Skip to content

Commit b136653

Browse files
authored
Downgrade non-IO connection closed log from info to debug (#4441)
When unmeshed clients (such as cloud provider health probes) connect to the inbound proxy, the connection is refused because it lacks mTLS. This produces a 'Connection closed' log at INFO level with the error 'direct connections must be mutually authenticated'. In environments like AKS/EKS multicluster gateways, load balancer TCP health probes trigger this message at high frequency, flooding logs and obscuring actionable errors. Downgrade this catch-all error log from info! to debug! so that these expected, non-actionable connection closures no longer spam production logs while remaining available when debug-level logging is enabled. Fixes linkerd/linkerd2#10203 Signed-off-by: rohansood10 <rohansood10@users.noreply.github.com> Co-authored-by: rohansood10 <rohansood10@users.noreply.github.com>
1 parent 798f26f commit b136653

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

linkerd/app/core/src/serve.rs

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ use futures::prelude::*;
77
use linkerd_error::Error;
88
use linkerd_proxy_transport::AddrPair;
99
use tower::util::ServiceExt;
10-
use tracing::{debug, debug_span, info, instrument::Instrument, warn};
10+
use tracing::{debug, debug_span, instrument::Instrument, warn};
1111

1212
/// Spawns a task that binds an `L`-typed listener with an `A`-typed connection-accepting service.
1313
///
@@ -65,8 +65,8 @@ pub async fn serve<M, S, I, A>(
6565
);
6666
}
6767
Err(error) => {
68-
info!(
69-
error,
68+
debug!(
69+
%error,
7070
client.addr = %client_addr,
7171
server.addr = %server_addr,
7272
"Connection closed"

0 commit comments

Comments
 (0)