.
kep keepalive.EnforcementPolicy
// The time instance last ping was received.
lastPingAt time.Time
// Number of times the client has violated keepalive ping policy so far.
pingStrikes uint8
// Flag to signify that number of ping strikes should be reset to 0.
// This is set whenever data or header frames are sent.
// 1 means yes.
resetPingStrikes uint32 // Accessed atomically.
initialWindowSize int32
bdpEst *bdpEstimator
2017-01-26 15:51:44 +00:00
2017-09-30 16:47:47 +00:00
mu sync.Mutex // guard the following
2017-01-26 15:51:44 +00:00
2017-09-30 16:47:47 +00:00
// drainChan is initialized when drain(...) is called the first time.
// After which the server writes out the first GoAway(with ID 2^31-1) frame.
// Then an independent goroutine will be launched to later send the second GoAway.
// During this time we don't want to write another first GoAway(with ID 2^31 -1) frame.
// Thus call to drain(...) will be a no-op if drainChan is already initialized since draining is
// already underway.
drainChan chan struct{}
2017-01-26 15:51:44 +00:00
state transportState
activeStreams map[uint32]*Stream
// the per-stream outbound flow control window size set by the peer.
streamSendQuota uint32
2017-09-30 16:47:47 +00:00
// idle is the time instant when the connection went idle.
2018-01-03 19:19:49 +00:00
// This is either the beginning of the connection or when the number of
2017-09-30 16:47:47 +00:00
// RPCs go down to 0.
// When the connection is busy, this value is set to 0.
idle time.Time
2017-01-26 15:51:44 +00:00
}
// newHTTP2Server constructs a ServerTransport based on HTTP2. ConnectionError is
// returned if something goes wrong.
func newHTTP2Server(conn net.Conn, config *ServerConfig) (_ ServerTransport, err error) {
2018-01-03 19:19:49 +00:00
writeBufSize := defaultWriteBufSize
if config.WriteBufferSize > 0 {
writeBufSize = config.WriteBufferSize
}
readBufSize := defaultReadBufSize
if config.ReadBufferSize > 0 {
readBufSize = config.ReadBufferSize
}
framer := newFramer(conn, writeBufSize, readBufSize)
2017-01-26 15:51:44 +00:00
// Send initial settings as connection preface to client.
2017-09-30 16:47:47 +00:00
var isettings []http2.Setting
2017-01-26 15:51:44 +00:00
// TODO(zhaoq): Have a better way to signal "no limit" because 0 is
// permitted in the HTTP2 spec.
maxStreams := config.MaxStreams
if maxStreams == 0 {
maxStreams = math.MaxUint32
} else {
2017-09-30 16:47:47 +00:00
isettings = append(isettings, http2.Setting{
2017-01-26 15:51:44 +00:00
ID: http2.SettingMaxConcurrentStreams,
Val: maxStreams,
})
}
2017-09-30 16:47:47 +00:00
dynamicWindow := true
iwz := int32(initialWindowSize)
if config.InitialWindowSize >= defaultWindowSize {
iwz = config.InitialWindowSize
dynamicWindow = false
}
icwz := int32(initialWindowSize)
if config.InitialConnWindowSize >= defaultWindowSize {
icwz = config.InitialConnWindowSize
dynamicWindow = false
}
if iwz != defaultWindowSize {
isettings = append(isettings, http2.Setting{
2017-01-26 15:51:44 +00:00
ID: http2.SettingInitialWindowSize,
2017-09-30 16:47:47 +00:00
Val: uint32(iwz)})
2017-01-26 15:51:44 +00:00
}
2018-01-03 19:19:49 +00:00
if err := framer.fr.WriteSettings(isettings...); err != nil {
return nil, connectionErrorf(false, err, "transport: %v", err)
2017-01-26 15:51:44 +00:00
}
// Adjust the connection flow control window if needed.
2017-09-30 16:47:47 +00:00
if delta := uint32(icwz - defaultWindowSize); delta > 0 {
2018-01-03 19:19:49 +00:00
if err := framer.fr.WriteWindowUpdate(0, delta); err != nil {
return nil, connectionErrorf(false, err, "transport: %v", err)
2017-01-26 15:51:44 +00:00
}
}
2017-09-30 16:47:47 +00:00
kp := config.KeepaliveParams
if kp.MaxConnectionIdle == 0 {
kp.MaxConnectionIdle = defaultMaxConnectionIdle
}
if kp.MaxConnectionAge == 0 {
kp.MaxConnectionAge = defaultMaxConnectionAge
}
// Add a jitter to MaxConnectionAge.
kp.MaxConnectionAge += getJitter(kp.MaxConnectionAge)
if kp.MaxConnectionAgeGrace == 0 {
kp.MaxConnectionAgeGrace = defaultMaxConnectionAgeGrace
}
if kp.Time == 0 {
kp.Time = defaultServerKeepaliveTime
}
if kp.Timeout == 0 {
kp.Timeout = defaultServerKeepaliveTimeout
}
kep := config.KeepalivePolicy
if kep.MinTime == 0 {
kep.MinTime = defaultKeepalivePolicyMinTime
}
2017-01-26 15:51:44 +00:00
var buf bytes.Buffer
2018-01-03 19:19:49 +00:00
ctx, cancel := context.WithCancel(context.Background())
2017-01-26 15:51:44 +00:00
t := &http2Server{
2018-01-03 19:19:49 +00:00
ctx: ctx,
cancel: cancel,
2017-09-30 16:47:47 +00:00
conn: conn,
remoteAddr: conn.RemoteAddr(),
localAddr: conn.LocalAddr(),
authInfo: config.AuthInfo,
framer: framer,
hBuf: &buf,
hEnc: hpack.NewEncoder(&buf),
maxStreams: maxStreams,
inTapHandle: config.InTapHandle,
controlBuf: newControlBuffer(),
fc: &inFlow{limit: uint32(icwz)},
sendQuotaPool: newQuotaPool(defaultWindowSize),
2018-01-03 19:19:49 +00:00
localSendQuota: newQuotaPool(defaultLocalSendQuota),
2017-09-30 16:47:47 +00:00
state: reachable,
activeStreams: make(map[uint32]*Stream),
streamSendQuota: defaultWindowSize,
stats: config.StatsHandler,
kp: kp,
idle: time.Now(),
kep: kep,
initialWindowSize: iwz,
}
if dynamicWindow {
t.bdpEst = &bdpEstimator{
bdp: initialWindowSize,
updateFlowControl: t.updateFlowControl,
}
2017-01-26 15:51:44 +00:00
}
if t.stats != nil {
t.ctx = t.stats.TagConn(t.ctx, &stats.ConnTagInfo{
RemoteAddr: t.remoteAddr,
LocalAddr: t.localAddr,
})
connBegin := &stats.ConnBegin{}
t.stats.HandleConn(t.ctx, connBegin)
}
2018-01-03 19:19:49 +00:00
t.framer.writer.Flush()
defer func() {
if err != nil {
t.Close()
}
}()
// Check the validity of client preface.
preface := make([]byte, len(clientPreface))
if _, err := io.ReadFull(t.conn, preface); err != nil {
return nil, connectionErrorf(false, err, "transport: http2Server.HandleStreams failed to receive the preface from client: %v", err)
}
if !bytes.Equal(preface, clientPreface) {
return nil, connectionErrorf(false, nil, "transport: http2Server.HandleStreams received bogus greeting from client: %q", preface)
}
frame, err := t.framer.fr.ReadFrame()
if err == io.EOF || err == io.ErrUnexpectedEOF {
return nil, err
}
if err != nil {
return nil, connectionErrorf(false, err, "transport: http2Server.HandleStreams failed to read initial settings frame: %v", err)
}
atomic.StoreUint32(&t.activity, 1)
sf, ok := frame.(*http2.SettingsFrame)
if !ok {
return nil, connectionErrorf(false, nil, "transport: http2Server.HandleStreams saw invalid preface type %T from client", frame)
}
t.handleSettings(sf)
go func() {
loopyWriter(t.ctx, t.controlBuf, t.itemHandler)
t.conn.Close()
}()
2017-09-30 16:47:47 +00:00
go t.keepalive()
2017-01-26 15:51:44 +00:00
return t, nil
}
// operateHeader takes action on the decoded headers.
func (t *http2Server) operateHeaders(frame *http2.MetaHeadersFrame, handle func(*Stream), traceCtx func(context.Context, string) context.Context) (close bool) {
2017-09-30 16:47:47 +00:00
streamID := frame.Header().StreamID
2017-01-26 15:51:44 +00:00
var state decodeState
for _, hf := range frame.Fields {
2017-09-30 16:47:47 +00:00
if err := state.processHeaderField(hf); err != nil {
if se, ok := err.(StreamError); ok {
t.controlBuf.put(&resetStream{streamID, statusCodeConvTab[se.Code]})
}
return
2017-01-26 15:51:44 +00:00
}
2017-09-30 16:47:47 +00:00
}
buf := newRecvBuffer()
s := &Stream{
id: streamID,
st: t,
buf: buf,
fc: &inFlow{limit: uint32(t.initialWindowSize)},
recvCompress: state.encoding,
method: state.method,
2017-01-26 15:51:44 +00:00
}
if frame.StreamEnded() {
// s is just created by the caller. No lock needed.
s.state = streamReadDone
}
if state.timeoutSet {
s.ctx, s.cancel = context.WithTimeout(t.ctx, state.timeout)
} else {
s.ctx, s.cancel = context.WithCancel(t.ctx)
}
pr := &peer.Peer{
Addr: t.remoteAddr,
}
// Attach Auth info if there is any.
if t.authInfo != nil {
pr.AuthInfo = t.authInfo
}
s.ctx = peer.NewContext(s.ctx, pr)
// Cache the current stream to the context so that the server application
// can find out. Required when the server wants to send some metadata
// back to the client (unary call only).
s.ctx = newContextWithStream(s.ctx, s)
// Attach the received metadata to the context.
if len(state.mdata) > 0 {
2017-09-30 16:47:47 +00:00
s.ctx = metadata.NewIncomingContext(s.ctx, state.mdata)
2017-01-26 15:51:44 +00:00
}
2017-09-30 16:47:47 +00:00
if state.statsTags != nil {
s.ctx = stats.SetIncomingTags(s.ctx, state.statsTags)
}
if state.statsTrace != nil {
s.ctx = stats.SetIncomingTrace(s.ctx, state.statsTrace)
2017-01-26 15:51:44 +00:00
}
if t.inTapHandle != nil {
var err error
info := &tap.Info{
FullMethodName: state.method,
}
s.ctx, err = t.inTapHandle(s.ctx, info)
if err != nil {
2017-09-30 16:47:47 +00:00
warningf("transport: http2Server.operateHeaders got an error from InTapHandle: %v", err)
2017-01-26 15:51:44 +00:00
t.controlBuf.put(&resetStream{s.id, http2.ErrCodeRefusedStream})
return
}
}
t.mu.Lock()
if t.state != reachable {
t.mu.Unlock()
return
}
if uint32(len(t.activeStreams)) >= t.maxStreams {
t.mu.Unlock()
2017-09-30 16:47:47 +00:00
t.controlBuf.put(&resetStream{streamID, http2.ErrCodeRefusedStream})
2017-01-26 15:51:44 +00:00
return
}
2017-09-30 16:47:47 +00:00
if streamID%2 != 1 || streamID <= t.maxStreamID {
2017-01-26 15:51:44 +00:00
t.mu.Unlock()
// illegal gRPC stream id.
2017-09-30 16:47:47 +00:00
errorf("transport: http2Server.HandleStreams received an illegal stream id: %v", streamID)
2017-01-26 15:51:44 +00:00
return true
}
2017-09-30 16:47:47 +00:00
t.maxStreamID = streamID
2017-01-26 15:51:44 +00:00
s.sendQuotaPool = newQuotaPool(int(t.streamSendQuota))
2017-09-30 16:47:47 +00:00
t.activeStreams[streamID] = s
if len(t.activeStreams) == 1 {
t.idle = time.Time{}
}
2017-01-26 15:51:44 +00:00
t.mu.Unlock()
2017-09-30 16:47:47 +00:00
s.requestRead = func(n int) {
t.adjustWindow(s, uint32(n))
2017-01-26 15:51:44 +00:00
}
s.ctx = traceCtx(s.ctx, s.method)
if t.stats != nil {
s.ctx = t.stats.TagRPC(s.ctx, &stats.RPCTagInfo{FullMethodName: s.method})
inHeader := &stats.InHeader{
FullMethod: s.method,
RemoteAddr: t.remoteAddr,
LocalAddr: t.localAddr,
Compression: s.recvCompress,
WireLength: int(frame.Header().Length),
}
t.stats.HandleRPC(s.ctx, inHeader)
}
2017-09-30 16:47:47 +00:00
s.trReader = &transportReader{
reader: &recvBufferReader{
ctx: s.ctx,
recv: s.buf,
},
windowHandler: func(n int) {
t.updateWindow(s, uint32(n))
},
}
2018-01-03 19:19:49 +00:00
s.waiters = waiters{
ctx: s.ctx,
tctx: t.ctx,
}
2017-01-26 15:51:44 +00:00
handle(s)
return
}
// HandleStreams receives incoming streams using the given handler. This is
// typically run in a separate goroutine.
// traceCtx attaches trace to ctx and returns the new context.
func (t *http2Server) HandleStreams(handle func(*Stream), traceCtx func(context.Context, string) context.Context) {
for {
2018-01-03 19:19:49 +00:00
frame, err := t.framer.fr.ReadFrame()
2017-09-30 16:47:47 +00:00
atomic.StoreUint32(&t.activity, 1)
2017-01-26 15:51:44 +00:00
if err != nil {
if se, ok := err.(http2.StreamError); ok {
t.mu.Lock()
s := t.activeStreams[se.StreamID]
t.mu.Unlock()
if s != nil {
t.closeStream(s)
}
t.controlBuf.put(&resetStream{se.StreamID, se.Code})
continue
}
if err == io.EOF || err == io.ErrUnexpectedEOF {
t.Close()
return
}
2017-09-30 16:47:47 +00:00
warningf("transport: http2Server.HandleStreams failed to read frame: %v", err)
2017-01-26 15:51:44 +00:00
t.Close()
return
}
switch frame := frame.(type) {
case *http2.MetaHeadersFrame:
if t.operateHeaders(frame, handle, traceCtx) {
t.Close()
break
}
case *http2.DataFrame:
t.handleData(frame)
case *http2.RSTStreamFrame:
t.handleRSTStream(frame)
case *http2.SettingsFrame:
t.handleSettings(frame)
case *http2.PingFrame:
t.handlePing(frame)
case *http2.WindowUpdateFrame:
t.handleWindowUpdate(frame)
case *http2.GoAwayFrame:
// TODO: Handle GoAway from the client appropriately.
default:
2017-09-30 16:47:47 +00:00
errorf("transport: http2Server.HandleStreams found unhandled frame type %v.", frame)
2017-01-26 15:51:44 +00:00
}
}
}
func (t *http2Server) getStream(f http2.Frame) (*Stream, bool) {
t.mu.Lock()
defer t.mu.Unlock()
if t.activeStreams == nil {
// The transport is closing.
return nil, false
}
s, ok := t.activeStreams[f.Header().StreamID]
if !ok {
// The stream is already done.
return nil, false
}
return s, true
}
2017-09-30 16:47:47 +00:00
// adjustWindow sends out extra window update over the initial window size
// of stream if the application is requesting data larger in size than
// the window.
func (t *http2Server) adjustWindow(s *Stream, n uint32) {
s.mu.Lock()
defer s.mu.Unlock()
if s.state == streamDone {
return
}
if w := s.fc.maybeAdjust(n); w > 0 {
if cw := t.fc.resetPendingUpdate(); cw > 0 {
2018-01-03 19:19:49 +00:00
t.controlBuf.put(&windowUpdate{0, cw})
2017-09-30 16:47:47 +00:00
}
2018-01-03 19:19:49 +00:00
t.controlBuf.put(&windowUpdate{s.id, w})
2017-09-30 16:47:47 +00:00
}
}
2017-01-26 15:51:44 +00:00
// updateWindow adjusts the inbound quota for the stream and the transport.
// Window updates will deliver to the controller for sending when
// the cumulative quota exceeds the corresponding threshold.
func (t *http2Server) updateWindow(s *Stream, n uint32) {
s.mu.Lock()
defer s.mu.Unlock()
if s.state == streamDone {
return
}
if w := s.fc.onRead(n); w > 0 {
2017-09-30 16:47:47 +00:00
if cw := t.fc.resetPendingUpdate(); cw > 0 {
2018-01-03 19:19:49 +00:00
t.controlBuf.put(&windowUpdate{0, cw})
2017-09-30 16:47:47 +00:00
}
2018-01-03 19:19:49 +00:00
t.controlBuf.put(&windowUpdate{s.id, w})
2017-01-26 15:51:44 +00:00
}
}
2017-09-30 16:47:47 +00:00
// updateFlowControl updates the incoming flow control windows
// for the transport and the stream based on the current bdp
// estimation.
func (t *http2Server) updateFlowControl(n uint32) {
t.mu.Lock()
for _, s := range t.activeStreams {
s.fc.newLimit(n)
}
t.initialWindowSize = int32(n)
t.mu.Unlock()
2018-01-03 19:19:49 +00:00
t.controlBuf.put(&windowUpdate{0, t.fc.newLimit(n)})
2017-09-30 16:47:47 +00:00
t.controlBuf.put(&settings{
ss: []http2.Setting{
{
ID: http2.SettingInitialWindowSize,
Val: uint32(n),
},
},
})
}
2017-01-26 15:51:44 +00:00
func (t *http2Server) handleData(f *http2.DataFrame) {
2017-09-30 16:47:47 +00:00
size := f.Header().Length
var sendBDPPing bool
if t.bdpEst != nil {
sendBDPPing = t.bdpEst.add(uint32(size))
}
// Decouple connection's flow control from application's read.
// An update on connection's flow control should not depend on
// whether user application has read the data or not. Such a
// restriction is already imposed on the stream's flow control,
// and therefore the sender will be blocked anyways.
// Decoupling the connection flow control will prevent other
// active(fast) streams from starving in presence of slow or
// inactive streams.
//
// Furthermore, if a bdpPing is being sent out we can piggyback
// connection's window update for the bytes we just received.
if sendBDPPing {
2018-01-03 19:19:49 +00:00
if size != 0 { // Could be an empty frame.
t.controlBuf.put(&windowUpdate{0, uint32(size)})
}
2017-09-30 16:47:47 +00:00
t.controlBuf.put(bdpPing)
} else {
if err := t.fc.onData(uint32(size)); err != nil {
errorf("transport: http2Server %v", err)
t.Close()
return
}
if w := t.fc.onRead(uint32(size)); w > 0 {
2018-01-03 19:19:49 +00:00
t.controlBuf.put(&windowUpdate{0, w})
2017-09-30 16:47:47 +00:00
}
2017-01-26 15:51:44 +00:00
}
// Select the right stream to dispatch.
s, ok := t.getStream(f)
if !ok {
return
}
if size > 0 {
s.mu.Lock()
if s.state == streamDone {
s.mu.Unlock()
return
}
if err := s.fc.onData(uint32(size)); err != nil {
s.mu.Unlock()
t.closeStream(s)
t.controlBuf.put(&resetStream{s.id, http2.ErrCodeFlowControl})
return
}
2017-09-30 16:47:47 +00:00
if f.Header().Flags.Has(http2.FlagDataPadded) {
if w := s.fc.onRead(uint32(size) - uint32(len(f.Data()))); w > 0 {
2018-01-03 19:19:49 +00:00
t.controlBuf.put(&windowUpdate{s.id, w})
2017-09-30 16:47:47 +00:00
}
}
2017-01-26 15:51:44 +00:00
s.mu.Unlock()
// TODO(bradfitz, zhaoq): A copy is required here because there is no
// guarantee f.Data() is consumed before the arrival of next frame.
// Can this copy be eliminated?
2017-09-30 16:47:47 +00:00
if len(f.Data()) > 0 {
data := make([]byte, len(f.Data()))
copy(data, f.Data())
s.write(recvMsg{data: data})
}
2017-01-26 15:51:44 +00:00
}
if f.Header().Flags.Has(http2.FlagDataEndStream) {
// Received the end of stream from the client.
s.mu.Lock()
if s.state != streamDone {
s.state = streamReadDone
}
s.mu.Unlock()
s.write(recvMsg{err: io.EOF})
}
}
func (t *http2Server) handleRSTStream(f *http2.RSTStreamFrame) {
s, ok := t.getStream(f)
if !ok {
return
}
t.closeStream(s)
}
func (t *http2Server) handleSettings(f *http2.SettingsFrame) {
if f.IsAck() {
return
}
2018-01-03 19:19:49 +00:00
var rs []http2.Setting
var ps []http2.Setting
2017-01-26 15:51:44 +00:00
f.ForeachSetting(func(s http2.Setting) error {
2018-01-03 19:19:49 +00:00
if t.isRestrictive(s) {
rs = append(rs, s)
} else {
ps = append(ps, s)
}
2017-01-26 15:51:44 +00:00
return nil
})
2018-01-03 19:19:49 +00:00
t.applySettings(rs)
t.controlBuf.put(&settingsAck{})
t.applySettings(ps)
}
func (t *http2Server) isRestrictive(s http2.Setting) bool {
switch s.ID {
case http2.SettingInitialWindowSize:
// Note: we don't acquire a lock here to read streamSendQuota
// because the same goroutine updates it later.
return s.Val < t.streamSendQuota
}
return false
}
func (t *http2Server) applySettings(ss []http2.Setting) {
for _, s := range ss {
if s.ID == http2.SettingInitialWindowSize {
t.mu.Lock()
for _, stream := range t.activeStreams {
stream.sendQuotaPool.addAndUpdate(int(s.Val) - int(t.streamSendQuota))
}
t.streamSendQuota = s.Val
t.mu.Unlock()
}
}
2017-01-26 15:51:44 +00:00
}
2017-09-30 16:47:47 +00:00
const (
maxPingStrikes = 2
defaultPingTimeout = 2 * time.Hour
)
2017-01-26 15:51:44 +00:00
func (t *http2Server) handlePing(f *http2.PingFrame) {
2017-09-30 16:47:47 +00:00
if f.IsAck() {
if f.Data == goAwayPing.data && t.drainChan != nil {
close(t.drainChan)
return
}
// Maybe it's a BDP ping.
if t.bdpEst != nil {
t.bdpEst.calculate(f.Data)
}
2017-01-26 15:51:44 +00:00
return
}
pingAck := &ping{ack: true}
copy(pingAck.data[:], f.Data[:])
t.controlBuf.put(pingAck)
2017-09-30 16:47:47 +00:00
now := time.Now()
defer func() {
t.lastPingAt = now
}()
// A reset ping strikes means that we don't need to check for policy
// violation for this ping and the pingStrikes counter should be set
// to 0.
if atomic.CompareAndSwapUint32(&t.resetPingStrikes, 1, 0) {
t.pingStrikes = 0
return
}
t.mu.Lock()
ns := len(t.activeStreams)
t.mu.Unlock()
if ns < 1 && !t.kep.PermitWithoutStream {
// Keepalive shouldn't be active thus, this new ping should
2018-01-03 19:19:49 +00:00
// have come after at least defaultPingTimeout.
2017-09-30 16:47:47 +00:00
if t.lastPingAt.Add(defaultPingTimeout).After(now) {
t.pingStrikes++
}
} else {
// Check if keepalive policy is respected.
if t.lastPingAt.Add(t.kep.MinTime).After(now) {
t.pingStrikes++
}
}
if t.pingStrikes > maxPingStrikes {
// Send goaway and close the connection.
2018-01-03 19:19:49 +00:00
errorf("transport: Got too many pings from the client, closing the connection.")
2017-09-30 16:47:47 +00:00
t.controlBuf.put(&goAway{code: http2.ErrCodeEnhanceYourCalm, debugData: []byte("too_many_pings"), closeConn: true})
}
2017-01-26 15:51:44 +00:00
}
func (t *http2Server) handleWindowUpdate(f *http2.WindowUpdateFrame) {
id := f.Header().StreamID
incr := f.Increment
if id == 0 {
t.sendQuotaPool.add(int(incr))
return
}
if s, ok := t.getStream(f); ok {
s.sendQuotaPool.add(int(incr))
}
}
2017-10-06 15:29:20 +00:00
// WriteHeader sends the header metedata md back to the client.
func (t *http2Server) WriteHeader(s *Stream, md metadata.MD) error {
2018-01-03 19:19:49 +00:00
select {
case <-s.ctx.Done():
return ContextErr(s.ctx.Err())
case <-t.ctx.Done():
return ErrConnClosing
default:
}
2017-01-26 15:51:44 +00:00
s.mu.Lock()
if s.headerOk || s.state == streamDone {
s.mu.Unlock()
return ErrIllegalHeaderWrite
}
s.headerOk = true
if md.Len() > 0 {
if s.header.Len() > 0 {
s.header = metadata.Join(s.header, md)
} else {
s.header = md
}
}
md = s.header
s.mu.Unlock()
2018-01-03 19:19:49 +00:00
// TODO(mmukhi): Benchmark if the performance gets better if count the metadata and other header fields
// first and create a slice of that exact size.
headerFields := make([]hpack.HeaderField, 0, 2) // at least :status, content-type will be there if none else.
headerFields = append(headerFields, hpack.HeaderField{Name: ":status", Value: "200"})
headerFields = append(headerFields, hpack.HeaderField{Name: "content-type", Value: "application/grpc"})
2017-01-26 15:51:44 +00:00
if s.sendCompress != "" {
2018-01-03 19:19:49 +00:00
headerFields = append(headerFields, hpack.HeaderField{Name: "grpc-encoding", Value: s.sendCompress})
2017-01-26 15:51:44 +00:00
}
2017-09-30 16:47:47 +00:00
for k, vv := range md {
2017-01-26 15:51:44 +00:00
if isReservedHeader(k) {
// Clients don't tolerate reading restricted headers after some non restricted ones were sent.
continue
}
2017-09-30 16:47:47 +00:00
for _, v := range vv {
2018-01-03 19:19:49 +00:00
headerFields = append(headerFields, hpack.HeaderField{Name: k, Value: encodeMetadataHeader(k, v)})
2017-01-26 15:51:44 +00:00
}
}
2018-01-03 19:19:49 +00:00
t.controlBuf.put(&headerFrame{
streamID: s.id,
hf: headerFields,
endStream: false,
})
2017-01-26 15:51:44 +00:00
if t.stats != nil {
outHeader := &stats.OutHeader{
2018-01-03 19:19:49 +00:00
//WireLength: // TODO(mmukhi): Revisit this later, if needed.
2017-01-26 15:51:44 +00:00
}
t.stats.HandleRPC(s.Context(), outHeader)
}
return nil
}
// WriteStatus sends stream status to the client and terminates the stream.
// There is no further I/O operations being able to perform on this stream.
// TODO(zhaoq): Now it indicates the end of entire stream. Revisit if early
// OK is adopted.
2017-09-30 16:47:47 +00:00
func (t *http2Server) WriteStatus(s *Stream, st *status.Status) error {
2018-01-03 19:19:49 +00:00
select {
case <-t.ctx.Done():
return ErrConnClosing
default:
}
2017-01-26 15:51:44 +00:00
var headersSent, hasHeader bool
s.mu.Lock()
if s.state == streamDone {
s.mu.Unlock()
return nil
}
if s.headerOk {
headersSent = true
}
if s.header.Len() > 0 {
hasHeader = true
}
s.mu.Unlock()
if !headersSent && hasHeader {
t.WriteHeader(s, nil)
headersSent = true
}
2018-01-03 19:19:49 +00:00
// TODO(mmukhi): Benchmark if the performance gets better if count the metadata and other header fields
// first and create a slice of that exact size.
headerFields := make([]hpack.HeaderField, 0, 2) // grpc-status and grpc-message will be there if none else.
2017-01-26 15:51:44 +00:00
if !headersSent {
2018-01-03 19:19:49 +00:00
headerFields = append(headerFields, hpack.HeaderField{Name: ":status", Value: "200"})
headerFields = append(headerFields, hpack.HeaderField{Name: "content-type", Value: "application/grpc"})
2017-01-26 15:51:44 +00:00
}
2018-01-03 19:19:49 +00:00
headerFields = append(headerFields, hpack.HeaderField{Name: "grpc-status", Value: strconv.Itoa(int(st.Code()))})
headerFields = append(headerFields, hpack.HeaderField{Name: "grpc-message", Value: encodeGrpcMessage(st.Message())})
2017-09-30 16:47:47 +00:00
if p := st.Proto(); p != nil && len(p.Details) > 0 {
stBytes, err := proto.Marshal(p)
if err != nil {
// TODO: return error instead, when callers are able to handle it.
panic(err)
}
2018-01-03 19:19:49 +00:00
headerFields = append(headerFields, hpack.HeaderField{Name: "grpc-status-details-bin", Value: encodeBinHeader(stBytes)})
2017-09-30 16:47:47 +00:00
}
2017-01-26 15:51:44 +00:00
// Attach the trailer metadata.
2017-09-30 16:47:47 +00:00
for k, vv := range s.trailer {
2017-01-26 15:51:44 +00:00
// Clients don't tolerate reading restricted headers after some non restricted ones were sent.
if isReservedHeader(k) {
continue
}
2017-09-30 16:47:47 +00:00
for _, v := range vv {
2018-01-03 19:19:49 +00:00
headerFields = append(headerFields, hpack.HeaderField{Name: k, Value: encodeMetadataHeader(k, v)})
2017-01-26 15:51:44 +00:00
}
}
2018-01-03 19:19:49 +00:00
t.controlBuf.put(&headerFrame{
streamID: s.id,
hf: headerFields,
endStream: true,
})
2017-01-26 15:51:44 +00:00
if t.stats != nil {
2018-01-03 19:19:49 +00:00
t.stats.HandleRPC(s.Context(), &stats.OutTrailer{})
2017-01-26 15:51:44 +00:00
}
t.closeStream(s)
return nil
}
// Write converts the data into HTTP2 data frame and sends it out. Non-nil error
// is returns if it fails (e.g., framing error, transport error).
2018-01-03 19:19:49 +00:00
func (t *http2Server) Write(s *Stream, hdr []byte, data []byte, opts *Options) error {
select {
case <-s.ctx.Done():
return ContextErr(s.ctx.Err())
case <-t.ctx.Done():
return ErrConnClosing
default:
}
2017-01-26 15:51:44 +00:00
var writeHeaderFrame bool
s.mu.Lock()
if s.state == streamDone {
s.mu.Unlock()
return streamErrorf(codes.Unknown, "the stream has been done")
}
if !s.headerOk {
writeHeaderFrame = true
}
s.mu.Unlock()
if writeHeaderFrame {
t.WriteHeader(s, nil)
}
2018-01-03 19:19:49 +00:00
// Add data to header frame so that we can equally distribute data across frames.
emptyLen := http2MaxFrameLen - len(hdr)
if emptyLen > len(data) {
emptyLen = len(data)
}
hdr = append(hdr, data[:emptyLen]...)
data = data[emptyLen:]
2017-10-06 15:29:20 +00:00
var (
2018-01-03 19:19:49 +00:00
streamQuota int
streamQuotaVer uint32
err error
2017-10-06 15:29:20 +00:00
)
2018-01-03 19:19:49 +00:00
for _, r := range [][]byte{hdr, data} {
for len(r) > 0 {
size := http2MaxFrameLen
if size > len(r) {
size = len(r)
2017-09-30 16:47:47 +00:00
}
2018-01-03 19:19:49 +00:00
if streamQuota == 0 { // Used up all the locally cached stream quota.
// Get all the stream quota there is.
streamQuota, streamQuotaVer, err = s.sendQuotaPool.get(math.MaxInt32, s.waiters)
if err != nil {
return err
}
2017-09-30 16:47:47 +00:00
}
2018-01-03 19:19:49 +00:00
if size > streamQuota {
size = streamQuota
2017-09-30 16:47:47 +00:00
}
2018-01-03 19:19:49 +00:00
// Get size worth quota from transport.
tq, _, err := t.sendQuotaPool.get(size, s.waiters)
if err != nil {
return err
2017-09-30 16:47:47 +00:00
}
2018-01-03 19:19:49 +00:00
if tq < size {
size = tq
2017-09-30 16:47:47 +00:00
}
2018-01-03 19:19:49 +00:00
ltq, _, err := t.localSendQuota.get(size, s.waiters)
if err != nil {
return err
}
// even if ltq is smaller than size we don't adjust size since,
// ltq is only a soft limit.
streamQuota -= size
p := r[:size]
// Reset ping strikes when sending data since this might cause
// the peer to send ping.
atomic.StoreUint32(&t.resetPingStrikes, 1)
success := func() {
ltq := ltq
t.controlBuf.put(&dataFrame{streamID: s.id, endStream: false, d: p, f: func() {
t.localSendQuota.add(ltq)
}})
r = r[size:]
}
failure := func() { // The stream quota version must have changed.
// Our streamQuota cache is invalidated now, so give it back.
s.sendQuotaPool.lockedAdd(streamQuota + size)
}
if !s.sendQuotaPool.compareAndExecute(streamQuotaVer, success, failure) {
// Couldn't send this chunk out.
t.sendQuotaPool.add(size)
t.localSendQuota.add(ltq)
streamQuota = 0
2017-01-26 15:51:44 +00:00
}
}
}
2018-01-03 19:19:49 +00:00
if streamQuota > 0 {
// ADd the left over quota back to stream.
s.sendQuotaPool.add(streamQuota)
}
return nil
2017-01-26 15:51:44 +00:00
}
2017-09-30 16:47:47 +00:00
// keepalive running in a separate goroutine does the following:
// 1. Gracefully closes an idle connection after a duration of keepalive.MaxConnectionIdle.
// 2. Gracefully closes any connection after a duration of keepalive.MaxConnectionAge.
// 3. Forcibly closes a connection after an additive period of keepalive.MaxConnectionAgeGrace over keepalive.MaxConnectionAge.
// 4. Makes sure a connection is alive by sending pings with a frequency of keepalive.Time and closes a non-responsive connection
// after an additional duration of keepalive.Timeout.
func (t *http2Server) keepalive() {
p := &ping{}
var pingSent bool
maxIdle := time.NewTimer(t.kp.MaxConnectionIdle)
maxAge := time.NewTimer(t.kp.MaxConnectionAge)
keepalive := time.NewTimer(t.kp.Time)
// NOTE: All exit paths of this function should reset their
2018-01-03 19:19:49 +00:00
// respective timers. A failure to do so will cause the
2017-09-30 16:47:47 +00:00
// following clean-up to deadlock and eventually leak.
defer func() {
if !maxIdle.Stop() {
<-maxIdle.C
}
if !maxAge.Stop() {
<-maxAge.C
}
if !keepalive.Stop() {
<-keepalive.C
}
}()
for {
select {
case <-maxIdle.C:
2017-01-26 15:51:44 +00:00
t.mu.Lock()
2017-09-30 16:47:47 +00:00
idle := t.idle
if idle.IsZero() { // The connection is non-idle.
t.mu.Unlock()
maxIdle.Reset(t.kp.MaxConnectionIdle)
continue
2017-01-26 15:51:44 +00:00
}
2017-09-30 16:47:47 +00:00
val := t.kp.MaxConnectionIdle - time.Since(idle)
t.mu.Unlock()
if val <= 0 {
// The connection has been idle for a duration of keepalive.MaxConnectionIdle or more.
// Gracefully close the connection.
t.drain(http2.ErrCodeNo, []byte{})
// Reseting the timer so that the clean-up doesn't deadlock.
maxIdle.Reset(infinity)
return
}
maxIdle.Reset(val)
case <-maxAge.C:
t.drain(http2.ErrCodeNo, []byte{})
maxAge.Reset(t.kp.MaxConnectionAgeGrace)
select {
case <-maxAge.C:
// Close the connection after grace period.
t.Close()
// Reseting the timer so that the clean-up doesn't deadlock.
maxAge.Reset(infinity)
2018-01-03 19:19:49 +00:00
case <-t.ctx.Done():
2017-09-30 16:47:47 +00:00
}
return
case <-keepalive.C:
if atomic.CompareAndSwapUint32(&t.activity, 1, 0) {
pingSent = false
keepalive.Reset(t.kp.Time)
continue
}
if pingSent {
t.Close()
// Reseting the timer so that the clean-up doesn't deadlock.
keepalive.Reset(infinity)
return
}
pingSent = true
t.controlBuf.put(p)
keepalive.Reset(t.kp.Timeout)
2018-01-03 19:19:49 +00:00
case <-t.ctx.Done():
2017-09-30 16:47:47 +00:00
return
2017-01-26 15:51:44 +00:00
}
}
}
2017-09-30 16:47:47 +00:00
var goAwayPing = &ping{data: [8]byte{1, 6, 1, 8, 0, 3, 3, 9}}
2018-01-03 19:19:49 +00:00
// TODO(mmukhi): A lot of this code(and code in other places in the tranpsort layer)
// is duplicated between the client and the server.
// The transport layer needs to be refactored to take care of this.
func (t *http2Server) itemHandler(i item) error {
switch i := i.(type) {
case *dataFrame:
if err := t.framer.fr.WriteData(i.streamID, i.endStream, i.d); err != nil {
return err
}
i.f()
return nil
case *headerFrame:
t.hBuf.Reset()
for _, f := range i.hf {
t.hEnc.WriteField(f)
}
first := true
endHeaders := false
for !endHeaders {
size := t.hBuf.Len()
if size > http2MaxFrameLen {
size = http2MaxFrameLen
} else {
endHeaders = true
}
var err error
if first {
first = false
err = t.framer.fr.WriteHeaders(http2.HeadersFrameParam{
StreamID: i.streamID,
BlockFragment: t.hBuf.Next(size),
EndStream: i.endStream,
EndHeaders: endHeaders,
})
} else {
err = t.framer.fr.WriteContinuation(
i.streamID,
endHeaders,
t.hBuf.Next(size),
)
}
if err != nil {
return err
}
}
atomic.StoreUint32(&t.resetPingStrikes, 1)
return nil
case *windowUpdate:
return t.framer.fr.WriteWindowUpdate(i.streamID, i.increment)
case *settings:
return t.framer.fr.WriteSettings(i.ss...)
case *settingsAck:
return t.framer.fr.WriteSettingsAck()
case *resetStream:
return t.framer.fr.WriteRSTStream(i.streamID, i.code)
case *goAway:
t.mu.Lock()
if t.state == closing {
t.mu.Unlock()
// The transport is closing.
return fmt.Errorf("transport: Connection closing")
}
sid := t.maxStreamID
if !i.headsUp {
// Stop accepting more streams now.
t.state = draining
if len(t.activeStreams) == 0 {
i.closeConn = true
}
t.mu.Unlock()
if err := t.framer.fr.WriteGoAway(sid, i.code, i.debugData); err != nil {
return err
}
if i.closeConn {
// Abruptly close the connection following the GoAway (via
// loopywriter). But flush out what's inside the buffer first.
t.controlBuf.put(&flushIO{closeTr: true})
}
return nil
}
t.mu.Unlock()
// For a graceful close, send out a GoAway with stream ID of MaxUInt32,
// Follow that with a ping and wait for the ack to come back or a timer
// to expire. During this time accept new streams since they might have
// originated before the GoAway reaches the client.
// After getting the ack or timer expiration send out another GoAway this
// time with an ID of the max stream server intends to process.
if err := t.framer.fr.WriteGoAway(math.MaxUint32, http2.ErrCodeNo, []byte{}); err != nil {
return err
}
if err := t.framer.fr.WritePing(false, goAwayPing.data); err != nil {
return err
}
go func() {
timer := time.NewTimer(time.Minute)
defer timer.Stop()
2017-01-26 15:51:44 +00:00
select {
2018-01-03 19:19:49 +00:00
case <-t.drainChan:
case <-timer.C:
case <-t.ctx.Done():
2017-01-26 15:51:44 +00:00
return
}
2018-01-03 19:19:49 +00:00
t.controlBuf.put(&goAway{code: i.code, debugData: i.debugData})
}()
return nil
case *flushIO:
if err := t.framer.writer.Flush(); err != nil {
return err
}
if i.closeTr {
return ErrConnClosing
}
return nil
case *ping:
if !i.ack {
t.bdpEst.timesnap(i.data)
2017-01-26 15:51:44 +00:00
}
2018-01-03 19:19:49 +00:00
return t.framer.fr.WritePing(i.ack, i.data)
default:
err := status.Errorf(codes.Internal, "transport: http2Server.controller got unexpected item type %t", i)
errorf("%v", err)
return err
2017-01-26 15:51:44 +00:00
}
}
// Close starts shutting down the http2Server transport.
// TODO(zhaoq): Now the destruction is not blocked on any pending streams. This
// could cause some resource issue. Revisit this later.
2018-01-03 19:19:49 +00:00
func (t *http2Server) Close() error {
2017-01-26 15:51:44 +00:00
t.mu.Lock()
if t.state == closing {
t.mu.Unlock()
return errors.New("transport: Close() was already called")
}
t.state = closing
streams := t.activeStreams
t.activeStreams = nil
t.mu.Unlock()
2018-01-03 19:19:49 +00:00
t.cancel()
err := t.conn.Close()
2017-01-26 15:51:44 +00:00
// Cancel all active streams.
for _, s := range streams {
s.cancel()
}
if t.stats != nil {
connEnd := &stats.ConnEnd{}
t.stats.HandleConn(t.ctx, connEnd)
}
2018-01-03 19:19:49 +00:00
return err
2017-01-26 15:51:44 +00:00
}
// closeStream clears the footprint of a stream when the stream is not needed
// any more.
func (t *http2Server) closeStream(s *Stream) {
t.mu.Lock()
delete(t.activeStreams, s.id)
2017-09-30 16:47:47 +00:00
if len(t.activeStreams) == 0 {
t.idle = time.Now()
}
2017-01-26 15:51:44 +00:00
if t.state == draining && len(t.activeStreams) == 0 {
2018-01-03 19:19:49 +00:00
defer t.controlBuf.put(&flushIO{closeTr: true})
2017-01-26 15:51:44 +00:00
}
t.mu.Unlock()
// In case stream sending and receiving are invoked in separate
// goroutines (e.g., bi-directional streaming), cancel needs to be
// called to interrupt the potential blocking on other goroutines.
s.cancel()
s.mu.Lock()
if s.state == streamDone {
s.mu.Unlock()
return
}
s.state = streamDone
s.mu.Unlock()
}
func (t *http2Server) RemoteAddr() net.Addr {
return t.remoteAddr
}
func (t *http2Server) Drain() {
2017-09-30 16:47:47 +00:00
t.drain(http2.ErrCodeNo, []byte{})
}
func (t *http2Server) drain(code http2.ErrCode, debugData []byte) {
t.mu.Lock()
defer t.mu.Unlock()
if t.drainChan != nil {
return
}
t.drainChan = make(chan struct{})
t.controlBuf.put(&goAway{code: code, debugData: debugData, headsUp: true})
}
var rgen = rand.New(rand.NewSource(time.Now().UnixNano()))
func getJitter(v time.Duration) time.Duration {
if v == infinity {
return 0
}
// Generate a jitter between +/- 10% of the value.
r := int64(v / 10)
j := rgen.Int63n(2*r) - r
return time.Duration(j)
2017-01-26 15:51:44 +00:00
}