Setting Request Timeouts
This task shows you how to setup request timeouts in Envoy using Istio.
Before you begin
Setup Istio by following the instructions in the Installation guide.
Deploy the Bookinfo sample application.
Initialize the application version routing by running the following command:
$ kubectl apply -f @samples/bookinfo/networking/virtual-service-all-v1.yaml@
Request timeouts
A timeout for http requests can be specified using the timeout field of the route rule.
By default, the timeout is 15 seconds, but in this task you override the reviews
service
timeout to 1 second.
To see its effect, however, you also introduce an artificial 2 second delay in calls
to the ratings
service.
Route requests to v2 of the
reviews
service, i.e., a version that calls theratings
service:cat <<EOF | kubectl apply -f - apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: reviews spec: hosts: - reviews http: - route: - destination: host: reviews subset: v2 EOF
Add a 2 second delay to calls to the
ratings
service:cat <<EOF | kubectl apply -f - apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: ratings spec: hosts: - ratings http: - fault: delay: percent: 100 fixedDelay: 2s route: - destination: host: ratings subset: v1 EOF
Open the Bookinfo URL
http://$GATEWAY_URL/productpage
in your browser.You should see the Bookinfo application working normally (with ratings stars displayed), but there is a 2 second delay whenever you refresh the page.
Now add a half second request timeout for calls to the
reviews
service:cat <<EOF | kubectl apply -f - apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: reviews spec: hosts: - reviews http: - route: - destination: host: reviews subset: v2 timeout: 0.5s EOF
Refresh the Bookinfo web page.
You should now see that it returns in about 1 second, instead of 2, and the reviews are unavailable.
The reason that the response takes 1 second, even though the timeout is configured at half a second, is because there is a hard-coded retry in the
productpage
service, so it calls the timing outreviews
service twice before returning.
Understanding what happened
In this task, you used Istio to set the request timeout for calls to the reviews
microservice to half a second instead of the default of 15 seconds.
Since the reviews
service subsequently calls the ratings
service when handling requests,
you used Istio to inject a 2 second delay in calls to ratings
to cause the
reviews
service to take longer than half a second to complete and consequently you could see the timeout in action.
You observed that instead of displaying reviews, the Bookinfo product page (which calls the reviews
service to populate the page) displayed
the message: Sorry, product reviews are currently unavailable for this book.
This was the result of it receiving the timeout error from the reviews
service.
If you examine the fault injection task, you'll find out that the productpage
microservice also has its own application-level timeout (3 seconds) for calls to the reviews
microservice.
Notice that in this task you used an Istio route rule to set the timeout to half a second.
Had you instead set the timeout to something greater than 3 seconds (such as 4 seconds) the timeout
would have had no effect since the more restrictive of the two takes precedence.
More details can be found here.
One more thing to note about timeouts in Istio is that in addition to overriding them in route rules,
as you did in this task, they can also be overridden on a per-request basis if the application adds
an x-envoy-upstream-rq-timeout-ms
header on outbound requests. In the header,
the timeout is specified in milliseconds instead of seconds.
Cleanup
Remove the application routing rules:
$ kubectl delete -f @samples/bookinfo/networking/virtual-service-all-v1.yaml@
If you are not planning to explore any follow-on tasks, see the Bookinfo cleanup instructions to shutdown the application.
See also
Deploy a custom ingress gateway using cert-manager
Describes how to deploy a custom ingress gateway using cert-manager manually.
Incremental Istio Part 1, Traffic Management
How to use Istio for traffic management without deploying sidecar proxies.
Introducing the Istio v1alpha3 routing API
Introduction, motivation and design principles for the Istio v1alpha3 routing API.
Configuring Istio Ingress with AWS NLB
Describes how to configure Istio ingress with a network load balancer on AWS.
Traffic Mirroring with Istio for Testing in Production
An introduction to safer, lower-risk deployments and release to production.
Consuming External TCP Services
Describes a simple scenario based on Istio's Bookinfo example.