Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.
 
 
 
 
 
 
Go to file
Daniel Upton 653b8c4f9d proxycfg: server-local config entry data sources
This is the OSS portion of enterprise PR 2056.

This commit provides server-local implementations of the proxycfg.ConfigEntry
and proxycfg.ConfigEntryList interfaces, that source data from streaming events.

It makes use of the LocalMaterializer type introduced for peering replication,
adding the necessary support for authorization.

It also adds support for "wildcard" subscriptions (within a topic) to the event
publisher, as this is needed to fetch service-resolvers for all services when
configuring mesh gateways.

Currently, events will be emitted for just the ingress-gateway, service-resolver,
and mesh config entry types, as these are the only entries required by proxycfg
— the events will be emitted on topics named IngressGateway, ServiceResolver,
and MeshConfig topics respectively.

Though these events will only be consumed "locally" for now, they can also be
consumed via the gRPC endpoint (confirmed using grpcurl) so using them from
client agents should be a case of swapping the LocalMaterializer for an
RPCMaterializer.
2022-07-04 10:48:36 +01:00
.changelog Fix spelling mistake in serverless patcher (#13607) 2022-06-29 15:21:21 -04:00
.circleci test: run Envoy integration tests against both servers and clients (#13610) 2022-06-28 13:15:45 +01:00
.github Fix verifications by using updated arm package names (#13601) 2022-06-27 14:00:27 -07:00
.release Turn off sec-scanner check (#13614) 2022-06-27 15:52:51 -07:00
acl Allow the /v1/internal/acl/authorize endpoint to authorize the “peering” resource (#13646) 2022-06-29 16:38:17 -04:00
agent proxycfg: server-local config entry data sources 2022-07-04 10:48:36 +01:00
api peering: add imported/exported counts to peering (#13644) 2022-06-29 14:07:30 -07:00
bench
build-support Minor cleanup for build-date script 2022-06-09 17:07:41 -07:00
command xds: modify rbac rules to use the XFCC header for peered L7 enforcement (#13629) 2022-06-29 10:29:54 -05:00
connect Fix race during proxy closing (#13283) 2022-05-27 16:52:03 -04:00
contributing Move contributing to docs 2021-08-30 16:17:09 -04:00
docs docs: instructions for interacting with the private gRPC server locally 2022-06-15 18:26:58 +01:00
grafana add readme outlining how to edit and publish 2021-01-12 14:47:11 -08:00
internal internal: port RPC glue changes from Enterprise (#13034) 2022-05-11 15:03:07 -07:00
ipaddr Ensure Consul is IPv6 compliant (#5468) 2019-06-04 10:02:38 -04:00
lib no 1.9 style metrics (#13532) 2022-06-29 09:46:37 -07:00
logging Add support for merge-central-config query param (#13001) 2022-05-25 13:20:17 -07:00
proto proxycfg: server-local config entry data sources 2022-07-04 10:48:36 +01:00
proto-public Specify go_package explicitly 2022-05-24 10:22:53 -07:00
sdk add general runstep test helper instead of copying it all over the place (#13013) 2022-05-10 15:25:51 -05:00
sentinel re-run gofmt on 1.17 (#11579) 2021-11-16 12:04:01 -06:00
service_os re-run gofmt on 1.17 (#11579) 2021-11-16 12:04:01 -06:00
snapshot Vendor in rpc mono repo for net/rpc fork, go-msgpack, msgpackrpc. (#12311) 2022-02-14 09:45:45 -08:00
test xds: mesh gateways now correctly load up peer-exported discovery chains using L7 protocols (#13624) 2022-06-28 14:52:25 -05:00
testrpc peering: initial sync (#12842) 2022-04-21 17:34:40 -05:00
tlsutil Update go version to 1.18.1 2022-04-18 11:41:10 -04:00
tools/private-grpc-proxy docs: instructions for interacting with the private gRPC server locally 2022-06-15 18:26:58 +01:00
types agent: convert listener config to TLS types (#12522) 2022-03-24 15:32:25 -04:00
ui ui: allow searching services by admin-partition (#13650) 2022-06-30 17:24:52 +01:00
version [CI-only] Dev tag update for main (#13541) 2022-06-24 13:45:57 -07:00
website docs: add controller to cluster peering docs (#13639) 2022-06-29 11:08:37 -07:00
.dockerignore
.gitignore changelog: snapshot-agent acl token fix for CLI and ENV 2022-04-25 16:46:55 -04:00
.golangci.yml Fix proto lint errors after version bump 2022-05-24 18:44:54 -07:00
CHANGELOG.md Add changelog for 1.13.0-alpha2 2022-06-21 15:07:13 -07:00
Dockerfile [CI-only] Support UBI images (#13232) 2022-05-26 09:49:47 -07:00
GNUmakefile tests: ensure integration tests show logs from the containers to help debugging (#13593) 2022-06-24 10:26:17 -05:00
LICENSE
NOTICE.md add copyright notice file 2018-07-09 10:58:26 -07:00
README.md Adjust README header to work in light and dark modes 2022-02-07 16:46:46 -08:00
Vagrantfile
fixup_acl_move.sh Fixup script 2 2022-04-05 14:52:43 -07:00
go.mod Update go-grpc/grpc to resolve conection memory leak 2022-06-08 11:29:29 +01:00
go.sum Update go-grpc/grpc to resolve conection memory leak 2022-06-08 11:29:29 +01:00
main.go Refactor some functions for better enterprise use (#13280) 2022-05-30 09:46:55 -04:00

README.md

Consul logo Consul

Docker Pulls Go Report Card

Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.

Consul provides several key features:

  • Multi-Datacenter - Consul is built to be datacenter aware, and can support any number of regions without complex configuration.

  • Service Mesh/Service Segmentation - Consul Connect enables secure service-to-service communication with automatic TLS encryption and identity-based authorization. Applications can use sidecar proxies in a service mesh configuration to establish TLS connections for inbound and outbound connections without being aware of Connect at all.

  • Service Discovery - Consul makes it simple for services to register themselves and to discover other services via a DNS or HTTP interface. External services such as SaaS providers can be registered as well.

  • Health Checking - Health Checking enables Consul to quickly alert operators about any issues in a cluster. The integration with service discovery prevents routing traffic to unhealthy hosts and enables service level circuit breakers.

  • Key/Value Storage - A flexible key/value store enables storing dynamic configuration, feature flagging, coordination, leader election and more. The simple HTTP API makes it easy to use anywhere.

Consul runs on Linux, macOS, FreeBSD, Solaris, and Windows and includes an optional browser based UI. A commercial version called Consul Enterprise is also available.

Please note: We take Consul's security and our users' trust very seriously. If you believe you have found a security issue in Consul, please responsibly disclose by contacting us at security@hashicorp.com.

Quick Start

A few quick start guides are available on the Consul website:

Documentation

Full, comprehensive documentation is available on the Consul website:

https://www.consul.io/docs

Contributing

Thank you for your interest in contributing! Please refer to CONTRIBUTING.md for guidance. For contributions specifically to the browser based UI, please refer to the UI's README.md for guidance.