vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

hive-sock-client, web proxy, HTTP clients: bound connect and response waits

Browse source 
hive-sock-client: each attempt now bounds connect (5s), write (10s) and
the wait for the response (60s by default). The response bound is per
call through the new `request_within`, which hive-agent's serve-loop
`Recv` uses with its 180s long-poll plus 30s headroom. A response
timeout is terminal rather than retried: the server holds the request,
so a retry re-sends something it may still act on and multiplies the
wait by the backoff schedule.

Outbound HTTP: the matrix login/whoami clients in swarm-controller and
hive-c0re's dashboard (5s connect, 30s request), the authelia-bridge
client (5s/30s; ensuring an identity runs an argon2 hash first) and the
ci-runner forge calls (5s/15s, config_pr_poll's forge budget) get a
connect_timeout and a request timeout. Timeout errors name the bound
that fired.

hive-agent's unix-socket extra web proxy bounds the connect (5s) and
the wait for the response head (30s, the http sibling's budget); the
body read stays unbounded.

Refs #4723
This commit is contained in:
atlas 2026-09-26 18:29:48 +02:00 • committed by mara
commit 7b1fe5f9d3
7 changed files with 412 additions and 60 deletions
Download patch file Download diff file Expand all files Collapse all files

27
swarm-controller/src/auth.rs
View file

@ -23,6 +23,13 @@
use anyhow::{Context, Result};
use swarm_authelia_bridge_sock::{BridgeRequest, BridgeResponse};
/// Bound on reaching the bridge.
const HTTP_CONNECT_TIMEOUT: std::time::Duration = std::time::Duration::from_secs(5);
/// Bound on one whole bridge call, body included. Ensuring an identity has
/// the bridge shell out to `authelia` for an argon2 hash before it answers,
/// so this is looser than a plain API call needs.
const HTTP_TIMEOUT: std::time::Duration = std::time::Duration::from_secs(30);
/// A configured connection to `swarm-authelia-bridge`.
#[derive(Clone)]
pub struct AuthBridge {
@ -53,8 +60,13 @@ impl AuthBridge {
that identity must exist first"
)
})?;
let http = reqwest::Client::builder()
.connect_timeout(HTTP_CONNECT_TIMEOUT)
.timeout(HTTP_TIMEOUT)
.build()
.context("building the swarm-authelia-bridge HTTP client")?;
Ok(Some(Self {
http: reqwest::Client::new(),
http,
base_url,
queue_cfg,
}))
@ -109,7 +121,18 @@ impl AuthBridge {
.json(req)
.send()
.await
.context("calling swarm-authelia-bridge")?;
.map_err(|e| {
let what = if e.is_connect() && e.is_timeout() {
format!(
"calling swarm-authelia-bridge: connect timed out after {HTTP_CONNECT_TIMEOUT:?}"
)
} else if e.is_timeout() {
format!("calling swarm-authelia-bridge: timed out after {HTTP_TIMEOUT:?}")
} else {
"calling swarm-authelia-bridge".to_owned()
};
anyhow::Error::new(e).context(what)
})?;
let status = response.status();
let body = response.text().await.unwrap_or_default();