Timeout defaults
Review this page for a list of commonly used timeout settings in Gloo Edge, organized by custom resource. For more information, see the API reference for each resource.
Gateway CRD
- Gateway
httpGateway
options
httpConnectionManagerSettings
(see also Envoy HCM and the Gloo HCM )idleTimeout
defaults to 1 hour (see also Envoy HttpProtocolOptions)streamIdleTimeout
defaults to 5 minutesrequestTimeout
(downstream) disabled by default, unlimiteddrainTimeout
defaults to 5 secondsdelayedCloseTimeout
defaults to 1 secondmaxConnectionDuration
disabled by default, unlimited (see also Envoy HttpProtocolOptions)maxStreamDuration
disabled by default, unlimited (see also Envoy HttpProtocolOptions)
dynamicForwardProxy
(see also DynamicForwardProxy )dnsCacheConfig
dnsRefreshRate
defaults to 60 seconds for unresolved DNS hosts, or DNS TTL for resolved hostshostTtl
defaults to 5 minutesdnsFailureRefreshRate
baseInterval
no default valuemaxInterval
defaults to 10 times thebaseInterval
dnsQueryTimeout
defaults to to the underlying DNS implementation, or 5 seconds max
tcpGateway
options
tcpProxySettings
idleTimeout
disabled by default, unlimited
options
socketOptions
(see also Socket Options)- no downstream keep-alive probes by default. AWS NLB default timeout is 350 seconds.
Settings CRD
- Settings
refreshRate
defaults to 60 secondsratelimitServer
requestTimeout
defaults to 100ms
extauth
requestTimeout
defaults to 200ms
gloo
(see also GlooOptions )endpointsWarmingTimeout
defaults to 5 minutesawsOptions
(see also AwsOptions )credentialRefreshDelay
defaults to not refreshing on time period. Suggested is 15 minutes.
AuthConfig CRD
- AuthConfig
configs
oauth2
oidcAuthorizationCode
(see also OidcAuthorizationCode )discoveryPollInterval
defaults to 30 minutessession
cookieOptions
maxAge
defaults to 30 days
redis
preExpiryBuffer
defaults to 2 seconds
accessTokenValidation
(see also AccessTokenValidation )jwt
remoteJwks
refreshInterval
defaults to 5 minutes
cacheTimeout
defaults to 10 minutes
passThroughAuth
(see also PassThroughAuth )grpc
connectionTimeout
defaults to 5 seconds
http
connectionTimeout
defaults to 5 seconds
VirtualService CRD
- VirtualService
sslConfig
transportSocketConnectTimeout
disabled by default, unlimited (or limited by connection/idle timeout). Suggested is 10 seconds.
virtualHost
options
(see also VirtualHostOptions )retries
perTryTimeout
defaults to 15 seconds (Route timeout)
jwtStaged
beforeExtAuth
/afterExtAuth
providers
jwks
remote
cacheDuration
defaults to 5 minutes
routes
options
(see also RouteOptions )timeout
defaults to 15 secondsretries
perTryTimeout
defaults to 15 seconds (Route timeout)
Upstream CRD
- Upstream
loadBalancerConfig
updateMergeWindow
defaults to 1 second
outlierDetection
interval
defaults to 10 secondsbaseEjectionTime
defaults to 30 seconds
connectionConfig
connectTimeout
defaults to 5 secondstcpKeepalive
(see also Envoy core config)keepaliveTime
defaults to OS level configuration. Linux defaults to 2 hourskeepaliveInterval
defaults to OS level configuration. Linux defaults to 75 seconds
commonHttpProtocolOptions
idleTimeout
defaults to 1 hourmaxStreamDuration
disabled by default, unlimited
healthChecks
timeout
no default valueinterval
no default valueinitialJitter
no default valueintervalJitter
no default valuenoTrafficInterval
defaults to 60 secondsunhealthyInterval
defaults tointerval
’s valueunhealthyEdgeInterval
defaults tounhealthyInterval
’s valuehealthyEdgeInterval
defaults tointerval
’s value