mirror of
https://github.com/bitechdev/ResolveSpec.git
synced 2026-10-01 19:20:31 +00:00
warkanum
3e327d0c78
* Throttle async session-activity writes to once per token per minute * Add singleflight to session lookups, keystore validation and column/row security loads to stop cold-cache stampedes * Preload security rules in BeforeHandle (restheadspec, resolvespec) so they no longer need a second connection while the read tx is open * Add pkg/dbtrace: opt-in per-request DB call counting and pool logging (db_trace.* config, RESOLVESPEC_DB_TRACE_* env), wired into testserver * Add tests for load dedup, activity throttle and dbtrace
29 lines
1.4 KiB
Markdown
29 lines
1.4 KiB
Markdown
# dbtrace
|
|
|
|
Per-request DB call counting + pool logging. Off by default.
|
|
|
|
## Enable
|
|
| Config (`db_trace.*`) | Env | Meaning |
|
|
|---|---|---|
|
|
| `enabled` | `RESOLVESPEC_DB_TRACE_ENABLED` | per-request logging |
|
|
| `min_calls` (5) | `..._MIN_CALLS` | log if tx+pooled+raw >= N |
|
|
| `min_duration` (0) | `..._MIN_DURATION` | or request took >= D |
|
|
| `pool_log` | `..._POOL_LOG` | log pool stats on each dbmanager metrics publish |
|
|
|
|
Wire: `dbtrace.Configure(dbtrace.FromConfig(cfg.DBTrace))` and wrap handlers with `dbtrace.Middleware` (outside the auth middleware).
|
|
|
|
## Log fields
|
|
- `tx` transactions begun · `tx_queries` adapter queries inside `RunInTransaction` (share the tx connection)
|
|
- `pooled` adapter queries outside a tx (each takes a pool connection)
|
|
- `raw` direct `*sql.DB` calls, with kinds: `auth.session`, `auth.activity`, `security.column`, `security.row`, `probe.pg_proc`, `keystore.validate`
|
|
- Connections used ≈ `tx + pooled + raw`
|
|
|
|
## Pool log
|
|
`dbtrace pool <name>: open in_use idle max opened=+N waits=+N wait_time=+D` — `opened`/`waits` are deltas since last publish.
|
|
|
|
## Limits
|
|
- tx attribution is per request, assumes sequential use of a request's context
|
|
- `auth.activity` runs detached after the response: not in the request's log line
|
|
- `BeginTx`/`CommitTx` (manual tx) not counted; only `RunInTransaction`
|
|
- Raw counters cover the hot paths listed above only (not login/OAuth/passkey/TOTP)
|