feat: enhance evobgp with new command-line tools for bundle management, including pull, verify, and apply functionalities. Update go.mod to include necessary dependencies and complete todos in architecture plan for improved observability and deployment practices.

2026-04-05 14:07:45 +07:00
parent 272542b92a
commit bf52b21150
131 changed files with 9222 additions and 17 deletions
@@ -0,0 +1,10 @@
+# Default BIRD 2 config for EvoBGP Docker stack (operator extends with include "bird.d/*.conf";).
+router id 192.0.2.1;
+
+protocol device {
+}
+
+protocol direct {
+    ipv4;
+    ipv6;
+}
@@ -0,0 +1,41 @@
+# Устаревший минимальный стек только bird2 + agent. Полные профили reference / microvps:
+#   docker compose --profile reference up -d --build -f deploy/compose/docker-compose.yaml
+#   docker compose --profile microvps up -d --build -f deploy/compose/docker-compose.yaml
+#
+# Для входящего BGP (TCP/179) на Linux часто нужен network_mode: host или macvlan — см. план §4.1.
+name: evobgp-bgp-stack
+
+services:
+  bird2:
+    build:
+      context: ../..
+      dockerfile: deploy/docker/bird2/Dockerfile
+    restart: unless-stopped
+    cap_add:
+      - NET_ADMIN
+    volumes:
+      - bird_etc:/etc/bird
+      - bird_run:/run/bird
+    # network_mode: "host"   # раскомментируйте при анонсе BGP с хоста
+
+  evobgp-agent:
+    build:
+      context: ../..
+      dockerfile: deploy/docker/evobgp-agent/Dockerfile
+    restart: unless-stopped
+    depends_on:
+      - bird2
+    cap_add:
+      - NET_ADMIN
+    volumes:
+      - bird_etc:/etc/bird
+      - bird_run:/run/bird
+    entrypoint: ["/bin/sleep"]
+    command: ["infinity"]
+    # Примеры (exec в контейнере sidecar):
+    #   docker compose -f ... exec evobgp-agent /usr/local/bin/evobgp-agent parse-check /etc/bird/bird.conf
+    #   docker compose -f ... exec evobgp-agent /usr/local/bin/evobgp-agent configure
+
+volumes:
+  bird_etc:
+  bird_run:
@@ -0,0 +1,193 @@
+# EvoBGP Compose: профили `reference` (эталон) и `microvps` (одна VPS).
+#
+# Запуск:
+#   docker compose --profile reference up -d --build
+#   docker compose --profile microvps up -d --build
+#
+# Профиль reference: Web UI на http://localhost:3000 (nginx → /v1 и /metrics на evobgp-api:8080).
+#
+# Очистка неиспользуемых данных Docker (PowerShell; осторожно с -v):
+#   docker system prune -f
+#   docker volume prune -f
+#
+# Входящий BGP (TCP/179): на Linux для публичного пира часто нужен network_mode: host у bird2
+# или macvlan/ipvlan — см. архитектурный план §4.1. Здесь опубликован порт 179 для отладки.
+name: evobgp
+
+x-logging: &default-logging
+  driver: json-file
+  options:
+    max-size: "10m"
+    max-file: "3"
+
+services:
+  postgres:
+    profiles: ["reference", "microvps"]
+    image: postgres:16-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: evobgp
+      POSTGRES_PASSWORD: evobgp
+      POSTGRES_DB: evobgp
+    volumes:
+      - pgdata:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U evobgp -d evobgp"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    logging: *default-logging
+    deploy:
+      resources:
+        limits:
+          cpus: "1.0"
+          memory: 384M
+
+  evobgp-api:
+    profiles: ["reference"]
+    build:
+      context: ../..
+      dockerfile: deploy/docker/gobinary/Dockerfile
+      args:
+        BIN: evobgp-api
+        INSTALL_BIRDC: "1"
+    restart: unless-stopped
+    depends_on:
+      postgres:
+        condition: service_healthy
+      bird2:
+        condition: service_started
+    ports:
+      - "8080:8080"
+    environment:
+      EVOBGP_HTTP_ADDR: ":8080"
+      EVOBGP_SEED_DEMO: "1"
+      EVOBGP_BIRDC_SOCKET: /run/bird/bird.ctl
+      EVOBGP_BIRDC_INTERVAL: 30s
+      # Для прямого доступа к API с dev-сервера Vite (порт 5173); в Docker UI трафик идёт через evobgp-web proxy.
+      EVOBGP_CORS_ORIGINS: "http://localhost:5173,http://127.0.0.1:5173,http://localhost:3000,http://127.0.0.1:3000"
+    volumes:
+      - bird_run:/run/bird:ro
+    logging: *default-logging
+    deploy:
+      resources:
+        limits:
+          cpus: "1.0"
+          memory: 512M
+
+  evobgp-web:
+    profiles: ["reference"]
+    build:
+      context: ../..
+      dockerfile: deploy/docker/evobgp-web/Dockerfile
+    restart: unless-stopped
+    depends_on:
+      - evobgp-api
+    ports:
+      - "3000:80"
+    logging: *default-logging
+    deploy:
+      resources:
+        limits:
+          cpus: "0.5"
+          memory: 128M
+
+  evobgp-all:
+    profiles: ["microvps"]
+    build:
+      context: ../..
+      dockerfile: deploy/docker/gobinary/Dockerfile
+      args:
+        BIN: evobgp-all
+        INSTALL_BIRDC: "1"
+    restart: unless-stopped
+    depends_on:
+      postgres:
+        condition: service_healthy
+      bird2:
+        condition: service_started
+    ports:
+      - "8080:8080"
+    environment:
+      EVOBGP_HTTP_ADDR: ":8080"
+      EVOBGP_SEED_DEMO: "1"
+      EVOBGP_BIRDC_SOCKET: /run/bird/bird.ctl
+      EVOBGP_BIRDC_INTERVAL: 30s
+    volumes:
+      - bird_run:/run/bird:ro
+    logging: *default-logging
+    deploy:
+      resources:
+        limits:
+          cpus: "1.0"
+          memory: 512M
+
+  bird2:
+    profiles: ["reference", "microvps"]
+    build:
+      context: ../..
+      dockerfile: deploy/docker/bird2/Dockerfile
+    restart: unless-stopped
+    cap_add:
+      - NET_ADMIN
+    sysctls:
+      net.ipv4.ip_forward: "1"
+      net.ipv6.conf.all.forwarding: "1"
+    volumes:
+      - bird_etc:/etc/bird
+      - bird_run:/run/bird
+    ports:
+      - "179:179/tcp"
+    logging: *default-logging
+    deploy:
+      resources:
+        limits:
+          memory: 256M
+
+  evobgp-agent:
+    profiles: ["reference", "microvps"]
+    build:
+      context: ../..
+      dockerfile: deploy/docker/evobgp-agent/Dockerfile
+    restart: unless-stopped
+    depends_on:
+      - bird2
+    cap_add:
+      - NET_ADMIN
+    volumes:
+      - bird_etc:/etc/bird
+      - bird_run:/run/bird
+    entrypoint: ["/bin/sh", "-c"]
+    command: ["sleep infinity"]
+    logging: *default-logging
+    deploy:
+      resources:
+        limits:
+          memory: 128M
+
+  prometheus:
+    profiles: ["reference"]
+    image: prom/prometheus:v2.54.1
+    restart: unless-stopped
+    depends_on:
+      - evobgp-api
+    ports:
+      - "9090:9090"
+    volumes:
+      - ../prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
+      - ../prometheus/alerts.yml:/etc/prometheus/alerts.yml:ro
+    command:
+      - --config.file=/etc/prometheus/prometheus.yml
+      - --storage.tsdb.path=/prometheus
+      - --storage.tsdb.retention.time=15d
+      - --web.enable-lifecycle
+    logging: *default-logging
+    deploy:
+      resources:
+        limits:
+          memory: 512M
+
+volumes:
+  pgdata:
+  bird_etc:
+  bird_run:
@@ -0,0 +1,9 @@
+# BIRD 2 alongside evobgp-agent; share /etc/bird with the agent container (plan §4.1).
+FROM debian:bookworm-slim
+RUN apt-get update && apt-get install -y --no-install-recommends bird2 \
+    && rm -rf /var/lib/apt/lists/*
+COPY deploy/bird/bird.conf /etc/bird/bird.conf
+RUN mkdir -p /etc/bird/bird.d
+EXPOSE 179
+# Foreground for Docker; configs on shared volume override this file at runtime.
+CMD ["bird", "-f", "-c", "/etc/bird/bird.conf"]
@@ -0,0 +1,13 @@
+# evobgp-agent CLI (parse-check, birdc configure); install bird2 so `bird -p` matches bird2 image (plan §13).
+FROM golang:1.22-bookworm AS build
+WORKDIR /src
+COPY go.mod go.sum ./
+COPY . .
+RUN go build -trimpath -ldflags="-s -w" -o /out/evobgp-agent ./cmd/evobgp-agent
+
+FROM debian:bookworm-slim
+RUN apt-get update && apt-get install -y --no-install-recommends bird2 ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+COPY --from=build /out/evobgp-agent /usr/local/bin/evobgp-agent
+WORKDIR /etc/bird
+ENTRYPOINT ["/usr/local/bin/evobgp-agent"]
@@ -0,0 +1,11 @@
+# Статическая панель EvoBGP (SvelteKit) + nginx как reverse-proxy к evobgp-api (/v1, /metrics).
+FROM node:22-alpine AS build
+WORKDIR /web
+COPY web/package.json web/package-lock.json ./
+RUN npm ci
+COPY web/ ./
+RUN npm run build
+
+FROM nginx:1.27-alpine
+COPY deploy/docker/evobgp-web/nginx.conf /etc/nginx/conf.d/default.conf
+COPY --from=build /web/build /usr/share/nginx/html
@@ -0,0 +1,26 @@
+server {
+    listen 80;
+    server_name _;
+    root /usr/share/nginx/html;
+    gzip on;
+    gzip_types text/css application/javascript application/json image/svg+xml;
+
+    location /v1/ {
+        proxy_pass http://evobgp-api:8080/v1/;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    location = /metrics {
+        proxy_pass http://evobgp-api:8080/metrics;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+}
@@ -0,0 +1,18 @@
+# Универсальная сборка бинаря из cmd/* (ARG BIN=evobgp-api | evobgp-all).
+# INSTALL_BIRDC=1 ставит bird2 в рантайм-образ для EVOBGP_BIRDC_SOCKET (poll метрик birdc).
+FROM golang:1.22-bookworm AS build
+WORKDIR /src
+COPY go.mod go.sum ./
+RUN go mod download
+COPY . .
+ARG BIN=evobgp-api
+RUN CGO_ENABLED=0 go build -trimpath -ldflags="-s -w" -o /out/evobgp ./cmd/${BIN}
+
+FROM debian:bookworm-slim
+ARG INSTALL_BIRDC=0
+RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates \
+  && if [ "$INSTALL_BIRDC" = "1" ]; then apt-get install -y --no-install-recommends bird2; fi \
+  && rm -rf /var/lib/apt/lists/*
+COPY --from=build /out/evobgp /usr/local/bin/evobgp
+EXPOSE 8080
+ENTRYPOINT ["/usr/local/bin/evobgp"]
@@ -0,0 +1,24 @@
+# Правила для Prometheus (профиль compose `reference`). Подключите Alertmanager при необходимости.
+groups:
+  - name: evobgp-controlplane
+    rules:
+      - alert: EvoBGPMaterializedPrefixesZero
+        expr: evobgp_materialized_prefixes_max == 0
+        for: 2h
+        labels:
+          severity: warning
+        annotations:
+          summary: "В сторе control-plane нет ни одной ревизии с ненулевым materialized_prefix_count."
+          description: "Проверьте render/ingest и наличие ревизий."
+
+      - alert: EvoBGPBirdEstablishedMissing
+        expr: |
+          evobgp_bird_protocols_scrape_success == 1
+          and evobgp_bgp_peers_configured_total > 0
+          and evobgp_bird_bgp_sessions_established == 0
+        for: 10m
+        labels:
+          severity: critical
+        annotations:
+          summary: "Настроены пиры в сторе, но birdc не видит Established BGP-сессий."
+          description: "Проверьте bird2, сеть (TCP/179), пароли и что EVOBGP_BIRDC_SOCKET доступен API-контейнеру."
@@ -0,0 +1,12 @@
+global:
+  scrape_interval: 15s
+  evaluation_interval: 15s
+
+rule_files:
+  - /etc/prometheus/alerts.yml
+
+scrape_configs:
+  - job_name: evobgp-api
+    metrics_path: /metrics
+    static_configs:
+      - targets: ["evobgp-api:8080"]