# -*- coding: utf-8 -*- # Copyright 2019 The Matrix.org Foundation C.I.C. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # NOTE # This is a small wrapper around opentracing because opentracing is not currently # packaged downstream (specifically debian). Since opentracing instrumentation is # fairly invasive it was awkward to make it optional. As a result we opted to encapsulate # all opentracing state in these methods which effectively noop if opentracing is # not present. We should strongly consider encouraging the downstream distributers # to package opentracing and making opentracing a full dependency. In order to facilitate # this move the methods have work very similarly to opentracing's and it should only # be a matter of few regexes to move over to opentracing's access patterns proper. """ ============================ Using OpenTracing in Synapse ============================ Python-specific tracing concepts are at https://opentracing.io/guides/python/. Note that Synapse wraps OpenTracing in a small module (this one) in order to make the OpenTracing dependency optional. That means that the access patterns are different to those demonstrated in the OpenTracing guides. However, it is still useful to know, especially if OpenTracing is included as a full dependency in the future or if you are modifying this module. OpenTracing is encapsulated so that no span objects from OpenTracing are exposed in Synapse's code. This allows OpenTracing to be easily disabled in Synapse and thereby have OpenTracing as an optional dependency. This does however limit the number of modifiable spans at any point in the code to one. From here out references to `opentracing` in the code snippets refer to the Synapses module. Most methods provided in the module have a direct correlation to those provided by opentracing. Refer to docs there for a more in-depth documentation on some of the args and methods. Tracing ------- In Synapse it is not possible to start a non-active span. Spans can be started using the ``start_active_span`` method. This returns a scope (see OpenTracing docs) which is a context manager that needs to be entered and exited. This is usually done by using ``with``. .. code-block:: python from synapse.logging.opentracing import start_active_span with start_active_span("operation name"): # Do something we want to tracer Forgetting to enter or exit a scope will result in some mysterious and grievous log context errors. At anytime where there is an active span ``opentracing.set_tag`` can be used to set a tag on the current active span. Tracing functions ----------------- Functions can be easily traced using decorators. The name of the function becomes the operation name for the span. .. code-block:: python from synapse.logging.opentracing import trace # Start a span using 'interesting_function' as the operation name @trace def interesting_function(*args, **kwargs): # Does all kinds of cool and expected things return something_usual_and_useful Operation names can be explicitly set for functions by using ``trace_using_operation_name`` .. code-block:: python from synapse.logging.opentracing import trace_using_operation_name @trace_using_operation_name("A *much* better operation name") def interesting_badly_named_function(*args, **kwargs): # Does all kinds of cool and expected things return something_usual_and_useful Setting Tags ------------ To set a tag on the active span do .. code-block:: python from synapse.logging.opentracing import set_tag set_tag(tag_name, tag_value) There's a convenient decorator to tag all the args of the method. It uses inspection in order to use the formal parameter names prefixed with 'ARG_' as tag names. It uses kwarg names as tag names without the prefix. .. code-block:: python from synapse.logging.opentracing import tag_args @tag_args def set_fates(clotho, lachesis, atropos, father="Zues", mother="Themis"): pass set_fates("the story", "the end", "the act") # This will have the following tags # - ARG_clotho: "the story" # - ARG_lachesis: "the end" # - ARG_atropos: "the act" # - father: "Zues" # - mother: "Themis" Contexts and carriers --------------------- There are a selection of wrappers for injecting and extracting contexts from carriers provided. Unfortunately OpenTracing's three context injection techniques are not adequate for our inject of OpenTracing span-contexts into Twisted's http headers, EDU contents and our database tables. Also note that the binary encoding format mandated by OpenTracing is not actually implemented by jaeger_client v4.0.0 - it will silently noop. Please refer to the end of ``logging/opentracing.py`` for the available injection and extraction methods. Homeserver whitelisting ----------------------- Most of the whitelist checks are encapsulated in the modules's injection and extraction method but be aware that using custom carriers or crossing unchartered waters will require the enforcement of the whitelist. ``logging/opentracing.py`` has a ``whitelisted_homeserver`` method which takes in a destination and compares it to the whitelist. Most injection methods take a 'destination' arg. The context will only be injected if the destination matches the whitelist or the destination is None. ======= Gotchas ======= - Checking whitelists on span propagation - Inserting pii - Forgetting to enter or exit a scope - Span source: make sure that the span you expect to be active across a function call really will be that one. Does the current function have more than one caller? Will all of those calling functions have be in a context with an active span? """ import contextlib import inspect import logging import re from functools import wraps from canonicaljson import json from twisted.internet import defer from synapse.config import ConfigError # Helper class class _DummyTagNames(object): """wrapper of opentracings tags. We need to have them if we want to reference them without opentracing around. Clearly they should never actually show up in a trace. `set_tags` overwrites these with the correct ones.""" INVALID_TAG = "invalid-tag" COMPONENT = INVALID_TAG DATABASE_INSTANCE = INVALID_TAG DATABASE_STATEMENT = INVALID_TAG DATABASE_TYPE = INVALID_TAG DATABASE_USER = INVALID_TAG ERROR = INVALID_TAG HTTP_METHOD = INVALID_TAG HTTP_STATUS_CODE = INVALID_TAG HTTP_URL = INVALID_TAG MESSAGE_BUS_DESTINATION = INVALID_TAG PEER_ADDRESS = INVALID_TAG PEER_HOSTNAME = INVALID_TAG PEER_HOST_IPV4 = INVALID_TAG PEER_HOST_IPV6 = INVALID_TAG PEER_PORT = INVALID_TAG PEER_SERVICE = INVALID_TAG SAMPLING_PRIORITY = INVALID_TAG SERVICE = INVALID_TAG SPAN_KIND = INVALID_TAG SPAN_KIND_CONSUMER = INVALID_TAG SPAN_KIND_PRODUCER = INVALID_TAG SPAN_KIND_RPC_CLIENT = INVALID_TAG SPAN_KIND_RPC_SERVER = INVALID_TAG try: import opentracing tags = opentracing.tags except ImportError: opentracing = None tags = _DummyTagNames try: from jaeger_client import Config as JaegerConfig from synapse.logging.scopecontextmanager import LogContextScopeManager except ImportError: JaegerConfig = None LogContextScopeManager = None logger = logging.getLogger(__name__) # Block everything by default # A regex which matches the server_names to expose traces for. # None means 'block everything'. _homeserver_whitelist = None # Util methods def only_if_tracing(func): """Executes the function only if we're tracing. Otherwise return. Assumes the function wrapped may return None""" @wraps(func) def _only_if_tracing_inner(*args, **kwargs): if opentracing: return func(*args, **kwargs) else: return return _only_if_tracing_inner @contextlib.contextmanager def _noop_context_manager(*args, **kwargs): """Does exactly what it says on the tin""" yield # Setup def init_tracer(config): """Set the whitelists and initialise the JaegerClient tracer Args: config (HomeserverConfig): The config used by the homeserver """ global opentracing if not config.opentracer_enabled: # We don't have a tracer opentracing = None return if not opentracing or not JaegerConfig: raise ConfigError( "The server has been configured to use opentracing but opentracing is not " "installed." ) # Include the worker name name = config.worker_name if config.worker_name else "master" # Pull out the jaeger config if it was given. Otherwise set it to something sensible. # See https://github.com/jaegertracing/jaeger-client-python/blob/master/jaeger_client/config.py set_homeserver_whitelist(config.opentracer_whitelist) JaegerConfig( config=config.jaeger_config, service_name="{} {}".format(config.server_name, name), scope_manager=LogContextScopeManager(config), ).initialize_tracer() # Whitelisting @only_if_tracing def set_homeserver_whitelist(homeserver_whitelist): """Sets the homeserver whitelist Args: homeserver_whitelist (Iterable[str]): regex of whitelisted homeservers """ global _homeserver_whitelist if homeserver_whitelist: # Makes a single regex which accepts all passed in regexes in the list _homeserver_whitelist = re.compile( "({})".format(")|(".join(homeserver_whitelist)) ) @only_if_tracing def whitelisted_homeserver(destination): """Checks if a destination matches the whitelist Args: destination (str) """ _homeserver_whitelist if _homeserver_whitelist: return _homeserver_whitelist.match(destination) return False # Start spans and scopes # Could use kwargs but I want these to be explicit def start_active_span( operation_name, child_of=None, references=None, tags=None, start_time=None, ignore_active_span=False, finish_on_close=True, ): """Starts an active opentracing span. Note, the scope doesn't become active until it has been entered, however, the span starts from the time this message is called. Args: See opentracing.tracer Returns: scope (Scope) or noop_context_manager """ if opentracing is None: return _noop_context_manager() else: # We need to enter the scope here for the logcontext to become active return opentracing.tracer.start_active_span( operation_name, child_of=child_of, references=references, tags=tags, start_time=start_time, ignore_active_span=ignore_active_span, finish_on_close=finish_on_close, ) def start_active_span_follows_from(operation_name, contexts): if opentracing is None: return _noop_context_manager() else: references = [opentracing.follows_from(context) for context in contexts] scope = start_active_span(operation_name, references=references) return scope def start_active_span_from_request( request, operation_name, references=None, tags=None, start_time=None, ignore_active_span=False, finish_on_close=True, ): """ Extracts a span context from a Twisted Request. args: headers (twisted.web.http.Request) For the other args see opentracing.tracer returns: span_context (opentracing.span.SpanContext) """ # Twisted encodes the values as lists whereas opentracing doesn't. # So, we take the first item in the list. # Also, twisted uses byte arrays while opentracing expects strings. if opentracing is None: return _noop_context_manager() header_dict = { k.decode(): v[0].decode() for k, v in request.requestHeaders.getAllRawHeaders() } context = opentracing.tracer.extract(opentracing.Format.HTTP_HEADERS, header_dict) return opentracing.tracer.start_active_span( operation_name, child_of=context, references=references, tags=tags, start_time=start_time, ignore_active_span=ignore_active_span, finish_on_close=finish_on_close, ) def start_active_span_from_edu( edu_content, operation_name, references=[], tags=None, start_time=None, ignore_active_span=False, finish_on_close=True, ): """ Extracts a span context from an edu and uses it to start a new active span Args: edu_content (dict): and edu_content with a `context` field whose value is canonical json for a dict which contains opentracing information. For the other args see opentracing.tracer """ if opentracing is None: return _noop_context_manager() carrier = json.loads(edu_content.get("context", "{}")).get("opentracing", {}) context = opentracing.tracer.extract(opentracing.Format.TEXT_MAP, carrier) _references = [ opentracing.child_of(span_context_from_string(x)) for x in carrier.get("references", []) ] # For some reason jaeger decided not to support the visualization of multiple parent # spans or explicitely show references. I include the span context as a tag here as # an aid to people debugging but it's really not an ideal solution. references += _references scope = opentracing.tracer.start_active_span( operation_name, child_of=context, references=references, tags=tags, start_time=start_time, ignore_active_span=ignore_active_span, finish_on_close=finish_on_close, ) scope.span.set_tag("references", carrier.get("references", [])) return scope # Opentracing setters for tags, logs, etc @only_if_tracing def set_tag(key, value): """Sets a tag on the active span""" opentracing.tracer.active_span.set_tag(key, value) @only_if_tracing def log_kv(key_values, timestamp=None): """Log to the active span""" opentracing.tracer.active_span.log_kv(key_values, timestamp) @only_if_tracing def set_operation_name(operation_name): """Sets the operation name of the active span""" opentracing.tracer.active_span.set_operation_name(operation_name) # Injection and extraction @only_if_tracing def inject_active_span_twisted_headers(headers, destination, check_destination=True): """ Injects a span context into twisted headers in-place Args: headers (twisted.web.http_headers.Headers) span (opentracing.Span) Returns: In-place modification of headers Note: The headers set by the tracer are custom to the tracer implementation which should be unique enough that they don't interfere with any headers set by synapse or twisted. If we're still using jaeger these headers would be those here: https://github.com/jaegertracing/jaeger-client-python/blob/master/jaeger_client/constants.py """ if check_destination and not whitelisted_homeserver(destination): return span = opentracing.tracer.active_span carrier = {} opentracing.tracer.inject(span, opentracing.Format.HTTP_HEADERS, carrier) for key, value in carrier.items(): headers.addRawHeaders(key, value) @only_if_tracing def inject_active_span_byte_dict(headers, destination, check_destination=True): """ Injects a span context into a dict where the headers are encoded as byte strings Args: headers (dict) span (opentracing.Span) Returns: In-place modification of headers Note: The headers set by the tracer are custom to the tracer implementation which should be unique enough that they don't interfere with any headers set by synapse or twisted. If we're still using jaeger these headers would be those here: https://github.com/jaegertracing/jaeger-client-python/blob/master/jaeger_client/constants.py """ if not whitelisted_homeserver(destination): return span = opentracing.tracer.active_span carrier = {} opentracing.tracer.inject(span, opentracing.Format.HTTP_HEADERS, carrier) for key, value in carrier.items(): headers[key.encode()] = [value.encode()] @only_if_tracing def inject_active_span_text_map(carrier, destination, check_destination=True): """ Injects a span context into a dict Args: carrier (dict) destination (str): the name of the remote server. The span context will only be injected if the destination matches the homeserver_whitelist or destination is None. Returns: In-place modification of carrier Note: The headers set by the tracer are custom to the tracer implementation which should be unique enough that they don't interfere with any headers set by synapse or twisted. If we're still using jaeger these headers would be those here: https://github.com/jaegertracing/jaeger-client-python/blob/master/jaeger_client/constants.py """ if check_destination and not whitelisted_homeserver(destination): return opentracing.tracer.inject( opentracing.tracer.active_span, opentracing.Format.TEXT_MAP, carrier ) def get_active_span_text_map(destination=None): """ Gets a span context as a dict. This can be used instead of manually injecting a span into an empty carrier. Args: destination (str): the name of the remote server. Returns: dict: the active span's context if opentracing is enabled, otherwise empty. """ if not opentracing or (destination and not whitelisted_homeserver(destination)): return {} carrier = {} opentracing.tracer.inject( opentracing.tracer.active_span, opentracing.Format.TEXT_MAP, carrier ) return carrier def active_span_context_as_string(): """ Returns: The active span context encoded as a string. """ carrier = {} if opentracing: opentracing.tracer.inject( opentracing.tracer.active_span, opentracing.Format.TEXT_MAP, carrier ) return json.dumps(carrier) @only_if_tracing def span_context_from_string(carrier): """ Returns: The active span context decoded from a string. """ carrier = json.loads(carrier) return opentracing.tracer.extract(opentracing.Format.TEXT_MAP, carrier) @only_if_tracing def extract_text_map(carrier): """ Wrapper method for opentracing's tracer.extract for TEXT_MAP. Args: carrier (dict): a dict possibly containing a span context. Returns: The active span context extracted from carrier. """ return opentracing.tracer.extract(opentracing.Format.TEXT_MAP, carrier) # Tracing decorators def trace(func): """ Decorator to trace a function. Sets the operation name to that of the function's. """ if opentracing is None: return func @wraps(func) def _trace_inner(self, *args, **kwargs): if opentracing is None: return func(self, *args, **kwargs) scope = start_active_span(func.__name__) scope.__enter__() try: result = func(self, *args, **kwargs) if isinstance(result, defer.Deferred): def call_back(result): scope.__exit__(None, None, None) return result def err_back(result): scope.span.set_tag(tags.ERROR, True) scope.__exit__(None, None, None) return result result.addCallbacks(call_back, err_back) else: scope.__exit__(None, None, None) return result except Exception as e: scope.__exit__(type(e), None, e.__traceback__) raise return _trace_inner def trace_using_operation_name(operation_name): """Decorator to trace a function. Explicitely sets the operation_name.""" def trace(func): """ Decorator to trace a function. Sets the operation name to that of the function's. """ if opentracing is None: return func @wraps(func) def _trace_inner(self, *args, **kwargs): if opentracing is None: return func(self, *args, **kwargs) scope = start_active_span(operation_name) scope.__enter__() try: result = func(self, *args, **kwargs) if isinstance(result, defer.Deferred): def call_back(result): scope.__exit__(None, None, None) return result def err_back(result): scope.span.set_tag(tags.ERROR, True) scope.__exit__(None, None, None) return result result.addCallbacks(call_back, err_back) else: scope.__exit__(None, None, None) return result except Exception as e: scope.__exit__(type(e), None, e.__traceback__) raise return _trace_inner return trace def tag_args(func): """ Tags all of the args to the active span. """ if not opentracing: return func @wraps(func) def _tag_args_inner(self, *args, **kwargs): argspec = inspect.getargspec(func) for i, arg in enumerate(argspec.args[1:]): set_tag("ARG_" + arg, args[i]) set_tag("args", args[len(argspec.args) :]) set_tag("kwargs", kwargs) return func(self, *args, **kwargs) return _tag_args_inner def trace_servlet(servlet_name, extract_context=False): """Decorator which traces a serlet. It starts a span with some servlet specific tags such as the servlet_name and request information Args: servlet_name (str): The name to be used for the span's operation_name extract_context (bool): Whether to attempt to extract the opentracing context from the request the servlet is handling. """ def _trace_servlet_inner_1(func): if not opentracing: return func @wraps(func) @defer.inlineCallbacks def _trace_servlet_inner(request, *args, **kwargs): request_tags = { "request_id": request.get_request_id(), tags.SPAN_KIND: tags.SPAN_KIND_RPC_SERVER, tags.HTTP_METHOD: request.get_method(), tags.HTTP_URL: request.get_redacted_uri(), tags.PEER_HOST_IPV6: request.getClientIP(), } if extract_context: scope = start_active_span_from_request( request, servlet_name, tags=request_tags ) else: scope = start_active_span(servlet_name, tags=request_tags) with scope: result = yield defer.maybeDeferred(func, request, *args, **kwargs) return result return _trace_servlet_inner return _trace_servlet_inner_1