2014-11-25 16:06:14 +00:00
|
|
|
package consul
|
|
|
|
|
|
|
|
import (
|
|
|
|
"fmt"
|
|
|
|
"time"
|
2014-12-12 23:43:34 +00:00
|
|
|
|
2014-12-19 00:57:49 +00:00
|
|
|
"github.com/armon/go-metrics"
|
2017-07-06 10:34:00 +00:00
|
|
|
"github.com/hashicorp/consul/agent/structs"
|
2014-11-25 16:06:14 +00:00
|
|
|
)
|
|
|
|
|
2016-11-05 04:53:22 +00:00
|
|
|
const (
|
|
|
|
// maxInvalidateAttempts limits how many invalidate attempts are made
|
|
|
|
maxInvalidateAttempts = 6
|
|
|
|
|
|
|
|
// invalidateRetryBase is a baseline retry time
|
|
|
|
invalidateRetryBase = 10 * time.Second
|
|
|
|
)
|
|
|
|
|
2015-09-15 12:22:08 +00:00
|
|
|
// initializeSessionTimers is used when a leader is newly elected to create
|
2014-12-12 23:43:34 +00:00
|
|
|
// a new map to track session expiration and to reset all the timers from
|
|
|
|
// the previously known set of timers.
|
2014-11-25 16:06:14 +00:00
|
|
|
func (s *Server) initializeSessionTimers() error {
|
2014-12-12 23:43:34 +00:00
|
|
|
// Scan all sessions and reset their timer
|
2014-11-25 16:06:14 +00:00
|
|
|
state := s.fsm.State()
|
2017-01-24 18:08:14 +00:00
|
|
|
_, sessions, err := state.SessionList(nil)
|
2014-11-25 16:06:14 +00:00
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
for _, session := range sessions {
|
2014-12-12 23:43:34 +00:00
|
|
|
if err := s.resetSessionTimer(session.ID, session); err != nil {
|
2014-11-25 16:06:14 +00:00
|
|
|
return err
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
2014-12-12 23:43:34 +00:00
|
|
|
// resetSessionTimer is used to renew the TTL of a session.
|
|
|
|
// This can be used for new sessions and existing ones. A session
|
|
|
|
// will be faulted in if not given.
|
2014-11-25 16:06:14 +00:00
|
|
|
func (s *Server) resetSessionTimer(id string, session *structs.Session) error {
|
2014-12-12 23:43:34 +00:00
|
|
|
// Fault the session in if not given
|
2014-11-25 16:06:14 +00:00
|
|
|
if session == nil {
|
|
|
|
state := s.fsm.State()
|
2017-01-24 18:08:14 +00:00
|
|
|
_, s, err := state.SessionGet(nil, id)
|
2014-12-12 23:43:34 +00:00
|
|
|
if err != nil {
|
|
|
|
return err
|
2014-11-25 16:06:14 +00:00
|
|
|
}
|
2014-12-12 23:43:34 +00:00
|
|
|
if s == nil {
|
|
|
|
return fmt.Errorf("Session '%s' not found", id)
|
|
|
|
}
|
|
|
|
session = s
|
2014-11-25 16:06:14 +00:00
|
|
|
}
|
|
|
|
|
2014-12-13 05:42:59 +00:00
|
|
|
// Bail if the session has no TTL, fast-path some common inputs
|
2014-12-12 23:43:34 +00:00
|
|
|
switch session.TTL {
|
2014-12-13 05:42:59 +00:00
|
|
|
case "", "0", "0s", "0m", "0h":
|
2014-12-11 01:49:06 +00:00
|
|
|
return nil
|
|
|
|
}
|
2014-11-25 16:06:14 +00:00
|
|
|
|
2014-12-12 23:43:34 +00:00
|
|
|
// Parse the TTL, and skip if zero time
|
2014-12-11 01:49:06 +00:00
|
|
|
ttl, err := time.ParseDuration(session.TTL)
|
|
|
|
if err != nil {
|
|
|
|
return fmt.Errorf("Invalid Session TTL '%s': %v", session.TTL, err)
|
2014-11-25 16:06:14 +00:00
|
|
|
}
|
2014-12-11 01:49:06 +00:00
|
|
|
if ttl == 0 {
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
2017-06-27 13:25:25 +00:00
|
|
|
s.createSessionTimer(session.ID, ttl)
|
2014-12-12 23:43:34 +00:00
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
2017-06-27 13:25:25 +00:00
|
|
|
func (s *Server) createSessionTimer(id string, ttl time.Duration) {
|
|
|
|
// Reset the session timer
|
2014-12-12 23:43:34 +00:00
|
|
|
// Adjust the given TTL by the TTL multiplier. This is done
|
|
|
|
// to give a client a grace period and to compensate for network
|
|
|
|
// and processing delays. The contract is that a session is not expired
|
|
|
|
// before the TTL, but there is no explicit promise about the upper
|
|
|
|
// bound so this is allowable.
|
|
|
|
ttl = ttl * structs.SessionTTLMultiplier
|
2017-06-27 13:25:25 +00:00
|
|
|
s.sessionTimers.ResetOrCreate(id, ttl, func() { s.invalidateSession(id) })
|
2014-11-25 16:06:14 +00:00
|
|
|
}
|
|
|
|
|
2014-12-12 23:43:34 +00:00
|
|
|
// invalidateSession is invoked when a session TTL is reached and we
|
|
|
|
// need to invalidate the session.
|
|
|
|
func (s *Server) invalidateSession(id string) {
|
2014-12-19 00:57:49 +00:00
|
|
|
defer metrics.MeasureSince([]string{"consul", "session_ttl", "invalidate"}, time.Now())
|
2017-10-04 23:43:27 +00:00
|
|
|
defer metrics.MeasureSince([]string{"session_ttl", "invalidate"}, time.Now())
|
2017-06-27 13:25:25 +00:00
|
|
|
|
2014-12-12 23:43:34 +00:00
|
|
|
// Clear the session timer
|
2017-06-27 13:25:25 +00:00
|
|
|
s.sessionTimers.Del(id)
|
2014-12-12 23:43:34 +00:00
|
|
|
|
|
|
|
// Create a session destroy request
|
|
|
|
args := structs.SessionRequest{
|
|
|
|
Datacenter: s.config.Datacenter,
|
|
|
|
Op: structs.SessionDestroy,
|
|
|
|
Session: structs.Session{
|
|
|
|
ID: id,
|
|
|
|
},
|
|
|
|
}
|
|
|
|
|
2016-11-05 04:53:22 +00:00
|
|
|
// Retry with exponential backoff to invalidate the session
|
|
|
|
for attempt := uint(0); attempt < maxInvalidateAttempts; attempt++ {
|
|
|
|
_, err := s.raftApply(structs.SessionRequestType, args)
|
|
|
|
if err == nil {
|
|
|
|
s.logger.Printf("[DEBUG] consul.state: Session %s TTL expired", id)
|
|
|
|
return
|
|
|
|
}
|
|
|
|
|
2014-12-12 23:43:34 +00:00
|
|
|
s.logger.Printf("[ERR] consul.session: Invalidation failed: %v", err)
|
2016-11-05 04:53:22 +00:00
|
|
|
time.Sleep((1 << attempt) * invalidateRetryBase)
|
2014-12-12 23:43:34 +00:00
|
|
|
}
|
2016-11-05 04:53:22 +00:00
|
|
|
s.logger.Printf("[ERR] consul.session: maximum revoke attempts reached for session: %s", id)
|
2014-12-12 23:43:34 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
// clearSessionTimer is used to clear the session time for
|
|
|
|
// a single session. This is used when a session is destroyed
|
|
|
|
// explicitly and no longer needed.
|
2014-11-25 16:06:14 +00:00
|
|
|
func (s *Server) clearSessionTimer(id string) error {
|
2017-06-27 13:25:25 +00:00
|
|
|
s.sessionTimers.Stop(id)
|
2014-11-25 16:06:14 +00:00
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
2014-12-12 23:43:34 +00:00
|
|
|
// clearAllSessionTimers is used when a leader is stepping
|
|
|
|
// down and we no longer need to track any session timers.
|
2014-11-25 16:06:14 +00:00
|
|
|
func (s *Server) clearAllSessionTimers() error {
|
2017-06-27 13:25:25 +00:00
|
|
|
s.sessionTimers.StopAll()
|
2014-11-25 16:06:14 +00:00
|
|
|
return nil
|
|
|
|
}
|
2014-12-19 00:57:49 +00:00
|
|
|
|
|
|
|
// sessionStats is a long running routine used to capture
|
|
|
|
// the number of active sessions being tracked
|
|
|
|
func (s *Server) sessionStats() {
|
|
|
|
for {
|
|
|
|
select {
|
|
|
|
case <-time.After(5 * time.Second):
|
2017-06-27 13:25:25 +00:00
|
|
|
metrics.SetGauge([]string{"consul", "session_ttl", "active"}, float32(s.sessionTimers.Len()))
|
2017-10-04 23:43:27 +00:00
|
|
|
metrics.SetGauge([]string{"session_ttl", "active"}, float32(s.sessionTimers.Len()))
|
2014-12-19 00:57:49 +00:00
|
|
|
|
|
|
|
case <-s.shutdownCh:
|
|
|
|
return
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|