Files
akvorado/orchestrator/clickhouse/config.go
Vincent Bernat ac68c5970e inlet: split inlet into new inlet and outlet
This change split the inlet component into a simpler inlet and a new
outlet component. The new inlet component receive flows and put them in
Kafka, unparsed. The outlet component takes them from Kafka and resume
the processing from here (flow parsing, enrichment) and puts them in
ClickHouse.

The main goal is to ensure the inlet does a minimal work to not be late
when processing packets (and restart faster). It also brings some
simplification as the number of knobs to tune everything is reduced: for
inlet, we only need to tune the queue size for UDP, the number of
workers and a few Kafka parameters; for outlet, we need to tune a few
Kafka parameters, the number of workers and a few ClickHouse parameters.

The outlet component features a simple Kafka input component. The core
component becomes just a callback function. There is also a new
ClickHouse component to push data to ClickHouse using the low-level
ch-go library with batch inserts.

This processing has an impact on the internal representation of a
FlowMessage. Previously, it was tailored to dynamically build the
protobuf message to be put in Kafka. Now, it builds the batch request to
be sent to ClickHouse. This makes the FlowMessage structure hides the
content of the next batch request and therefore, it should be reused.
This also changes the way we decode flows as they don't output
FlowMessage anymore, they reuse one that is provided to each worker.

The ClickHouse tables are slightly updated. Instead of using Kafka
engine, the Null engine is used instead.

Fix #1122
2025-07-27 21:44:28 +02:00

130 lines
4.7 KiB
Go

// SPDX-FileCopyrightText: 2022 Free Mobile
// SPDX-License-Identifier: AGPL-3.0-only
package clickhouse
import (
"reflect"
"time"
"akvorado/common/remotedatasourcefetcher"
"akvorado/common/helpers"
"github.com/go-viper/mapstructure/v2"
)
// Configuration describes the configuration for the ClickHouse configurator.
type Configuration struct {
// SkipMigrations tell if we should skip migrations.
SkipMigrations bool
// Resolutions describe the various resolutions to use to
// store data and the associated TTLs.
Resolutions []ResolutionConfiguration `validate:"min=1,dive"`
// MaxPartitions define the number of partitions to have for a
// consolidated flow tables when full.
MaxPartitions int `validate:"isdefault|min=1"`
// ASNs is a mapping from AS numbers to names. It replaces or
// extends the builtin list of AS numbers.
ASNs map[uint32]string
// Networks is a mapping from IP networks to attributes. It is used
// to instantiate the SrcNet* and DstNet* columns.
Networks *helpers.SubnetMap[NetworkAttributes] `validate:"omitempty,dive"`
// NetworkSources defines a set of remote network
// definitions to map IP networks to attributes. It is used to
// instantiate the SrcNet* and DstNet* columns. The results
// are overridden by the content of Networks.
NetworkSources map[string]remotedatasourcefetcher.RemoteDataSource `validate:"dive"`
// NetworkSourceTimeout tells how long to wait for network
// sources to be ready. 503 is returned when not.
NetworkSourcesTimeout time.Duration `validate:"min=0"`
// OrchestratorURL allows one to override URL to reach
// orchestrator from ClickHouse
OrchestratorURL string `validate:"isdefault|url"`
// OrchestratorBasicAuth holds optional basic auth credentials to reach
// orchestrator from ClickHouse
OrchestratorBasicAuth *ConfigurationBasicAuth
}
// ConfigurationBasicAuth holds Username and Password subfields
// for basicauth purposes
type ConfigurationBasicAuth struct {
Username string `validate:"min=1"`
Password string `validate:"min=1"`
}
// ResolutionConfiguration describes a consolidation interval.
type ResolutionConfiguration struct {
// Interval is the consolidation interval for this
// resolution. An interval of 0 means no consolidation
// takes place (it is used for the `flows' table).
Interval time.Duration `validate:"isdefault|min=5s"`
// TTL is how long to keep data for this resolution. A
// value of 0 means to never expire.
TTL time.Duration `validate:"isdefault|min=1h"`
}
// DefaultConfiguration represents the default configuration for the ClickHouse configurator.
func DefaultConfiguration() Configuration {
return Configuration{
Resolutions: []ResolutionConfiguration{
{0, 15 * 24 * time.Hour}, // 15 days
{time.Minute, 7 * 24 * time.Hour}, // 7 days
{5 * time.Minute, 3 * 30 * 24 * time.Hour}, // 90 days
{time.Hour, 12 * 30 * 24 * time.Hour}, // 1 year
},
MaxPartitions: 50,
NetworkSourcesTimeout: 10 * time.Second,
}
}
// NetworkAttributes is a set of attributes attached to a network.
// Don't forget to update orchestrator/clickhouse/migrations.go:78 when this changes.
type NetworkAttributes struct {
// Name is a name attached to the network. May be unique or not.
Name string
// Role is a role attached to the network (server, customer).
Role string
// Site is the site of the network (ams5, pa3).
Site string
// Region is the region of the network (eu-west-1, us-east-3).
Region string
// City is the administrative city where the prefix is located (Paris, London).
City string
// State is the first administrative sub-division of the country (Ile-de-france, Alabama)
State string
// Country is the country of the network (france, italy)
Country string
// Tenant is a tenant for the network.
Tenant string
// ASN is the AS number associated to the network.
ASN uint32
}
// NetworkAttributesUnmarshallerHook decodes network attributes. It
// also accepts a string instead of attributes for backward
// compatibility.
func NetworkAttributesUnmarshallerHook() mapstructure.DecodeHookFunc {
return func(from, to reflect.Value) (interface{}, error) {
from = helpers.ElemOrIdentity(from)
to = helpers.ElemOrIdentity(to)
if to.Type() != reflect.TypeOf(NetworkAttributes{}) {
return from.Interface(), nil
}
if from.Kind() == reflect.String {
return NetworkAttributes{Name: from.String()}, nil
}
return from.Interface(), nil
}
}
func init() {
helpers.RegisterMapstructureUnmarshallerHook(helpers.SubnetMapUnmarshallerHook[NetworkAttributes]())
helpers.RegisterMapstructureUnmarshallerHook(NetworkAttributesUnmarshallerHook())
helpers.RegisterMapstructureDeprecatedFields[Configuration](
"SystemLogTTL",
"PrometheusEndpoint",
"Kafka")
helpers.RegisterSubnetMapValidation[NetworkAttributes]()
}