## 11\. Upstreams
*地址*:/upstreams
*說明*:Upstream 是虛擬主機抽象,對給定的多個服務節點按照配置規則進行負載均衡。Upstream 的地址信息可以直接配置到`Route`(或`Service`) 上,當 Upstream 有重復時,就需要用“引用”方式避免重復了。
### 11.1 請求方法
| NAME | 請求URI | 請求body | 說明 |
| --- | --- | --- | --- |
| POST | /upstreams | {...} | 新增upstreams |
| GET | /upstreams | | 查詢upstreams列表 |
| GET | /upstreams/{name or id} | | 查詢單個upstream |
| GET | /targets/{target host:port or id}/upstream | | 同上 |
| PATCH | /upstreams/{name or id} | {...} | 更新upstream |
| ~ | /targets/{target host:port or id}/upstream | {...} | 同上 |
| PUT | /upstreams/{name or id} | | 新增/更新upstream |
| ~ | /targets/{target host:port or id}/upstream | | 同上 |
| DELETE | /upstreams/{name or id} | | 刪除upstream |
| ~ | /targets/{target host:port or id}/upstream | | 同上 |
| GET | /upstreams/{name or id}/health | | 獲取upstream健康狀態 |
### 11.2 body 請求參數
| 參數名 | 可選 | 默認值 | 說明 | 示例 |
| --- | --- | --- | --- | --- |
| name | 可選 | | 標識upsream名稱 | examples.v1.upstream |
| hash\_on | 可選 | none | | |
| hash\_fallback | 可選 | | One of:`none`,`consumer`,`ip`,`header`, or`cookie` | |
| hash\_on\_header | 可選 | | The header name to take the value from as hash input. Only required when`hash_on`is set to`header`. | |
| hash\_fallback\_header | 可選 | | The header name to take the value from as hash input. Only required when`hash_fallback`is set to`header`. | |
| hash\_on\_cookie | 可選 | | The cookie name to take the value from as hash input. Only required when`hash_on`or`hash_fallback`is set to`cookie`. If the specified cookie is not in the request, Kong will generate a value and set the cookie in the response. | |
| hash\_on\_cookie\_path | 可選 | / | The cookie path to set in the response headers. Only required when`hash_on`or`hash_fallback`is set to`cookie`. Defaults to`"/"`. | |
| slots | 可選 | 10000 | `10`\-`65536` | |
| healthchecks | 參見active和passive | | | |
| tags | 可選 | | 標簽 | |
healthchecks(ACTIVE)
| https\_verify\_certificate | 可選 | true | | |
| --- | --- | --- | --- | --- |
| unhealthy.http\_statuses | 可選 | \[429, 404, 500, 501, 502, 503, 504, 505\] | 非健康的http狀態碼 | |
| unhealthy.tcp\_failures | 可選 | 0 | 非健康tcp失敗次數 | |
| unhealthy.timeouts | 可選 | 0 | 超時次數,超過該值就設置為unhealthy | |
| unhealthy.http\_failures | 可選 | 0 | http訪問失敗次數,超過該值設置為unhealthy,為0不探測 | |
| unhealthy.interval | 可選 | 0 | 為0 不探測,兩次探測非健康檢查的間隔時長 | |
| http\_path | 可選 | / | 健康檢查的訪問路徑 | |
| timeout | 可選 | 1 | socket超時時長 | |
| healthy.http\_statuses | 可選 | \[200, 302\] | http狀態為設置值其中 個,則對成功指標進行+1 | |
| healthy.interval | 可選 | 0 | 兩次健康檢查探測的間隔時長(單位為秒) | |
| healthy.successes | 可選 | 0 | 健康的成功計數指標 | |
| https\_sni | 可選 | | | |
| concurrency | 可選 | 10 | 并發數 | |
| type | 可選 | http | `tcp`,`http`or`https` | |
healthchecks(passive)
| unhealthy.http\_failures | 可選 | 0 | 代理流量中的HTTP失敗數(由定義健康檢查。被動。不健康.http\_status)將目標視為不健康,如被動運行狀況檢查所觀察到的 | 1 |
| --- | --- | --- | --- | --- |
| unhealthy.http\_statuses | 可選 | \[429, 500, 503\] | 訪問http的狀態碼為其中之一的 | \[429,500,503\] |
| unhealthy.tcp\_failures | 可選 | 0 | 被動運行狀況檢查觀察到的被代理流量中認為目標不正常的TCP故障數 | 1 |
| unhealthy.timeouts | 可選 | 0 | 被動運行狀況檢查所觀察到的代理流量中認為目標不正常的超時數 | 1 |
| type | 可選 | http | `tcp`,`http`or`https` | http |
| healthy.successes | 可選 | 0 | 成功的次數 | 0 |
| healthy.http\_statuses | 可選 | \[200, 201, 202, 203, 204, 205, 206, 207, 208, 226, 300, 301, 302, 303, 304, 305, 306, 307, 308\] | http成功的狀態 | |
### 11.3 數據樣例
body請求參數
```
{
"id": "91020192-062d-416f-a275-9addeeaffaf2",
"created_at": 1422386534,
"name": "my-upstream",
"hash_on": "none",
"hash_fallback": "none",
"hash_on_cookie_path": "/",
"slots": 10000,
"healthchecks": {
"active": {
"https_verify_certificate": true,
"unhealthy": {
"http_statuses": [429, 404, 500, 501, 502, 503, 504, 505],
"tcp_failures": 0,
"timeouts": 0,
"http_failures": 0,
"interval": 0
},
"http_path": "/",
"timeout": 1,
"healthy": {
"http_statuses": [200, 302],
"interval": 0,
"successes": 0
},
"https_sni": "example.com",
"concurrency": 10,
"type": "http"
},
"passive": {
"unhealthy": {
"http_failures": 0,
"http_statuses": [429, 500, 503],
"tcp_failures": 0,
"timeouts": 0
},
"type": "http",
"healthy": {
"successes": 0,
"http_statuses": [200, 201, 202, 203, 204, 205, 206, 207, 208, 226, 300, 301, 302, 303, 304, 305, 306, 307, 308]
}
}
},
"tags": ["user-level", "low-priority"]
}
```
upstream列表
```
{
"data": [{
"id": "a2e013e8-7623-4494-a347-6d29108ff68b",
"created_at": 1422386534,
"name": "my-upstream",
"hash_on": "none",
"hash_fallback": "none",
"hash_on_cookie_path": "/",
"slots": 10000,
"healthchecks": {
"active": {
"https_verify_certificate": true,
"unhealthy": {
"http_statuses": [429, 404, 500, 501, 502, 503, 504, 505],
"tcp_failures": 0,
"timeouts": 0,
"http_failures": 0,
"interval": 0
},
"http_path": "/",
"timeout": 1,
"healthy": {
"http_statuses": [200, 302],
"interval": 0,
"successes": 0
},
"https_sni": "example.com",
"concurrency": 10,
"type": "http"
},
"passive": {
"unhealthy": {
"http_failures": 0,
"http_statuses": [429, 500, 503],
"tcp_failures": 0,
"timeouts": 0
},
"type": "http",
"healthy": {
"successes": 0,
"http_statuses": [200, 201, 202, 203, 204, 205, 206, 207, 208, 226, 300, 301, 302, 303, 304, 305, 306, 307, 308]
}
}
},
"tags": ["user-level", "low-priority"]
}, {
"id": "147f5ef0-1ed6-4711-b77f-489262f8bff7",
"created_at": 1422386534,
"name": "my-upstream",
"hash_on": "none",
"hash_fallback": "none",
"hash_on_cookie_path": "/",
"slots": 10000,
"healthchecks": {
"active": {
"https_verify_certificate": true,
"unhealthy": {
"http_statuses": [429, 404, 500, 501, 502, 503, 504, 505],
"tcp_failures": 0,
"timeouts": 0,
"http_failures": 0,
"interval": 0
},
"http_path": "/",
"timeout": 1,
"healthy": {
"http_statuses": [200, 302],
"interval": 0,
"successes": 0
},
"https_sni": "example.com",
"concurrency": 10,
"type": "http"
},
"passive": {
"unhealthy": {
"http_failures": 0,
"http_statuses": [429, 500, 503],
"tcp_failures": 0,
"timeouts": 0
},
"type": "http",
"healthy": {
"successes": 0,
"http_statuses": [200, 201, 202, 203, 204, 205, 206, 207, 208, 226, 300, 301, 302, 303, 304, 305, 306, 307, 308]
}
}
},
"tags": ["admin", "high-priority", "critical"]
}],
"next": "http://localhost:8001/upstreams?offset=6378122c-a0a1-438d-a5c6-efabae9fb969"
}
```
- 1. 概述
- 2. 快速安裝
- 2.1 環境準備
- 2.2 開始安裝
- 2.3 啟動/關閉kongx
- 2.4 使用kongx
- 3. 使用指南
- 3.0 mockbin配置示例
- 3.0.1 不含upstream的配置
- 3.0.2 含upstream的配置
- 3.1 Gateway
- 3.1.1 Upstreams
- 3.1.1.1 新增/修改upstreams
- 3.1.1.2 管理targets
- 3.1.1.3 設置健康檢查
- 3.1.1.4 upstream視圖
- 3.1.2 Services
- 3.1.2.1 新建/修改service
- 3.1.2.2 添加服務路由
- 3.1.2.3 添加服務插件
- 3.1.2.4 同步services
- 3.1.2.5 services視圖
- 3.1.3 Routes
- 3.1.3.1 路由列表
- 3.1.3.2 修改路由
- 3.1.3.3 批量修改HOSTS
- 3.1.4 Plugins
- 3.1.4.1 新增插件
- 3.1.4.2 插件列表
- 3.1.5 Consumers
- 3.1.5.1 新建/修改consumers
- 3.1.6 Kong Shell
- 3.1.6.1 shell安裝
- 3.1.6.2 使用Shell
- 3.2 系統管理
- 3.2.1 用戶管理
- 3.2.2 角色管理
- 3.2.3 用戶組管理
- 3.2.4 菜單管理
- 3.3 參數管理
- 3.3.1 環境管理
- 3.3.2 系統參數
- 3.3.3 如何增加多個環境?
- 3.4 日志管理
- 3.4.1 操作日志
- 3.4.2 同步日志
- 3.5 工具箱
- 3.5.1 Kong Shell
- 3.5.2 切換工作臺
- 3.6 網關流水線
- 3.6.1 Pipeline
- 4. 最佳實踐
- 4.1 灰度插件canary使用
- 4.2 kong與consul集成
- 4.2.1 使用kong提供dns服務
- 4.2.2 使用dnsmasq提供dns服務
- 4.2.3 使用consul自主發現服務
- 4.3 kong健康檢查
- 4.3.1 簡介
- 4.3.2 健康檢查(主動檢查)
- 4.3.3 斷路器(被動檢查)
- 4.3.4 總結
- 4.4 認證插件之key-auth
- 4.5 認證插件之basic-auth
- 4.6 認證插件之oauth2-auth
- 4.7 認證插件之jwt
- 4.8 kong自定義access_log格式
- 4.8.1 前言
- 4.8.2 配置文本格式
- 4.8.3 配置JSON格式
- 4.9 kong的訪問監控
- 4.9.1 解決方案
- 4.9.2 方案實施
- 4.9.3 接入grafana報表
- 5. 常見問題
- 5.1 默認賬號及密碼
- 5.2 新增用戶默認密碼為123456
- 5.3 如何設置超級管理員
- 5.4 密碼忘記了咋辦
- 6. Kong
- 6.1 Kong簡介
- 6.2 kong安裝指南
- 6.2.1 kong安裝-RPM
- 6.2.2 kong安裝-源碼
- 6.2.3 kong基于yum源安裝
- 6.3 Admin API
- 6.3.1 API支持兩種內容類型
- 6.3.2 聲明式配置(Declarative Configuration)
- 6.3.3 獲取實體schema
- 6.3.4 services
- 6.3.5 Routes
- 6.3.6 Consumers
- 6.3.7 Plugins
- 6.3.8 Certficate
- 6.3.9 CA certficate(1.3.x+以上版本)
- 6.3.10 SNI
- 6.3.11 Upstreams
- 6.3.12 Targets
- 6.4 Kong使用
- 6.4.1 DB-LESS模式
- 6.4.2 DB模式