Ctrl K
ComunidadGuías…

constructor/containers.go

Rama main · réplica de lectura del repositorio original.

Archivo original ↗Preguntar a KiBot
package constructor

import (
	"fmt"
	"net"
	"strconv"
	"strings"

	"github.com/coroot/coroot/db"
	"github.com/coroot/coroot/model"
	"github.com/coroot/coroot/timeseries"
	"github.com/coroot/coroot/utils"
	"inet.af/netaddr"
	"k8s.io/klog"
)

type instanceId struct {
	ns   string
	name string
	node model.NodeId
}

type nsName struct {
	ns   string
	name string
}

func (c *Constructor) getInstanceByAppId(apps map[nsName]*model.Application, instances map[instanceId]*model.Instance, appId string) (*model.Instance, *model.Container) {
	if !strings.HasPrefix(appId, "/") {
		klog.Warningln("invalid app id:", appId)
		return nil, nil
	}
	parts := strings.Split(appId, "/")
	if len(parts) != 4 {
		klog.Warningln("invalid app id:", appId)
		return nil, nil
	}
	switch parts[1] {
	case "k8s", "k8s-cronjob":
	default:
		klog.Warningln("unknown app:", appId)
		return nil, nil
	}
	key := nsName{parts[2], parts[3]}
	app, ok := apps[key]
	if !ok {
		prefix := key.name + "-"
		for id, i := range instances {
			if id.ns == key.ns && strings.HasPrefix(id.name, prefix) {
				app = i.Owner
				break
			}
		}
		apps[key] = app
	}
	if app == nil || len(app.Instances) == 0 {
		return nil, nil
	}
	return app.Instances[0], nil
}

func (c *Constructor) getInstanceAndContainer(w *model.World, node *model.Node, instances map[instanceId]*model.Instance, containerId string, project *db.Project) (*model.Instance, *model.Container) {
	var nodeId model.NodeId
	var nodeName string
	if node != nil {
		nodeId = node.Id
		nodeName = node.GetName()
	}
	if !strings.HasPrefix(containerId, "/") {
		klog.Warningln("invalid container id:", containerId)
		return nil, nil
	}
	parts := strings.Split(containerId, "/")
	var instance *model.Instance
	var containerName string
	if len(parts) == 5 && parts[1] == "k8s" {
		w.IntegrationStatus.KubeStateMetrics.Required = true
		ns, pod := parts[2], parts[3]
		containerName = parts[4]
		instance = instances[instanceId{ns: ns, name: pod, node: nodeId}]
		if instance == nil {
			return nil, nil
		}
		return instance, instance.GetOrCreateContainer(containerId, containerName)
	}

	var (
		id    instanceId
		appId model.ApplicationId
	)
	if len(parts) == 5 && parts[1] == "k8s-cronjob" {
		w.IntegrationStatus.KubeStateMetrics.Required = true
		ns, job := parts[2], parts[3]
		containerName = parts[4]
		appId = c.newApplicationId(project.ClusterId(), ns, model.ApplicationKindCronJob, job)
		id = instanceId{ns: ns, name: fmt.Sprintf("%s@%s", job, nodeName), node: nodeId}
	} else if len(parts) == 7 && parts[1] == "nomad" {
		ns, job, group, allocId, task := parts[2], parts[3], parts[4], parts[5], parts[6]
		containerName = task
		appId = c.newApplicationId(project.ClusterId(), ns, model.ApplicationKindNomadJobGroup, job+"."+group)
		id = instanceId{ns: ns, name: group + "-" + allocId, node: nodeId}
	} else if len(parts) == 6 && parts[1] == "ecs" {
		// /ecs/<cluster>/<service>/<task-id>/<container-name>
		cluster, service, taskId := parts[2], parts[3], parts[4]
		containerName = parts[5]
		appId = c.newApplicationId(project.ClusterId(), cluster, model.ApplicationKindECSService, service)
		id = instanceId{ns: cluster, name: service + "-" + taskId, node: nodeId}
	} else {
		if len(parts) == 5 && parts[1] == "swarm" {
			id.ns = parts[2]
			appId = c.newApplicationId(project.ClusterId(), id.ns, model.ApplicationKindDockerSwarmService, parts[3])
			containerName = parts[3]
			id.name = parts[3] + "." + parts[4]
		} else {
			containerName = strings.TrimSuffix(
				strings.TrimSuffix(parts[len(parts)-1], ".service"),
				".slice")
			id.name = fmt.Sprintf("%s@%s", containerName, nodeName)
			appId = c.newApplicationId(project.ClusterId(), "", model.ApplicationKindUnknown, containerName)
		}
	}
	if id.name == "" {
		return nil, nil
	}
	if id.ns == "" {
		id.ns = "_"
	}
	id.node = nodeId
	instance = instances[id]
	if instance == nil {
		customApp := project.GetCustomApplicationName(id.name)
		if customApp != "" {
			appId.Name = customApp
		}
		instance = w.GetOrCreateApplication(appId, customApp != "").GetOrCreateInstance(id.name, node)
		instances[id] = instance
	}
	return instance, instance.GetOrCreateContainer(containerId, containerName)
}

type nodeCache map[model.NodeId]*model.Node

type containerCache map[model.NodeContainerId]struct {
	instance  *model.Instance
	container *model.Container
}

func (c *Constructor) loadContainers(w *model.World, metrics map[string][]*model.MetricValues, pjs promJobStatuses, nodes nodeCache, containers containerCache, servicesByClusterIP map[string]*model.Service, ip2fqdn map[string]*utils.StringSet, project *db.Project) {
	instances := map[instanceId]*model.Instance{}
	apps := map[nsName]*model.Application{}
	rttByInstance := map[instanceId]map[string]*timeseries.TimeSeries{}
	instancesByListen := map[model.Listen]*model.Instance{}

	for _, a := range w.Applications {
		if a.Id.Namespace != "" {
			apps[nsName{ns: a.Id.Namespace, name: a.Id.Name}] = a
		}
		for _, i := range a.Instances {
			var nodeId model.NodeId
			if i.Node != nil {
				nodeId = i.Node.Id
			}
			instances[instanceId{ns: a.Id.Namespace, name: i.Name, node: nodeId}] = i
			for l := range i.TcpListens {
				instancesByListen[l] = i // POD_IP:0
			}
		}
	}

	loadContainer := func(queryName string, f func(instance *model.Instance, container *model.Container, metric *model.MetricValues)) {
		ms := metrics[queryName]
		for _, m := range ms {
			appId := m.Labels["app_id"]
			if appId != "" {
				instance, container := c.getInstanceByAppId(apps, instances, appId)
				if instance != nil {
					f(instance, container, m)
				}
			} else {
				v, ok := containers[m.NodeContainerId]
				if !ok {
					nodeId := model.NewNodeIdFromLabels(m)
					v.instance, v.container = c.getInstanceAndContainer(w, nodes[nodeId], instances, m.ContainerId, project)
					containers[m.NodeContainerId] = v
				}
				if v.instance == nil || v.container == nil {
					continue
				}
				f(v.instance, v.container, m)
			}
		}
	}

	loadContainer("container_info", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		if image := metric.Labels["image"]; image != "" {
			container.Image = image
		}
		if strings.HasSuffix(metric.Labels["systemd_triggered_by"], ".timer") || metric.Labels["systemd_type"] == "oneshot" {
			instance.Owner.PeriodicSystemdJob = true
		}
	})
	loadContainer("container_application_type", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		container.ApplicationTypes[model.ApplicationType(metric.Labels["application_type"])] = true
	})

	loadContainer("container_cpu_limit", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		container.CpuLimit = merge(container.CpuLimit, metric.Values, timeseries.Any)
	})
	loadContainer("container_cpu_usage", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		container.CpuUsage = merge(container.CpuUsage, metric.Values, timeseries.Any)
	})
	loadContainer("container_cpu_delay", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		container.CpuDelay = merge(container.CpuDelay, metric.Values, timeseries.Any)
	})
	loadContainer("container_throttled_time", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		container.ThrottledTime = merge(container.ThrottledTime, metric.Values, timeseries.Any)
	})
	loadContainer("container_memory_rss", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		container.MemoryRss = merge(container.MemoryRss, metric.Values, timeseries.Any)
	})
	loadContainer("container_memory_cache", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		container.MemoryCache = merge(container.MemoryCache, metric.Values, timeseries.Any)
	})
	loadContainer("container_memory_pressure", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		switch metric.Labels["kind"] {
		case "some":
			container.MemoryPressureSome = merge(container.MemoryPressureSome, metric.Values, timeseries.Any)
		case "full":
			container.MemoryPressureFull = merge(container.MemoryPressureFull, metric.Values, timeseries.Any)
		}
	})
	loadContainer("container_io_pressure", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		switch metric.Labels["kind"] {
		case "some":
			container.IOPressureSome = merge(container.IOPressureSome, metric.Values, timeseries.Any)
		case "full":
			container.IOPressureFull = merge(container.IOPressureFull, metric.Values, timeseries.Any)
		}
	})
	loadContainer("container_memory_limit", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		container.MemoryLimit = merge(container.MemoryLimit, metric.Values, timeseries.Any)
	})
	loadContainer("container_oom_kills_total", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		container.OOMKills = merge(container.OOMKills, timeseries.Increase(metric.Values, pjs.get(metric.Labels)), timeseries.Any)
	})
	loadContainer("container_restarts", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		container.Restarts = merge(container.Restarts, timeseries.Increase(metric.Values, pjs.get(metric.Labels)), timeseries.Any)
	})
	loadContainer("container_net_latency", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		id := instanceId{ns: instance.Owner.Id.Namespace, name: instance.Name, node: instance.NodeId()}
		rtts := rttByInstance[id]
		if rtts == nil {
			rtts = map[string]*timeseries.TimeSeries{}
		}
		rtts[metric.Destination] = merge(rtts[metric.Destination], metric.Values, timeseries.Any)
		rttByInstance[id] = rtts
	})
	loadContainer("container_net_tcp_listen_info", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		ipStr, port, err := net.SplitHostPort(metric.Labels["listen_addr"])
		if err != nil {
			klog.Warningf("failed to split %s to ip:port pair: %s", metric.Labels["listen_addr"], err)
			return
		}
		isActive := metric.Values.Last() == 1
		l := model.Listen{IP: ipStr, Port: port, Proxied: metric.Labels["proxy"] != ""}
		if !instance.TcpListens[l] {
			instance.TcpListens[l] = isActive
		}
		if ip := net.ParseIP(ipStr); ip.IsLoopback() {
			if instance.Node != nil {
				l.IP = instance.NodeName()
				instancesByListen[l] = instance
			}
		} else {
			instancesByListen[l] = instance
		}
	})

	getInstanceByDest := func(m *model.MetricValues) *model.Instance {
		remoteIP, remotePort, err := net.SplitHostPort(m.ActualDestination)
		if err != nil {
			return nil
		}
		l := model.Listen{IP: remoteIP, Port: remotePort, Proxied: true}
		if ip := net.ParseIP(remoteIP); ip.IsLoopback() {
			return nil
		}
		if instance := instancesByListen[l]; instance != nil {
			return instance
		}
		l.Proxied = false
		if instance := instancesByListen[l]; instance != nil {
			return instance
		}
		l.Port = "0"
		return instancesByListen[l]
	}

	loadConnection := func(queryName string, f func(instance *model.Instance, connection *model.Connection, metric *model.MetricValues)) {
		loadContainer(queryName, func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
			conn := getOrCreateConnection(instance, metric)
			if conn != nil {
				f(instance, conn, metric)
			}
		})
	}
	loadConnection("container_net_tcp_successful_connects", func(instance *model.Instance, connection *model.Connection, metric *model.MetricValues) {
		connection.SuccessfulConnections = merge(connection.SuccessfulConnections, metric.Values, timeseries.NanSum)
	})
	loadConnection("container_net_tcp_connection_time_seconds", func(instance *model.Instance, connection *model.Connection, metric *model.MetricValues) {
		connection.ConnectionTime = merge(connection.ConnectionTime, metric.Values, timeseries.NanSum)
	})

	regionAz := func(instance *model.Instance, metric *model.MetricValues) (string, string, string, string, *model.Instance) {
		srcAZ := metric.Labels["az"]
		srcRegion := metric.Labels["region"]
		var dstRegion, dstAZ string
		var destInstance *model.Instance

		if srcAZ == "" && instance.Node != nil {
			srcAZ = instance.Node.AvailabilityZone.Value()
			srcRegion = instance.Node.Region.Value()
		}
		if destInstance = getInstanceByDest(metric); destInstance != nil && destInstance.Node != nil {
			dstRegion = destInstance.Node.Region.Value()
			dstAZ = destInstance.Node.AvailabilityZone.Value()
		}
		return srcRegion, srcAZ, dstRegion, dstAZ, destInstance
	}

	loadConnection("container_net_tcp_bytes_sent", func(instance *model.Instance, connection *model.Connection, metric *model.MetricValues) {
		connection.BytesSent = merge(connection.BytesSent, metric.Values, timeseries.NanSum)

		srcRegion, srcAZ, dstRegion, dstAZ, destInstance := regionAz(instance, metric)
		if dstRegion != "" && dstRegion == srcRegion && srcAZ != "" && dstAZ != "" {
			if srcAZ == dstAZ {
				return
			}
			instance.Owner.TrafficStats.CrossAZEgress = merge(instance.Owner.TrafficStats.CrossAZEgress, metric.Values, timeseries.NanSum)
			destInstance.Owner.TrafficStats.CrossAZIngress = merge(destInstance.Owner.TrafficStats.CrossAZIngress, metric.Values, timeseries.NanSum)
			return
		}
		dstIp, _, err := net.SplitHostPort(metric.Destination)
		if err != nil {
			return
		}
		ip, err := netaddr.ParseIP(dstIp)
		switch {
		case err != nil: //fqdn
		case utils.IsIpExternal(ip):
		default:
			return
		}
		instance.Owner.TrafficStats.InternetEgress = merge(instance.Owner.TrafficStats.InternetEgress, metric.Values, timeseries.NanSum)
	})

	loadConnection("container_net_tcp_bytes_received", func(instance *model.Instance, connection *model.Connection, metric *model.MetricValues) {
		connection.BytesReceived = merge(connection.BytesReceived, metric.Values, timeseries.NanSum)
		srcRegion, srcAZ, dstRegion, dstAZ, destInstance := regionAz(instance, metric)
		if dstRegion != "" && dstRegion == srcRegion && srcAZ != "" && dstAZ != "" {
			if srcAZ == dstAZ {
				return
			}
			instance.Owner.TrafficStats.CrossAZIngress = merge(instance.Owner.TrafficStats.CrossAZIngress, metric.Values, timeseries.NanSum)
			destInstance.Owner.TrafficStats.CrossAZEgress = merge(destInstance.Owner.TrafficStats.CrossAZEgress, metric.Values, timeseries.NanSum)
			return
		}
	})
	loadConnection("container_net_tcp_failed_connects", func(instance *model.Instance, connection *model.Connection, metric *model.MetricValues) {
		connection.FailedConnections = merge(connection.FailedConnections, metric.Values, timeseries.NanSum)
	})
	loadConnection("container_net_tcp_active_connections", func(instance *model.Instance, connection *model.Connection, metric *model.MetricValues) {
		connection.Active = merge(connection.Active, metric.Values, timeseries.NanSum)
	})
	loadConnection("container_net_tcp_retransmits", func(instance *model.Instance, connection *model.Connection, metric *model.MetricValues) {
		connection.Retransmissions = merge(connection.Retransmissions, metric.Values, timeseries.NanSum)
	})

	loadL7RequestsCount := func(queryName string, protocol model.Protocol) {
		loadConnection(queryName, func(instance *model.Instance, connection *model.Connection, metric *model.MetricValues) {
			switch protocol {
			case model.ProtocolRabbitmq, model.ProtocolNats:
				protocol += model.Protocol("-" + metric.Labels["method"])
			}
			if connection.RequestsCount[protocol] == nil {
				connection.RequestsCount[protocol] = map[string]*timeseries.TimeSeries{}
			}
			status := metric.Labels["status"]
			connection.RequestsCount[protocol][status] = merge(connection.RequestsCount[protocol][status], metric.Values, timeseries.NanSum)
		})
	}
	loadL7RequestsCount("container_http_requests_count", model.ProtocolHttp)
	loadL7RequestsCount("container_postgres_queries_count", model.ProtocolPostgres)
	loadL7RequestsCount("container_mysql_queries_count", model.ProtocolMysql)
	loadL7RequestsCount("container_mongo_queries_count", model.ProtocolMongodb)
	loadL7RequestsCount("container_redis_queries_count", model.ProtocolRedis)
	loadL7RequestsCount("container_memcached_queries_count", model.ProtocolMemcached)
	loadL7RequestsCount("container_kafka_requests_count", model.ProtocolKafka)
	loadL7RequestsCount("container_cassandra_queries_count", model.ProtocolCassandra)
	loadL7RequestsCount("container_rabbitmq_messages", model.ProtocolRabbitmq)
	loadL7RequestsCount("container_nats_messages", model.ProtocolNats)
	loadL7RequestsCount("container_clickhouse_queries_count", model.ProtocolClickhouse)
	loadL7RequestsCount("container_zookeeper_requests_count", model.ProtocolZookeeper)
	loadL7RequestsCount("container_foundationdb_requests_count", model.ProtocolFoundationdb)

	loadL7RequestsLatency := func(queryName string, protocol model.Protocol) {
		loadConnection(queryName, func(instance *model.Instance, connection *model.Connection, metric *model.MetricValues) {
			connection.RequestsLatency[protocol] = merge(connection.RequestsLatency[protocol], metric.Values, timeseries.NanSum)
		})
	}
	loadL7RequestsLatency("container_http_requests_latency_total", model.ProtocolHttp)
	loadL7RequestsLatency("container_postgres_queries_latency_total", model.ProtocolPostgres)
	loadL7RequestsLatency("container_mysql_queries_latency_total", model.ProtocolMysql)
	loadL7RequestsLatency("container_mongo_queries_latency_total", model.ProtocolMongodb)
	loadL7RequestsLatency("container_redis_queries_latency_total", model.ProtocolRedis)
	loadL7RequestsLatency("container_memcached_queries_latency_total", model.ProtocolMemcached)
	loadL7RequestsLatency("container_kafka_requests_latency_total", model.ProtocolKafka)
	loadL7RequestsLatency("container_cassandra_queries_latency_total", model.ProtocolCassandra)
	loadL7RequestsLatency("container_clickhouse_queries_latency_total", model.ProtocolClickhouse)
	loadL7RequestsLatency("container_zookeeper_requests_latency_total", model.ProtocolZookeeper)
	loadL7RequestsLatency("container_foundationdb_requests_latency_total", model.ProtocolFoundationdb)

	loadL7RequestsHistogram := func(queryName string, protocol model.Protocol) {
		loadConnection(queryName, func(instance *model.Instance, connection *model.Connection, metric *model.MetricValues) {
			le, err := strconv.ParseFloat(metric.Labels["le"], 32)
			if err != nil {
				klog.Warningln(err)
				return
			}
			if connection.RequestsHistogram[protocol] == nil {
				connection.RequestsHistogram[protocol] = map[float32]*timeseries.TimeSeries{}
			}
			connection.RequestsHistogram[protocol][float32(le)] = merge(connection.RequestsHistogram[protocol][float32(le)], metric.Values, timeseries.NanSum)
		})
	}
	loadL7RequestsHistogram("container_http_requests_histogram", model.ProtocolHttp)
	loadL7RequestsHistogram("container_postgres_queries_histogram", model.ProtocolPostgres)
	loadL7RequestsHistogram("container_mysql_queries_histogram", model.ProtocolMysql)
	loadL7RequestsHistogram("container_mongo_queries_histogram", model.ProtocolMongodb)
	loadL7RequestsHistogram("container_redis_queries_histogram", model.ProtocolRedis)
	loadL7RequestsHistogram("container_memcached_queries_histogram", model.ProtocolMemcached)
	loadL7RequestsHistogram("container_kafka_requests_histogram", model.ProtocolKafka)
	loadL7RequestsHistogram("container_cassandra_queries_histogram", model.ProtocolCassandra)
	loadL7RequestsHistogram("container_clickhouse_queries_histogram", model.ProtocolClickhouse)
	loadL7RequestsHistogram("container_zookeeper_requests_histogram", model.ProtocolZookeeper)
	loadL7RequestsHistogram("container_foundationdb_requests_histogram", model.ProtocolFoundationdb)

	loadL7InboundRequestsCount := func(queryName string) {
		loadContainer(queryName, func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
			app := instance.Owner
			status := metric.Labels["status"]
			app.InboundRequestsCount[status] = merge(app.InboundRequestsCount[status], metric.Values, timeseries.NanSum)
		})
	}
	loadL7InboundRequestsCount("container_http_inbound_requests_count")
	loadL7InboundRequestsCount("container_llm_inbound_requests_count")
	loadL7InboundRequestsCount("container_postgres_inbound_queries_count")
	loadL7InboundRequestsCount("container_mysql_inbound_queries_count")
	loadL7InboundRequestsCount("container_mongo_inbound_queries_count")
	loadL7InboundRequestsCount("container_redis_inbound_queries_count")
	loadL7InboundRequestsCount("container_memcached_inbound_queries_count")
	loadL7InboundRequestsCount("container_kafka_inbound_requests_count")
	loadL7InboundRequestsCount("container_cassandra_inbound_queries_count")
	loadL7InboundRequestsCount("container_clickhouse_inbound_queries_count")
	loadL7InboundRequestsCount("container_zookeeper_inbound_requests_count")
	loadL7InboundRequestsCount("container_foundationdb_inbound_requests_count")

	loadL7InboundRequestsHistogram := func(queryName string) {
		loadContainer(queryName, func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
			le, err := strconv.ParseFloat(metric.Labels["le"], 32)
			if err != nil {
				klog.Warningln(err)
				return
			}
			app := instance.Owner
			app.InboundRequestsHistogram[float32(le)] = merge(app.InboundRequestsHistogram[float32(le)], metric.Values, timeseries.NanSum)
		})
	}
	loadL7InboundRequestsHistogram("container_http_inbound_requests_histogram")
	loadL7InboundRequestsHistogram("container_postgres_inbound_queries_histogram")
	loadL7InboundRequestsHistogram("container_mysql_inbound_queries_histogram")
	loadL7InboundRequestsHistogram("container_mongo_inbound_queries_histogram")
	loadL7InboundRequestsHistogram("container_redis_inbound_queries_histogram")
	loadL7InboundRequestsHistogram("container_memcached_inbound_queries_histogram")
	loadL7InboundRequestsHistogram("container_kafka_inbound_requests_histogram")
	loadL7InboundRequestsHistogram("container_cassandra_inbound_queries_histogram")
	loadL7InboundRequestsHistogram("container_clickhouse_inbound_queries_histogram")
	loadL7InboundRequestsHistogram("container_zookeeper_inbound_requests_histogram")
	loadL7InboundRequestsHistogram("container_foundationdb_inbound_requests_histogram")

	loadContainer("container_llm_inbound_requests_histogram", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		le, err := strconv.ParseFloat(metric.Labels["le"], 32)
		if err != nil {
			klog.Warningln(err)
			return
		}
		app := instance.Owner
		app.InboundLLMRequestsHistogram[float32(le)] = merge(app.InboundLLMRequestsHistogram[float32(le)], metric.Values, timeseries.NanSum)
	})

	loadInstanceByDest := func(queryName string, f func(instance *model.Instance, m *model.MetricValues)) {
		ms := metrics[queryName]
		for _, m := range ms {
			if instance := getInstanceByDest(m); instance != nil {
				f(instance, m)
			}
		}
	}
	loadInstanceByDest("l7_requests_by_dest", func(instance *model.Instance, m *model.MetricValues) {
		status := m.Labels["status"]
		if model.IsRequestStatusFailed(status) {
			instance.Requests.Failed = merge(instance.Requests.Failed, m.Values, timeseries.NanSum)
		} else {
			instance.Requests.Ok = merge(instance.Requests.Ok, m.Values, timeseries.NanSum)
		}
	})
	loadInstanceByDest("l7_total_latency_by_dest", func(instance *model.Instance, m *model.MetricValues) {
		instance.Requests.TotalLatency = merge(instance.Requests.TotalLatency, m.Values, timeseries.NanSum)
	})

	loadContainer("container_dns_requests_total", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		r := model.DNSRequest{
			Type:   metric.Labels["request_type"],
			Domain: metric.Labels["domain"],
		}
		if r.Type == "" || r.Domain == "" {
			return
		}
		status := metric.Labels["status"]
		byStatus := instance.Owner.DNSRequests[r]
		if byStatus == nil {
			byStatus = map[string]*timeseries.TimeSeries{}
			instance.Owner.DNSRequests[r] = byStatus
		}
		byStatus[status] = merge(byStatus[status], metric.Values, timeseries.NanSum)
	})
	loadContainer("container_dns_requests_latency", func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
		le, err := strconv.ParseFloat(metric.Labels["le"], 32)
		if err != nil {
			klog.Warningln(err)
			return
		}
		instance.Owner.DNSRequestsHistogram[float32(le)] = merge(instance.Owner.DNSRequestsHistogram[float32(le)], metric.Values, timeseries.Any)
	})

	loadVolume := func(queryName string, f func(volume *model.Volume, metric *model.MetricValues)) {
		loadContainer(queryName, func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
			v := getOrCreateInstanceVolume(instance, metric)
			f(v, metric)
		})
	}
	loadVolume("container_volume_size", func(volume *model.Volume, metric *model.MetricValues) {
		volume.CapacityBytes = merge(volume.CapacityBytes, metric.Values, timeseries.Any)
	})
	loadVolume("container_volume_used", func(volume *model.Volume, metric *model.MetricValues) {
		volume.UsedBytes = merge(volume.UsedBytes, metric.Values, timeseries.Any)
	})

	loadGPU := func(queryName string, f func(g *model.InstanceGPUUsage, metric *model.MetricValues)) {
		loadContainer(queryName, func(instance *model.Instance, container *model.Container, metric *model.MetricValues) {
			f(getOrCreateInstanceGPU(instance, metric), metric)
		})
	}
	loadGPU("container_gpu_usage_percent", func(g *model.InstanceGPUUsage, metric *model.MetricValues) {
		g.UsageAverage = merge(g.UsageAverage, metric.Values, timeseries.Any)
	})
	loadGPU("container_gpu_memory_usage_percent", func(g *model.InstanceGPUUsage, metric *model.MetricValues) {
		g.MemoryUsageAverage = merge(g.MemoryUsageAverage, metric.Values, timeseries.Any)
	})

	for _, app := range w.Applications { // lookup remote instance by listen
		for _, instance := range app.Instances {
			for _, u := range instance.Upstreams {
				remoteIP := u.ActualRemoteIP
				remotePort := u.ActualRemotePort
				if remoteIP == "" {
					remoteIP = u.ServiceRemoteIP
					remotePort = u.ServiceRemotePort
				}
				l := model.Listen{IP: remoteIP, Port: remotePort, Proxied: true}
				if ip := net.ParseIP(remoteIP); ip.IsLoopback() && instance.Node != nil {
					l.IP = instance.NodeName()
				}
				if u.RemoteInstance = instancesByListen[l]; u.RemoteInstance == nil {
					l.Proxied = false
					if u.RemoteInstance = instancesByListen[l]; u.RemoteInstance == nil {
						l.Port = "0"
						u.RemoteInstance = instancesByListen[l]
					}
				}
				if upstreams, ok := rttByInstance[instanceId{ns: instance.Owner.Id.Namespace, name: instance.Name, node: instance.NodeId()}]; ok {
					u.Rtt = merge(u.Rtt, upstreams[u.ActualRemoteIP], timeseries.Any)
				}
				if svc := servicesByClusterIP[u.ServiceRemoteIP]; svc != nil {
					u.Service = svc
					if u.RemoteInstance == nil {
						if a := apps[nsName{ns: svc.Namespace, name: svc.Name}]; a != nil && len(a.Instances) > 0 {
							u.RemoteInstance = a.Instances[0]
						}
					}
				}
			}
		}
	}

	isEmpty := func(ts *timeseries.TimeSeries) bool {
		return ts.IsEmpty() || ts.Reduce(timeseries.NanSum) == 0.
	}
	serviceEndpointInstances := map[*model.Service]*model.Instance{}
	for _, app := range w.Applications { // creating ApplicationKindExternalService for unknown remote instances
		for _, instance := range app.Instances {
			for _, u := range instance.Upstreams {
				if u.RemoteInstance != nil {
					continue
				}
				appId := c.newApplicationId(model.ClusterIdExternal, "external", model.ApplicationKindExternalService, "")
				svc := servicesByClusterIP[u.ServiceRemoteIP]
				instanceName := u.ServiceRemoteIP + ":" + u.ServiceRemotePort
				if svc != nil {
					u.Service = svc
					if a := svc.GetDestinationApplication(); a != nil && len(a.Instances) > 0 {
						u.RemoteInstance = a.Instances[0]
						continue
					}
					ri, ok := serviceEndpointInstances[svc]
					if !ok {
						ri = serviceEndpointInstance(svc, instancesByListen)
						serviceEndpointInstances[svc] = ri
					}
					if ri != nil {
						u.RemoteInstance = ri
						continue
					}
					appId.Name = svc.Name
				} else {
					if isEmpty(u.SuccessfulConnections) && isEmpty(u.Active) && isEmpty(u.FailedConnections) {
						continue
					}
					if u.ActualRemoteIP == "" && net.ParseIP(u.ServiceRemoteIP) == nil {
						appId.Name = u.ServiceRemoteIP
					} else if fqdns := ip2fqdn[u.ServiceRemoteIP]; fqdns != nil && fqdns.Len() > 0 {
						appId.Name = fqdns.Items()[0] + ":" + u.ServiceRemotePort
					} else {
						appId.Name = externalServiceName(u.ServiceRemotePort)
					}
				}
				customApp := project.GetCustomApplicationName(instanceName)
				if customApp != "" {
					appId.Name = customApp
				}
				ri := w.GetOrCreateApplication(appId, customApp != "").GetOrCreateInstance(instanceName, nil)
				ri.TcpListens[model.Listen{IP: u.ActualRemoteIP, Port: u.ActualRemotePort}] = true
				u.RemoteInstance = ri
			}
		}
	}
}

func serviceEndpointInstance(svc *model.Service, instancesByListen map[model.Listen]*model.Instance) *model.Instance {
	var res *model.Instance
	for ep := range svc.Endpoints {
		ip := ep.IP().String()
		i := instancesByListen[model.Listen{IP: ip, Port: strconv.Itoa(int(ep.Port()))}]
		if i == nil {
			i = instancesByListen[model.Listen{IP: ip, Port: "0"}]
		}
		i = freshestSameNameInstance(i)
		if i == nil {
			continue
		}
		if res != nil && res.Owner != i.Owner && !sameDBCluster(res, i) {
			return nil
		}
		res = i
	}
	return res
}

func sameDBCluster(a, b *model.Instance) bool {
	c := a.ClusterName.Value()
	return c != "" && c == b.ClusterName.Value()
}

func getOrCreateConnection(instance *model.Instance, m *model.MetricValues) *model.Connection {
	if instance.Owner.Id.Name == "docker" { // ignore docker-proxy's connections
		return nil
	}

	connection := instance.Upstreams[m.ConnectionKey]
	if connection == nil {
		var actualIP, actualPort, serviceIP, servicePort string
		var err error
		serviceIP, servicePort, err = net.SplitHostPort(m.Destination)
		if err != nil {
			klog.Warningf("failed to split %s to ip:port pair: %s", m.Destination, err)
			return nil
		}
		if m.ActualDestination != "" {
			actualIP, actualPort, err = net.SplitHostPort(m.ActualDestination)
			if err != nil {
				klog.Warningf("failed to split %s to ip:port pair: %s", m.ActualDestination, err)
				return nil
			}
		}
		connection = &model.Connection{
			Instance:          instance,
			ActualRemoteIP:    actualIP,
			ActualRemotePort:  actualPort,
			ServiceRemoteIP:   serviceIP,
			ServiceRemotePort: servicePort,

			RequestsCount:     map[model.Protocol]map[string]*timeseries.TimeSeries{},
			RequestsLatency:   map[model.Protocol]*timeseries.TimeSeries{},
			RequestsHistogram: map[model.Protocol]map[float32]*timeseries.TimeSeries{},
		}
		instance.Upstreams[m.ConnectionKey] = connection
	}
	return connection
}

func getOrCreateInstanceVolume(instance *model.Instance, m *model.MetricValues) *model.Volume {
	var volume *model.Volume
	for _, v := range instance.Volumes {
		if v.MountPoint == m.Labels["mount_point"] {
			volume = v
			break
		}
	}
	if volume == nil {
		volume = &model.Volume{MountPoint: m.Labels["mount_point"]}
		instance.Volumes = append(instance.Volumes, volume)
	}
	volume.Name.Update(m.Values, m.Labels["volume"])
	volume.Device.Update(m.Values, m.Labels["device"])
	return volume
}

func getOrCreateInstanceGPU(instance *model.Instance, m *model.MetricValues) *model.InstanceGPUUsage {
	uuid := m.Labels["gpu_uuid"]
	g := instance.GPUUsage[uuid]
	if g == nil {
		g = &model.InstanceGPUUsage{}
		instance.GPUUsage[uuid] = g
	}
	if instance.Node != nil && instance.Node.GPUs != nil {
		if gpu := instance.Node.GPUs[uuid]; gpu != nil {
			gpu.Instances[instance.Name] = instance
		}
	}
	return g
}

func externalServiceName(port string) string {
	var service string
	switch port {
	case "5432":
		service = "postgres"
	case "3306":
		service = "mysql"
	case "11211":
		service = "memcached"
	case "2181":
		service = "zookeeper"
	case "9092", "9093", "9094":
		service = "kafka"
	case "6379":
		service = "redis"
	case "9042", "9160", "9142", "7000", "7001", "7199":
		service = "cassandra"
	case "27017", "27018":
		service = "mongodb"
	case "9200", "9300":
		service = "elasticsearch"
	case "80", "443", "8080":
		service = "http"
	default:
		return "external:" + port
	}
	return "external-" + service
}