4.17 Istio熔断限流实战：CircuitBreaker和LocalRateLimit保护核心服务

引言

熔断和限流是保护服务的重要机制。Istio通过DestinationRule和EnvoyFilter实现熔断和限流功能。本文将详细介绍熔断限流的实现方法。

一、熔断器概述

1.1 熔断器的作用

• 防止级联故障
• 快速失败
• 保护下游服务
• 自动恢复

1.2 熔断器状态

• Closed：正常
• Open：熔断
• Half-Open：半开

二、CircuitBreaker配置

2.1 基本配置

apiVersion: networking.istio.io/v1beta1
kind: DestinationRule
metadata:
  name: reviews
spec:
  host: reviews
  trafficPolicy:
    outlierDetection:
      consecutiveErrors: 5
      interval: 30s
      baseEjectionTime: 30s
      maxEjectionPercent: 50
      minHealthPercent: 50

2.2 高级配置

apiVersion: networking.istio.io/v1beta1
kind: DestinationRule
spec:
  trafficPolicy:
    outlierDetection:
      consecutive5xxErrors: 5
      consecutiveGatewayErrors: 5
      consecutiveLocalOriginFailures: 5
      interval: 30s
      baseEjectionTime: 30s
      maxEjectionPercent: 50
      minHealthPercent: 50
      splitExternalLocalOriginErrors: true

三、限流配置

3.1 LocalRateLimit

apiVersion: networking.istio.io/v1beta1
kind: EnvoyFilter
metadata:
  name: local-ratelimit
spec:
  workloadSelector:
    labels:
      app: productpage
  configPatches:
  - applyTo: HTTP_FILTER
    match:
      context: SIDECAR_INBOUND
      listener:
        filterChain:
          filter:
            name: "envoy.filters.network.http_connection_manager"
    patch:
      operation: INSERT_BEFORE
      value:
        name: envoy.filters.http.local_ratelimit
        typed_config:
          "@type": type.googleapis.com/envoy.extensions.filters.http.local_ratelimit.v3.LocalRateLimit
          stat_prefix: http_local_rate_limiter
          token_bucket:
            max_tokens: 100
            tokens_per_fill: 100
            fill_interval: 1s

3.2 全局限流

# 需要配置RateLimit服务
apiVersion: networking.istio.io/v1beta1
kind: EnvoyFilter
spec:
  configPatches:
  - applyTo: HTTP_FILTER
    match:
      context: SIDECAR_INBOUND
    patch:
      operation: INSERT_BEFORE
      value:
        name: envoy.filters.http.ratelimit
        typed_config:
          "@type": type.googleapis.com/envoy.extensions.filters.http.ratelimit.v3.RateLimit
          domain: ratelimit
          rate_limit_service:
            grpc_service:
              envoy_grpc:
                cluster_name: rate_limit_cluster

四、实战案例

4.1 保护数据库服务

apiVersion: networking.istio.io/v1beta1
kind: DestinationRule
metadata:
  name: mysql
spec:
  host: mysql
  trafficPolicy:
    connectionPool:
      tcp:
        maxConnections: 100
      http:
        http1MaxPendingRequests: 10
    outlierDetection:
      consecutiveErrors: 5
      interval: 30s
      baseEjectionTime: 30s
      maxEjectionPercent: 50

4.2 API限流

apiVersion: networking.istio.io/v1beta1
kind: EnvoyFilter
metadata:
  name: api-ratelimit
spec:
  workloadSelector:
    labels:
      app: api
  configPatches:
  - applyTo: HTTP_FILTER
    match:
      context: SIDECAR_INBOUND
    patch:
      operation: INSERT_BEFORE
      value:
        name: envoy.filters.http.local_ratelimit
        typed_config:
          "@type": type.googleapis.com/envoy.extensions.filters.http.local_ratelimit.v3.LocalRateLimit
          token_bucket:
            max_tokens: 1000
            tokens_per_fill: 1000
            fill_interval: 1s

五、操作管理

5.1 创建和查看

# 创建DestinationRule
kubectl apply -f destinationrule.yaml

# 查看熔断状态
istioctl proxy-config cluster <pod-name> | grep outlier

# 测试限流
for i in {1..200}; do curl http://<service>; done

六、最佳实践

6.1 配置建议

• 合理设置阈值
• 监控熔断状态
• 设置告警
• 逐步调整参数

总结

通过本文，你学会了：

1. ✅ 熔断器配置：基本配置、高级配置
2. ✅ 限流配置：LocalRateLimit、全局限流
3. ✅ 实战案例：保护数据库、API限流
4. ✅ 操作管理：创建、查看、测试

下一步学习

• 4.18 Istio多集群部署实战
• 4.19 Istio集群联邦实战

思考题

1. 熔断器如何保护服务？
2. 如何配置合适的限流策略？
3. 如何监控熔断和限流的效果？

---

提示：熔断限流是保护服务的重要机制。下一节我们将学习多集群部署。