Timeout defaults

Review this page for a list of commonly used timeout settings in Gloo Gateway, organized by custom resource. For more information, see the API reference for each resource.

Gateway CRD

• Gateway
  • httpGateway
    • options
      • httpConnectionManagerSettings (see also Envoy HCM and the Gloo HCM )
        • idleTimeout defaults to 1 hour (see also Envoy HttpProtocolOptions)
        • streamIdleTimeout defaults to 5 minutes
        • requestTimeout (downstream) disabled by default, unlimited
        • drainTimeout defaults to 5 seconds
        • delayedCloseTimeout defaults to 1 second
        • maxConnectionDuration disabled by default, unlimited (see also Envoy HttpProtocolOptions)
        • maxStreamDuration disabled by default, unlimited (see also Envoy HttpProtocolOptions)
      • dynamicForwardProxy (see also DynamicForwardProxy )
        • dnsCacheConfig
          • dnsRefreshRate defaults to 60 seconds for unresolved DNS hosts, or DNS TTL for resolved hosts
          • hostTtl defaults to 5 minutes
          • dnsFailureRefreshRate
            • baseInterval no default value
            • maxInterval defaults to 10 times the baseInterval
          • dnsQueryTimeout defaults to to the underlying DNS implementation, or 5 seconds max
  • tcpGateway
    • options
      • tcpProxySettings
        • idleTimeout disabled by default, unlimited
  • options
    • socketOptions (see also Socket Options)
      • no downstream keep-alive probes by default. AWS NLB default timeout is 350 seconds.

Settings CRD

• Settings
  • refreshRate defaults to 60 seconds
  • ratelimitServer
    • requestTimeout defaults to 100ms
  • extauth
    • requestTimeout defaults to 200ms
  • gloo (see also GlooOptions )
    • endpointsWarmingTimeout defaults to 5 minutes
    • awsOptions (see also AwsOptions )
      • credentialRefreshDelay defaults to not refreshing on time period. Suggested is 15 minutes.

AuthConfig CRD

• AuthConfig
  • configs
    • oauth2
      • oidcAuthorizationCode (see also OidcAuthorizationCode )
        • discoveryPollInterval defaults to 30 minutes
        • session
          • cookieOptions
            • maxAge defaults to 30 days
          • redis
            • preExpiryBuffer defaults to 2 seconds
      • accessTokenValidation (see also AccessTokenValidation )
        • jwt
          • remoteJwks
            • refreshInterval defaults to 5 minutes
        • cacheTimeout defaults to 10 minutes
    • passThroughAuth (see also PassThroughAuth )
      • grpc
        • connectionTimeout defaults to 5 seconds
      • http
        • connectionTimeout defaults to 5 seconds

VirtualService CRD

• VirtualService
  • sslConfig
    • transportSocketConnectTimeout disabled by default, unlimited (or limited by connection/idle timeout). Suggested is 10 seconds.
  • virtualHost
    • options (see also VirtualHostOptions )
      • retries
        • perTryTimeout defaults to 15 seconds (Route timeout)
      • jwtStaged
        • beforeExtAuth/afterExtAuth
          • providers
            • jwks
              • remote
                • cacheDuration defaults to 5 minutes
    • routes
      • options (see also RouteOptions )
        • timeout defaults to 15 seconds
        • retries
          • perTryTimeout defaults to 15 seconds (Route timeout)

Upstream CRD

• Upstream
  • loadBalancerConfig
    • updateMergeWindow defaults to 1 second
  • outlierDetection
    • interval defaults to 10 seconds
    • baseEjectionTime defaults to 30 seconds
  • connectionConfig
    • connectTimeout defaults to 5 seconds
    • tcpKeepalive (see also Envoy core config)
      • keepaliveTime defaults to OS level configuration. Linux defaults to 2 hours
      • keepaliveInterval defaults to OS level configuration. Linux defaults to 75 seconds
    • commonHttpProtocolOptions
      • idleTimeout defaults to 1 hour
      • maxStreamDuration disabled by default, unlimited
  • healthChecks
    • timeout no default value
    • interval no default value
    • initialJitter no default value
    • intervalJitter no default value
    • noTrafficInterval defaults to 60 seconds
    • unhealthyInterval defaults to interval’s value
    • unhealthyEdgeInterval defaults to unhealthyInterval’s value
    • healthyEdgeInterval defaults to interval’s value