feat(istio): rate limit example

Author: rolandszoke

istio_examples/RateLimiting/adapter.yml

@@ -0,0 +1,17 @@
+apiVersion: config.istio.io/v1alpha2
+kind: memquota
+metadata:
+  name: handler
+  namespace: istio-system
+spec:
+  quotas:
+  - name: requestcount.quota.istio-system
+    maxAmount: 5000 # default max requests per second
+    validDuration: 1s
+    overrides:
+    - dimensions:
+        destination: github
+        source: api
+        sourceVersion: v2
+      maxAmount: 1 # api v2 can send 1 request to github per seconds
+      validDuration: 1s

istio_examples/RateLimiting/deploy.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+DIR=$(pwd)
+
+kubectl delete -f <(istioctl kube-inject -f $DIR/adapter.yml)
+kubectl delete -f <(istioctl kube-inject -f $DIR/instance.yml)
+kubectl delete -f <(istioctl kube-inject -f $DIR/rule.yml)
+
+kubectl apply -f <(istioctl kube-inject -f $DIR/adapter.yml)
+kubectl apply -f <(istioctl kube-inject -f $DIR/instance.yml)
+kubectl apply -f <(istioctl kube-inject -f $DIR/rule.yml)

istio_examples/RateLimiting/instance.yml

@@ -0,0 +1,11 @@
+apiVersion: config.istio.io/v1alpha2
+kind: quota
+metadata:
+  name: requestcount
+  namespace: istio-system
+spec:
+  dimensions:
+    source: source.labels["app"] | source.service | "unknown"
+    sourceVersion: source.labels["version"] | "unknown"
+    destination: destination.labels["app"] | destination.service | "unknown"
+    destinationVersion: destination.labels["version"] | "unknown"

istio_examples/RateLimiting/rule.yml

@@ -0,0 +1,10 @@
+apiVersion: config.istio.io/v1alpha2
+kind: rule
+metadata:
+  name: quota
+  namespace: istio-system
+spec:
+  actions:
+  - handler: handler.memquota
+    instances:
+    - requestcount.quota

istio_examples/Services/api/src/server.js

@@ -12,13 +12,26 @@ app.get('/api', (req, res) => res.json({
   requestedVersion: req.headers.version,
   version: VERSION
 }))
+
 app.get('/api/git', async (req, res) => {
   try {
-    const response = await request({
-      method: 'GET',
-      uri: `http://github.default.svc.cluster.local:5000/api/v1`
-    })
-    return res.json(JSON.parse(response))
+    return res.json(JSON.parse(
+      await request({
+        method: 'GET',
+        uri: `http://github.default.svc.cluster.local:5000/api/hello`
+    })))
+  } catch (err) {
+    console.log(err)
+    return res.sendStatus(500)
+  }
+})
+app.get('/api/git/repo', async (req, res) => {
+  try {
+    return res.json(JSON.parse(
+      await request({
+        method: 'GET',
+        uri: `http://github.default.svc.cluster.local:5000/api/search/repo`
+    })))
   } catch (err) {
     console.log(err)
     return res.sendStatus(500)

istio_examples/Services/github/src/server.js

@@ -8,7 +8,10 @@ app.use(cors())
 const PORT = process.env.PORT
 
 app.get('/healthz', (req, res) => res.sendStatus(200))
-app.get('/api/v1', async (req, res) => {
+app.get('/api/hello', (req, res) => res.json({
+  response: 'Hello world from github service in cluster!'
+}))
+app.get('/api/search/repo', async (req, res) => {
   try {
     const {items} = await request({
       method: 'GET',

istio_examples/Services/ui/src/src/App.js

@@ -10,7 +10,9 @@ class App extends Component {
     }
     this.callAPIv1 = this.callAPI.bind(this, 'api', {'version': 'v1'})
     this.callAPIv2 = this.callAPI.bind(this, 'api', {'version': 'v2'})
-    this.callAPIgit = this.callAPI.bind(this, 'api/git', {'version': 'v1'})
+    this.callAPIgit = this.callAPI.bind(this, '/api/git/repo', {'version': 'v1'})
+    this.callAPIgitv1 = this.callAPI.bind(this, '/api/git', {'version': 'v1'})
+    this.callAPIgitv2 = this.callAPI.bind(this, '/api/git', {'version': 'v2'})
   }
 
   callAPI(endpoint, headers) {
@@ -36,9 +38,11 @@ class App extends Component {
 
     return (
       <div className="App">
-        <button onClick={this.callAPIv1}>Call API v1</button>
-        <button onClick={this.callAPIv2}>Call API v2</button>
-        <button onClick={this.callAPIgit}>Call API git</button>
+        <button onClick={this.callAPIv1}>Call /api (v1)</button>
+        <button onClick={this.callAPIv2}>Call /api (v2)</button>
+        <button onClick={this.callAPIgitv1}>Call /api/git (v1)</button>
+        <button onClick={this.callAPIgitv2}>Call /api/git (v2)</button>
+        <button onClick={this.callAPIgit}>Call /api/git/repo (v1)</button>
         <p></p>
         {!this.state.error 
           ? _.map(data, (value, key) => {return(<div key={key}>{key}: <b>{value.toString()}</b></div>)})