Consul
Distributed Tracing
Distributed tracing is a way to track and correlate requests across microservices. Distributed tracing must first be implemented in each application, it cannot be added by Consul. Once implemented in your applications, adding distributed tracing to Consul will add the sidecar proxies as spans in the request path.
Application Changes
Consul alone cannot implement distributed tracing for your applications. Each application must propagate the required headers. Typically this is done using a tracing library such as:
- https://github.com/opentracing/opentracing-go
- https://github.com/DataDog/dd-trace-go
- https://github.com/openzipkin/zipkin-go
Configuration
Once your applications have been instrumented with a tracing library, you are ready to configure Consul to add sidecar proxy spans to the trace. Your eventual config will look something like:
Kind = "proxy-defaults"
Name = "global"
Config {
protocol = "http"
envoy_tracing_json = <<EOF
{
"http":{
"name":"envoy.tracers.zipkin",
"typedConfig":{
"@type":"type.googleapis.com/envoy.config.trace.v3.ZipkinConfig",
"collector_cluster":"collector_cluster_name",
"collector_endpoint_version":"HTTP_JSON",
"collector_endpoint":"/api/v2/spans",
"shared_span_context":false
}
}
}
EOF
envoy_extra_static_clusters_json = <<EOF
{
"connect_timeout":"3.000s",
"dns_lookup_family":"V4_ONLY",
"lb_policy":"ROUND_ROBIN",
"load_assignment":{
"cluster_name":"collector_cluster_name",
"endpoints":[
{
"lb_endpoints":[
{
"endpoint":{
"address":{
"socket_address":{
"address":"collector-url",
"port_value":9411,
"protocol":"TCP"
}
}
}
}
]
}
]
},
"name":"collector_cluster_name",
"type":"STRICT_DNS"
}
EOF
}
NOTE: This example uses a proxy defaults config entry which will apply to all proxies but you can also apply this config in the proxy service registration (not supported on Kubernetes).
Within the config there are two keys you need to customize:
envoy_tracing_json
: Sets the tracing configuration for your specific tracing type. See the Envoy tracers documentation for your specific collector's configuration. This configuration will reference the cluster name defined inenvoy_extra_static_clusters_json
.envoy_extra_static_clusters_json
: Defines the address of your tracing collector where Envoy will send its spans. In this example the URL wascollector-url:9411
.
Applying the configuration
This configuration only applies when proxies are restarted since it changes the bootstrap config for Envoy which can only be applied on startup. This means you must restart all your proxies for changes to this config to take effect.
Note: On Kubernetes this is a matter of restarting your deployments, e.g. kubectl rollout restart deploy/deploy-name
.
Considerations
Distributed tracing is only supported for HTTP and gRPC services. You must specify the protocol either globally via a proxy defaults config entry:
Kind = "proxy-defaults" Name = "global" Config { protocol = "http" }
Or via a service defaults config entry for each service:
Kind = "service-defaults" Name = "service-name" Protocol = "http"
Requests through Ingress Gateways will not be traced unless the header
x-client-trace-id: 1
is set (see hashicorp/consul#6645).Consul does not currently support interoperation with OpenTelemetry libraries due to Envoy not yet having support.
Tracing is only supported with Envoy proxies, not the built-in proxy.
When configuring the Zipkin tracer in
envoy_tracing_json
, settrace_id_128bit
totrue
if your application is configured to generate 128-bit trace IDs. For example:{ "http": { "name": "envoy.tracers.zipkin", "typedConfig": { "@type": "type.googleapis.com/envoy.config.trace.v3.ZipkinConfig", "collector_cluster": "zipkin", "collector_endpoint_version": "HTTP_JSON", "collector_endpoint": "/api/v2/spans", "shared_span_context": false, "trace_id_128bit": true } } }