liangbeirong-byron opened a new issue, #13437: URL: https://github.com/apache/apisix/issues/13437
### Description ``` I've already configured these two items, but it doesn't seem enough: prometheus-metrics: 500m prometheus-cache: 500m ``` ``` cat /usr/local/apisix/conf/config.yaml # # Licensed to the Apache Software Foundation (ASF) under one or more # contributor license agreements. See the NOTICE file distributed with # this work for additional information regarding copyright ownership. # The ASF licenses this file to You under the Apache License, Version 2.0 # (the "License"); you may not use this file except in compliance with # the License. You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # apisix: # universal configurations node_listen: # APISIX listening port - 9080 enable_heartbeat: true enable_admin: true enable_admin_cors: true enable_debug: false enable_control: true control: ip: 127.0.0.1 port: 9090 enable_dev_mode: false # Sets nginx worker_processes to 1 if set to true enable_reuseport: true # Enable nginx SO_REUSEPORT switch if set to true. enable_ipv6: true # Enable nginx IPv6 resolver enable_http2: true enable_server_tokens: true # Whether the APISIX version number should be shown in Server header # proxy_protocol: # Proxy Protocol configuration # listen_http_port: 9181 # The port with proxy protocol for http, it differs from node_listen and admin_listen. # # This port can only receive http request with proxy protocol, but node_listen & admin_listen # # can only receive http request. If you enable proxy protocol, you must use this port to # # receive http request with proxy protocol # listen_https_port: 9182 # The port with proxy protocol for https # enable_tcp_pp: true # Enable the proxy protocol for tcp proxy, it works for stream_proxy.tcp option # enable_tcp_pp_to_upstream: true # Enables the proxy protocol to the upstream server proxy_cache: # Proxy Caching configuration cache_ttl: 10s # The default caching time if the upstream does not specify the cache time zones: # The parameters of a cache - name: disk_cache_one # The name of the cache, administrator can be specify # which cache to use by name in the admin api memory_size: 50m # The size of shared memory, it's used to store the cache index disk_size: 1G # The size of disk, it's used to store the cache data disk_path: "/tmp/disk_cache_one" # The path to store the cache data cache_levels: "1:2" # The hierarchy levels of a cache # - name: disk_cache_two # memory_size: 50m # disk_size: 1G # disk_path: "/tmp/disk_cache_two" # cache_levels: "1:2" router: http: radixtree_host_uri # radixtree_uri: match route by uri(base on radixtree) # radixtree_host_uri: match route by host + uri(base on radixtree) # radixtree_uri_with_parameter: match route by uri with parameters ssl: 'radixtree_sni' # radixtree_sni: match route by SNI(base on radixtree) proxy_mode: http stream_proxy: # TCP/UDP proxy tcp: # TCP proxy port list - 9100 udp: # UDP proxy port list - 9200 # dns_resolver: # # - 127.0.0.1 # # - 172.20.0.10 # # - 114.114.114.114 # # - 223.5.5.5 # # - 1.1.1.1 # # - 8.8.8.8 # dns_resolver_valid: 30 resolver_timeout: 5 ssl: enable: true listen: - port: 9443 enable_http3: false ssl_protocols: "TLSv1.2 TLSv1.3" ssl_ciphers: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA" ssl_trusted_certificate: "/usr/local/apisix/conf/ssl/ca.crt" trusted_addresses: - 127.0.0.1 nginx_config: # config for render the template to genarate nginx.conf error_log: "/dev/stderr" error_log_level: "warn" # warn,error worker_processes: "auto" enable_cpu_affinity: true worker_rlimit_nofile: 1000000 # the number of files a worker process can open, should be larger than worker_connections event: worker_connections: 65536 http: enable_access_log: true access_log: "/dev/stdout" access_log_format: '$remote_addr - $remote_user [$time_local] $http_host \"$request\" $status $body_bytes_sent $request_time \"$http_referer\" \"$http_user_agent\" $upstream_addr $upstream_status $upstream_response_time \"$upstream_scheme://$upstream_host$upstream_uri\"' access_log_format_escape: default keepalive_timeout: "30s" client_header_timeout: 60s # timeout for reading client request header, then 408 (Request Time-out) error is returned to the client client_body_timeout: 60s # timeout for reading client request body, then 408 (Request Time-out) error is returned to the client send_timeout: 10s # timeout for transmitting a response to the client.then the connection is closed underscores_in_headers: "on" # default enables the use of underscores in client request header fields real_ip_header: "X-Real-IP" # http://nginx.org/en/docs/http/ngx_http_realip_module.html#real_ip_header real_ip_from: # http://nginx.org/en/docs/http/ngx_http_realip_module.html#set_real_ip_from - 127.0.0.1 - 'unix:' lua_shared_dict: prometheus-metrics: 500m prometheus-cache: 500m http_configuration_snippet: | client_body_buffer_size 10m; large_client_header_buffers 4 512k; client_header_buffer_size 512k; proxy_connect_timeout 3s; proxy_read_timeout 3s; proxy_send_timeout 3s; gzip on; gzip_min_length 1k; gzip_comp_level 5; keepalive_requests 10000; proxy_buffering off; proxy_buffer_size 16k; proxy_buffers 16 16k; proxy_max_temp_file_size 0; http_server_configuration_snippet: | #set_real_ip_from 0.0.0.0/0; #real_ip_header X-Forwarded-For; #real_ip_recursive on; plugins: # plugin list - prometheus - cors - limit-req - proxy-rewrite - key-auth - jwt-auth - gzip - real-ip - response-rewrite - redirect - traffic-split - workflow - limit-count - limit-conn plugin_attr: gzip: comp_level: 5 min_length: 1 types: '*' prometheus: export_addr: ip: 0.0.0.0 port: 9091 export_uri: /apisix/prometheus/metrics metric_prefix: apisix_ prefer_name: true deployment: role: traditional role_traditional: config_provider: etcd admin: allow_admin: # http://nginx.org/en/docs/http/ngx_http_access_module.html#allow - 127.0.0.1/24 - 10.0.0.0/8 - 192.168.0.0/16 - 0.0.0.0/0 # - "::/64" admin_listen: ip: 0.0.0.0 port: 9180 # Default token when use API to call for Admin API. # *NOTE*: Highly recommended to modify this value to protect APISIX's Admin API. # Disabling this configuration item means that the Admin API does not # require any authentication. admin_key: # admin: can everything for configuration data - name: "admin" key: ssssssssssssssssssssssssssssssss role: admin # viewer: only can view configuration data - name: "viewer" key: ddddddddddddddddddddddddddddddddddddd role: viewer etcd: host: # it's possible to define multiple etcd hosts addresses of the same etcd cluster. - "https://192.161.141.116:2379"; # multiple etcd address - "https://192.161.183.28:2379"; # multiple etcd address - "https://192.161.159.75:2379"; # multiple etcd address prefix: "/apisix" # configuration prefix in etcd timeout: 30 # 30 seconds user: "root" password: "${{ APISIX_ETCD_PASSWORD }}" tls: cert: "/etcd-ssl/tls.crt" key: "/etcd-ssl/tls.key" verify: true sni: "apisix-etcd-external.apisix.svc.cluster.local" ``` ### Environment - APISIX version (run `apisix version`): 3.16.0 - Operating system (run `uname -a`): SMP PREEMPT_DYNAMIC Debian 6.1.170-3 (2026-05-08) x86_64 x86_64 x86_64 GNU/Linux - OpenResty / Nginx version (run `openresty -V` or `nginx -V`): nginx version: openresty/1.27.1.2 - etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`): 3.5.29 - APISIX Dashboard version, if relevant: - Plugin runner version, for issues related to plugin runners: prometheus-cache - LuaRocks version, for installation issues (run `luarocks --version`): -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
