Cloud Native Catalog

Related Patterns

JWT Filter

What this fiter does

A WASM filter made to manipulate JWT token headers and payloads (currently only supports string parameters). Works best with Meshery. Sample configuration:


{
"add_header": [
["header1","value1"],
["header2","value2"]
],
"del_header":[
"header1"
],
"add_payload": [
["payload1","value1"],
["payload2","value2"],
],
"del_payload":[
"payload1"
],
"payload_to_header": [
"payload2"
],
"header_to_payload": [
"header2"
]
}

Caveats and Considerations

DISCLAIMER: This filter doesn't regenerate the signature of the modified JWT, and provides no protections. Proceed with caution.

Compatibility

observability

Abhishek design

MESHERY008

Related Patterns

observability

Kubernetes Cronjob

MESHERY47e3

Abhishek design

What this pattern does

CronJobs are highly useful because they run in their own separate containers, letting you run an operation in the exact containers you need. This allows you to lock each CronJob to a specific version of a container, update each cron individually, and customize it with any specific dependencies it needs.

Caveats and Considerations

Permissions to create and delete indexes, modify index configurations, and add, remove, modify, and query documents. In addition, permissions to log on to the Kibana console are revoked.

Compatibility

Resiliency

Circuit Breaker

MESHERY002

Resiliency

Related Patterns

Circuit Breaker

What this pattern does

Circuit breaking is a foundation pattern designed to remove endpoints that persistently return error messages from a load-balanced group. Circuit Breakers go hand in hand with the retry pattern; while a retry attempts to recover from an endpoint returning an error when the system knows an endpoint is failing, a circuit breaker ensures that it is no longer called.

Caveats and Considerations

If the specific fault reported is unusual or rare, it might have been caused by unusual circumstances such as a network packet becoming corrupted while it was being transmitted. In this case, the service mesh could retry the failing request again immediately because the same failure is unlikely to be repeated and the request will probably be successful.

Compatibility

wasm filter

Related Patterns

wasm filter

Metrics Store

FILTER005

HTTP Auth

What this fiter does

Simulates handling authentication of requests at proxy level. Requests with a header `token` with value `hello` are accepted as authorized while the rest unauthorized. The actual authentication is handled by the Upstream server. Whenever the proxy recieves a request it extracts the `token` header and makes a request to the Upstream server which validates the token and returns a response.

Build and deploy:


cd http-auth
make run-filtered

Test:


curl  -H "token":"hello" 0.0.0.0:18000 -v # Authorized
curl  -H "token":"world" 0.0.0.0:18000 -v # Unauthorized

Caveats and Considerations

Compatibility

wasm filter

Related Patterns

wasm filter

HTTP Auth

FILTER001

Metrics Store

What this fiter does

This example showcases communication between a WASM filter and a service via shared queue. It combines the Singleton HTTP Call and TCP Metrics examples. The filter collects metrics and enqueues it onto the queue while the service dequeues it and sends it to upstream server where it is stored.

Build and Deploy:


cd metrics-store
make run-filtered

Test this filer by executing:


# make a few of these calls
curl 0.0.0.0:18000 -v -d "request body"


# Retrieves the stored stats
curl 0.0.0.0:8080/retrieve -v 
x | y | z  === 
# x : downstream bytes, 
# y : upstream bytes, 
# z: the latency for application server to respond

Collects simple metrics for every TCP packet sent, and logs it down.

Caveats and Considerations

Potentially log large files depending upon volue of traffic handled.

Compatibility

wasm filter

Related Patterns

wasm filter

HTTP Auth

FILTER001

Singleton HTTP Call

What this fiter does

The filter is responsible for intercepting HTTP requests, authorizing them based on the stored cache, and performing rate limiting. In the context of the envoy, this component is an HTTP filter and gets executed in the worker threads. For each request, a context object gets created.

Caveats and Considerations

Compatibility

wasm filter

Related Patterns

wasm filter

HTTP Auth

FILTER001

Singleton Queue

What this fiter does

An example which depicts a singleton HTTP WASM service which does an HTTP call once every 2 seconds. Build and deploy:


cd singleton-http-call
make run-filtered

Caveats and Considerations

Compatibility

wasm filter

Related Patterns

wasm filter

HTTP Auth

FILTER001

TCP Packet Parse

What this fiter does

Parses the contents of every TCP packet the proxy receives and logs it.

Build and deploy:


cd tcp-packet-parse
make run-filtered

Test this filter by executing:


curl 0.0.0.0:18000 -v -d "request body"

Cloud Native Catalog

Meshery UI

Meshery CLI

JWT

Related Patterns

JWT Filter

What this fiter does

Caveats and Considerations

Compatibility

Abhishek design

MESHERY008

observability

Related Patterns

Kubernetes Cronjob

MESHERY47e3

Abhishek design

What this pattern does

Caveats and Considerations

Compatibility

Circuit Breaker

MESHERY002

Resiliency

Related Patterns

Circuit Breaker

What this pattern does

Caveats and Considerations

Compatibility

wasm filter

Related Patterns

Metrics Store

FILTER005

HTTP Auth

What this fiter does

Caveats and Considerations

Compatibility

wasm filter

Related Patterns

HTTP Auth

FILTER001

Metrics Store

What this fiter does

Caveats and Considerations

Compatibility

wasm filter

Related Patterns

HTTP Auth

FILTER001

Singleton HTTP Call

What this fiter does

Caveats and Considerations

Compatibility

wasm filter

Related Patterns

HTTP Auth

FILTER001

Singleton Queue

What this fiter does

Caveats and Considerations

Compatibility

wasm filter

Related Patterns

HTTP Auth

FILTER001

TCP Packet Parse

What this fiter does

Caveats and Considerations

Compatibility