Envoy Proxy使用介绍教程（一）: 新型L3~L7层访问代理软件Envoy的使用

wget https://copr.fedorainfracloud.org/coprs/vbatts/envoy/repo/epel-7/vbatts-envoy-epel-7.repo
mv vbatts-envoy-epel-7.repo /etc/yum.repos.d/
yum install envoy

$ ls -lh build_release
-r-xr-xr-x 1 root root 367M Dec 14 15:43 build_release/envoy

$/tmp/envoy-docker-build/envoy/source/exe/envoy-fastbuild -h
/tmp/envoy-docker-build/envoy/source/exe/envoy-fastbuild: /lib64/libc.so.6: version `GLIBC_2.18' not found (required by /tmp/envoy-docker-build/envoy/source/exe/envoy-fastbuild)

$ docker search envoyproxy |grep envoyproxy |grep build
envoyproxy/envoy-build                                                          1
envoyproxy/envoy-build-centos                                                   1
gonitro/envoyproxy              A build of the Envoy proxy container that is…   1
envoyproxy/envoy-build-ubuntu                                                   0

export ENVOY_DOCKER_BUILD_DIR=/data/envoy/envoy-docker-build
export IMAGE_NAME=envoyproxy/envoy-build-centos
export IMAGE_ID=latest
./ci/run_envoy_docker.sh './ci/do_ci.sh bazel.dev'

# ...  省略部分内容 ...
docker run --rm -t -i -e HTTP_PROXY=${http_proxy} -e HTTPS_PROXY=${https_proxy} \
  -u "${USER}":"${USER_GROUP}" -v "${ENVOY_DOCKER_BUILD_DIR}":/build \
  -v "$PWD":/source -e NUM_CPUS --cap-add SYS_PTRACE "${IMAGE_NAME}":"${IMAGE_ID}" \
  /bin/bash -lc "groupadd --gid $(id -g) -f envoygroup && useradd -o --uid $(id -u) --gid $(id -g) \
  --no-create-home --home-dir /source envoybuild && su envoybuild -c \"cd source && $*\""

# ./ci/do_cli.sh
elif [[ "$1" == "bazel.dev" ]]; then
  setup_clang_toolchain
  # This doesn't go into CI but is available for developer convenience.
  echo "bazel fastbuild build with tests..."
  cd "${ENVOY_CI_DIR}"
  echo "Building..."
  bazel build ${BAZEL_BUILD_OPTIONS} -c fastbuild //source/exe:envoy-static
  # Copy the envoy-static binary somewhere that we can access outside of the
  # container for developers.
  cp -f \
    "${ENVOY_CI_DIR}"/bazel-bin/source/exe/envoy-static \
    "${ENVOY_DELIVERY_DIR}"/envoy-fastbuild
  echo "Building and testing..."
  bazel test ${BAZEL_TEST_OPTIONS} -c fastbuild //test/...
  exit 0

# ./ci/build_setup.sh
function setup_clang_toolchain() {
  export PATH=/usr/lib/llvm-7/bin:$PATH
  export CC=clang
  export CXX=clang++
  export ASAN_SYMBOLIZER_PATH=/usr/lib/llvm-7/bin/llvm-symbolizer
  echo "$CC/$CXX toolchain configured"
}
# This is where we build for bazel.release* and bazel.dev.
export ENVOY_CI_DIR="${ENVOY_SRCDIR}"/ci

  bazel build ${BAZEL_BUILD_OPTIONS} -c fastbuild //source/exe:envoy-static
  bazel test ${BAZEL_TEST_OPTIONS} -c fastbuild //test/...

  cp -f \
    "${ENVOY_CI_DIR}"/bazel-bin/source/exe/envoy-static \
    "${ENVOY_DELIVERY_DIR}"/envoy-fastbuild

export BUILD_DIR=/build
if [[ ! -d "${BUILD_DIR}" ]]
then
  echo "${BUILD_DIR} mount missing - did you forget -v <something>:${BUILD_DIR}? Creating."
  mkdir -p "${BUILD_DIR}"
fi

export ENVOY_BUILD_DIR="${BUILD_DIR}"/envoy
mkdir -p "${ENVOY_BUILD_DIR}"
cp -f "${ENVOY_SRCDIR}"/ci/WORKSPACE "${ENVOY_BUILD_DIR}"

export ENVOY_DELIVERY_DIR="${ENVOY_BUILD_DIR}"/source/exe
mkdir -p "${ENVOY_DELIVERY_DIR}"

NUM_CPUS=`grep -c ^processor /proc/cpuinfo`
ENVOY_SRCDIR=envoy项目根路径
bazel build --strategy=Genrule=standalone --spawn_strategy=standalone --verbose_failures \
--package_path %workspace%:${ENVOY_SRCDIR} --action_env=HOME --action_env=PYTHONUSERBASE \
--jobs=${NUM_CPUS} --show_task_finish  -c fastbuild //source/exe:envoy-static

yum install cmake libtool libstdc++ ninja-build lld patch
go get github.com/bazelbuild/buildtools/buildifier

+ git -C /root/.cache/bazel/_bazel_root/644de998b20ecf2f1d2ac88b14ed30b9/external/com_github_golang_protobuf fetch origin aa810b61a9c79d51363740d207bb46cf8e620ed5:aa810b61a9c79d51363740d207bb46cf8e620ed5
Unknown option: -C
usage: git [--version] [--help] [-c name=value]
           [--exec-path[=<path>]] [--html-path] [--man-path] [--info-path]
           [-p|--paginate|--no-pager] [--no-replace-objects] [--bare]
           [--git-dir=<path>] [--work-tree=<path>] [--namespace=<name>]
           <command> [<args>]

yum erase git 
yum install https://centos7.iuscommunity.org/ius-release.rpm
yum --disablerepo=* --disableexcludes=ius --enablerepo=ius search git2u
yum install git2u

$ git -h
Unknown option: -h
usage: git [--version] [--help] [-C <path>] [-c name=value]
           [--exec-path[=<path>]] [--html-path] [--man-path] [--info-path]
           [-p | --paginate | --no-pager] [--no-replace-objects] [--bare]
           [--git-dir=<path>] [--work-tree=<path>] [--namespace=<name>]
           <command> [<args>]

go get github.com/bazelbuild/buildtools/buildifier

cd $GOPATH/src/github.com/bazelbuild/buildtools/buildifier
bazel build //buildifier
cp bazel-bin/buildifier/linux_amd64_stripped/buildifier /usr/bin/

yum install -y  ninja-build

$ which ninja-build
/usr/bin/ninja-build
$ ln -s /usr/bin/ninja-build /usr/bin/ninja

gcc: error: unrecognized command line option '-std=c++14'
Target //source/exe:envoy-static failed to build
INFO: Elapsed time: 74.728s, Critical Path: 0.27s, Remote (0.00% of the time): [queue: 0.00%, setup: 0.00%, process: 0.00%]
INFO: 1 process: 1 local.
FAILED: Build did NOT complete successfully

siege -c 16 -b -t 1M -H "Host: webshell.com"  10.10.64.58:9000/ping

$ file /tmp/envoy-docker-build/envoy/source/exe/envoy-fastbuild
/tmp/envoy-docker-build/envoy/source/exe/envoy-fastbuild: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.32, BuildID[sha1]=5d25f466c3410c0dfa735d7d4358beb76b2da507, not stripped

$/tmp/envoy-docker-build/envoy/source/exe/envoy-fastbuild -h
/tmp/envoy-docker-build/envoy/source/exe/envoy-fastbuild: /lib64/libc.so.6: version `GLIBC_2.18' not found (required by /tmp/envoy-docker-build/envoy/source/exe/envoy-fastbuild)

  # Remove the symbol __cxa_thread_atexit_impl from libc6 to remove
  # the dependency on glibc 2.18.
  sed -i 's/__cxa_thread_atexit_impl/__dead_beef_dead_beef___/g' \
      "${INSTALL_ROOT}/lib/x86_64-linux-gnu/libc.so.6"

$ docker search envoyproxy |grep envoyproxy |grep build
envoyproxy/envoy-build                                                          1
envoyproxy/envoy-build-centos                                                   1
gonitro/envoyproxy              A build of the Envoy proxy container that is…   1
envoyproxy/envoy-build-ubuntu                                                   0

export ENVOY_DOCKER_BUILD_DIR=/data/envoy/envoy-docker-build
export IMAGE_NAME=envoyproxy/envoy-build-centos
export IMAGE_ID=latest
./ci/run_envoy_docker.sh './ci/do_ci.sh bazel.dev'