メニュー
edgion-gateway data plane architecture — Pingora integration, route matching, TLS management, plugin system, load balancing, backend discovery, observability, LinkSys.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Conventions shared by the in-repo binaries (edgion-controller, edgion-gateway, edgion-cli) — project overview, command line / directory / config-path conventions, Core layering conventions, resource system.
KubernetesCenter implementation — K8s Reflector watching, leader election, HA mode, ResourceController lifecycle, status writeback.
ConfigCenter subsystem — ConfCenter trait abstraction, FileSystemCenter and KubernetesCenter implementations, unified Workqueue + ResourceProcessor pipeline.
edgion-controller control plane architecture — overall design, startup/shutdown, Admin API, ConfigCenter, Workqueue, ResourceProcessor, Requeue, CacheServer, ACME service.
Route matching overview — multi-stage pipeline (Listener→Domain→Path→DeepMatch), per-listener isolation, registration flow, atomic swap.
TLS subsystem overview — TLS Store, SNI matching, certificate management, BoringSSL/OpenSSL backend selection.
| name | 02-gateway |
| description | edgion-gateway data plane architecture — Pingora integration, route matching, TLS management, plugin system, load balancing, backend discovery, observability, LinkSys. |
edgion-gateway is the data plane, a high-performance proxy server built on Pingora. It receives configuration from the Controller via gRPC and processes HTTP/gRPC/TCP/TLS/UDP traffic.
| File | Topic | Recommended reading scenario |
|---|---|---|
| 00-overview.md | Gateway overall architecture | First-time understanding of Gateway design |
| 01-startup-shutdown.md | Startup / shutdown + Pingora integration | Debug startup issues, understand initialization order |
| 02-pingora-lifecycle.md | ProxyHttp callbacks, ConnectionFilter | Modify request handling flow, understand proxy lifecycle |
| 03-routes/SKILL.md | Route subsystem | Modify route logic, troubleshoot route mismatches |
| 04-tls/SKILL.md | TLS subsystem | TLS certificate management, mTLS configuration |
| 05-plugin-system.md | Plugin system (4-phase execution model) | Understand plugin execution flow, develop new plugins, modify conditional execution logic |
| dsl-engine.md | DSL engine architecture (DslPlugin) | Maintain the DSL VM / parser / compiler / bytecode; understand async-sync bridging, panic isolation, DslRuntime lifecycle |
| dsl-engine-security-model.md | DSL sandbox security model — maintainer view | Add or extend a sandbox limit, audit Map/List/string caps, review SSRF/ReDoS posture, locate where each VmLimits field is enforced |
| 06-load-balancing.md | Load balancing strategies | Modify LB strategies, understand RoundRobin/EWMA/LeastConn/ConsistentHash selection algorithms |
| 07-backends.md | Backend discovery + health check | Modify Endpoint/EndpointSlice discovery, health check configuration, BackendTLSPolicy |
| 08-observe.md | Observability | AccessLog zero-copy output, Prometheus metrics, protocol logs |
| 09-link-sys.md | LinkSys external system integration | ES/Redis/Etcd/Webhook/LocalFile client management, DataSender implementation |
| 10-runtime-store.md | Runtime stores | Gateway/Listener configuration storage, ArcSwap lock-free read pattern |
| 11-conf-handler-guidelines.md | ConfHandler development guidelines | Implement / modify full_set / partial_update for ConfHandler |
| 12-edgion-plugin-dev.md | HTTP plugin development guide | Develop a new EdgionPlugin |
| 13-stream-plugin-dev.md | Stream plugin development guide | Develop TCP/TLS layer plugins |
| 14-link-sys-dev.md | LinkSys connector development guide | Develop a new external-system connector |
| uri-normalization/SKILL.md | URI normalization architecture (full-stack naming table, dual-view, iron rules, security guarantees) | Develop plugins that read/write path, review ACL code, troubleshoot path bypass |
edgion-gateway
┌──────────────────────────────────────────────────────────────┐
│ │
│ ConfigSyncClient ──► ClientCache (per-kind) ──► Preparse │
│ ├── EventDispatch │
│ └── ConfHandler (per-kind) │
│ │
│ Pingora Server │
│ ├── ConnectionFilter (TCP layer, StreamPlugins) │
│ │ │
│ ├── ProxyHttp (HTTP/gRPC lifecycle) │
│ │ ├── early_request_filter → timeouts + keepalive │
│ │ ├── request_filter → metadata + ACME + route │
│ │ ├── upstream_peer → backend selection + LB │
│ │ ├── upstream_response → response plugins │
│ │ └── logging → AccessLog + Metrics │
│ │ │
│ ├── TCP/TLS Routes (per-listener routing) │
│ └── UDP Routes (per-listener routing) │
│ │
│ Admin API (:12001 default) Probe (:12000) Metrics (:12090) │
│ │
│ Backends │
│ ├── Service/EndpointSlice/Endpoint discovery │
│ ├── Health Check management │
│ └── BackendTLSPolicy │
│ │
│ TLS subsystem │
│ ├── TLS Store (certificate storage + SNI matching) │
│ ├── Downstream TLS (client→gateway) │
│ └── Upstream TLS (gateway→backend mTLS) │
│ │
│ LinkSys (ES, Redis, Etcd, Webhook, File) │
└──────────────────────────────────────────────────────────────┘