@mark1russell7/machines 0.3.23 → 0.3.25

package/README.md

@@ -25,7 +25,7 @@ The algebra reads these documents. It gives the closed form of each timer, the f
 
 | Export | Identifier | System and version | Layer | Sources, by rung |
 | --- | --- | --- | --- | --- |
-| `LINUX_TCP` | `linux-tcp` | TCP of Linux 6.6, for kernels from 6.6 to 6.9 | kernel | 4 normative, 7 implemented |
+| `LINUX_TCP` | `linux-tcp` | TCP of Linux 6.6, for kernels from 6.6 to 6.9 | kernel | 4 normative, 8 implemented |
 | `NF_CONNTRACK_TCP` | `nf-conntrack-tcp` | The TCP state machine of conntrack on Linux 6.6.87.2 | middlebox | 4 implemented |
 | `REDIS_CLIENT` | `redis-client` | One client connection of the Redis 8.10.2 server | server | 3 implemented, 1 documented |
 | `IOREDIS_STATUS` | `ioredis-status` | The connection status of ioredis 6.0.0, standalone | driver | 5 implemented |
@@ -62,8 +62,13 @@ The algebra reads these documents. It gives the closed form of each timer, the f
 | `CADDY_HTTP2` | `caddy-http2` | Caddy 2.11.7 as an HTTP/2 proxy of gRPC: one connection of a client, its idle close, its replies and its stop | proxy | 12 implemented |
 | `NGINX_GRPC` | `nginx-grpc` | nginx 1.29.6 as an HTTP/2 proxy of gRPC: one connection of a client, its idle close, the read timer of a call, and a stopped worker | proxy | 12 implemented, 1 documented |
 | `TRAEFIK_HTTP2` | `traefik-http2` | Traefik 3.7.15 as an HTTP/2 proxy of gRPC: one connection of a client, its idle close, a reload of its dynamic file and its stop | proxy | 10 implemented, 1 observed |
+| `ISTIO_SIDECAR_OUTBOUND` | `istio-sidecar-outbound` | The client sidecar of Istio 1.31.3: Envoy 1.39.4 between the app and the mesh, its retries, an update of LDS and the SIGKILL | proxy | 31 implemented |
+| `ISTIO_SIDECAR_INBOUND` | `istio-sidecar-inbound` | The server sidecar of Istio 1.31.3: Envoy 1.39.4 between the mesh and the app, the policy, an update of LDS and the SIGKILL | proxy | 31 implemented |
+| `PILOT_AGENT` | `pilot-agent` | pilot-agent of Istio 1.31.3: the drain and the SIGKILL of the Envoy of a sidecar at the stop of its pod | proxy | 12 implemented |
 
-Thirty documents operate on Linux TCP (`over`). Seven documents operate on no other document: Linux TCP, conntrack, the Sentinel, the replication of mongod, aten, the member of Ra and the `RetryAgent` of undici. The `RetryAgent` is one request above the sockets of a `Client`. Its timer is the delay of a retry. Each retry can go on a new socket. The `conditions` of each document give the range where it holds, for example a range of kernels.
+Thirty-two documents operate on Linux TCP (`over`). Eight documents operate on no other document. They are Linux TCP, conntrack, the Sentinel, the replication of mongod, aten, the member of Ra, the `RetryAgent` of undici and pilot-agent.
+
+The `RetryAgent` is one request above the sockets of a `Client`. Its timer is the delay of a retry. Each retry can go on a new socket. The `conditions` of each document give the range where it holds, for example a range of kernels.
 
 The package also gives these parts:
 
@@ -109,6 +114,21 @@ A change to the version of a system changes its sources too. Each fact of the do
 
 In this repository, a snapshot of the predictions of the cells (`packages/cells/src/__snapshots__/predictions.json`) shows each prediction that a change to a document moves.
 
+### 0.3.25
+
+- **The sidecar of Istio 1.31.3 for T15.** Three new documents, each from the source at its tag. `istioSidecar(side)` builds the two sidecars from `envoy-http2`, because the proxy of Istio 1.31.3 has the code of Envoy 1.39.4.
+  - Both sides: the route and the stream have no timeout, and the connect timeout is 10 s. An update of LDS drains the changed filter chain. The next response of the chain sends the GOAWAY notice. At the stop, pilot-agent stops Envoy with SIGKILL, thus Envoy sends no GOAWAY then.
+  - `istio-sidecar-outbound`: Envoy retries a failed connect, a refused stream, and UNAVAILABLE or CANCELLED 2 times, each on another host. The reset of an open connection and PERMISSION_DENIED get no retry.
+  - `istio-sidecar-inbound`: the inbound route of a port of gRPC has no retry policy. A refused connect to the app gives UNAVAILABLE. A DENY policy gives the local reply 403, thus PERMISSION_DENIED.
+  - `pilot-agent`: the preStop hook of a native sidecar drains the inbound listeners at the deletion. SIGTERM comes after the app exited, and pilot-agent then stops Envoy with SIGKILL at once.
+  - No cell reads these documents yet, thus they move no prediction of the snapshot.
+
+### 0.3.24
+
+- **The SYN timer of Linux TCP** (`syn_retransmit`). It is a backoff timer: each firing sends the SYN again. The waits 0 to `tcp_syn_linear_timeouts` are 1 s, and then each wait doubles up to `TCP_RTO_MAX`. The source is `tcp_retransmit_timer` in `net/ipv4/tcp_timer.c` of 6.6, and 6.17 has the same waits. At HZ 1000 a wait of 1 s is up to 64 ms late. The models are `linux.syn-wait` and `linux.syn-wait-lateness` of the algebra 0.7.3.
+  - `recovery` over this timer gives the first SYN after a stall. Kind run 40123580623 measured it: a SYN to a pod that was gone stalled until IPVS dropped the pod.
+  - One prediction of the snapshot moves, the kind cell T07.defaults.12.
+
 ### 0.3.18
 
 - **Caddy 2.11.7 as a proxy of gRPC** (`caddy-http2`), from the source at its tag and of golang.org/x/net v0.59.0. With no stream open for 5 min, Caddy sends GOAWAY NO_ERROR, and it closes the connection 1 s later. A PING of the client does not reset that timer. A failure of the upstream before the headers of a response gives 502, thus UNAVAILABLE. Caddy retries no call at the defaults, and at SIGTERM it waits for each stream.

package/build/index.d.ts

@@ -425,6 +425,33 @@ export declare const CADDY_HTTP2: Machine;
  */
 export declare const ENVOY_HTTP2: Machine;
 //#endregion
+//#region src/proxy/istio.d.ts
+/** A side of a sidecar is the listener of the connection: outbound from the app, or inbound to the app. */
+type SidecarSide = "outbound" | "inbound";
+/**
+ * This function gives a document of a sidecar of Istio 1.31.3 for one side, from ENVOY_HTTP2. The
+ * Envoy of the sidecar is the code of that document. Istio changes its configuration and its stop:
+ * - The route and the stream have no timeout, and the connect timeout of a cluster is 10 s.
+ * - The outbound side retries a failed connect, a refused stream, and UNAVAILABLE or CANCELLED: 2 times, each on another host.
+ * - The inbound side retries nothing, because the port of the lab is of gRPC.
+ * - An update of LDS drains the changed filter chain. Its next response sends the GOAWAY notice.
+ * - pilot-agent stops Envoy with SIGKILL at the stop of the pod. Envoy sends no GOAWAY then.
+ */
+export declare const istioSidecar: (side: SidecarSide) => Machine;
+/** This document is the client sidecar of Istio 1.31.3 (`istioSidecar("outbound")`). */
+export declare const ISTIO_SIDECAR_OUTBOUND: Machine;
+/** This document is the server sidecar of Istio 1.31.3 (`istioSidecar("inbound")`). */
+export declare const ISTIO_SIDECAR_INBOUND: Machine;
+/**
+ * This document is pilot-agent of Istio 1.31.3: the lifecycle of the Envoy of a sidecar at the stop
+ * of its pod. With a native sidecar, the preStop hook drains the inbound listeners at the deletion.
+ * The kubelet sends SIGTERM after each container of the app exited. Then pilot-agent stops Envoy with
+ * SIGKILL at once, because the drain is done. Without a native sidecar, SIGTERM starts the drain, and
+ * the SIGKILL comes terminationDrainDuration later (5 s). With EXIT_ON_ZERO_ACTIVE_CONNECTIONS, it waits the
+ * minimum drain, then polls the active connections each 1 s.
+ */
+export declare const PILOT_AGENT: Machine;
+//#endregion
 //#region src/proxy/nginx.d.ts
 /**
  * This document is nginx 1.29.6 as an HTTP/2 proxy of gRPC, for one connection of a client. Its
@@ -619,4 +646,5 @@ export declare const undiciFastLateness: (ms: string) => Expr;
  */
 export declare const MACHINES: Readonly<Record<string, Machine>>;
 //#endregion
+export type { SidecarSide };
 //# sourceMappingURL=index.d.ts.map