# OpenClaw Gateway 完整配置示例
# 全局配置
openclaw:
  # Gateway 服務(wù)配置
  gateway:
    port: 18789                    # 服務(wù)監(jiān)聽端口
    host: "0.0.0.0"                # 綁定地址，0.0.0.0 表示所有網(wǎng)卡
    auth_token: "your-secret-token" # 認(rèn)證令牌（必填，建議32位以上）
    max_connections: 1000          # 最大并發(fā)連接數(shù)
    request_timeout: 30000         # 請(qǐng)求超時(shí)時(shí)間（毫秒）
    enable_https: false            # 是否啟用 HTTPS
    ssl_cert: "/path/to/cert.pem"  # SSL 證書路徑
    ssl_key: "/path/to/key.pem"    # SSL 私鑰路徑
  # 會(huì)話管理配置
  session:
    storage: "memory"              # 存儲(chǔ)類型：memory/redis/sqlite
    ttl: 3600                      # 會(huì)話超時(shí)時(shí)間（秒）
    max_sessions: 10000            # 最大會(huì)話數(shù)
    cleanup_interval: 300          # 清理間隔（秒）
  # 日志配置
  logging:
    level: "info"                  # 日志級(jí)別：debug/info/warn/error
    format: "json"                 # 日志格式：json/text
    output: "/var/log/openclaw/gateway.log"  # 日志文件路徑
    max_size: 100                  # 單文件最大大?。∕B）
    max_backups: 10                # 最大備份文件數(shù)
    max_age: 30                    # 最大保留天數(shù)
  # 監(jiān)控配置
  monitoring:
    enabled: true                  # 是否啟用監(jiān)控
    metrics_port: 9090             # 指標(biāo)暴露端口
    health_check_path: "/health"   # 健康檢查路徑
    prometheus: true               # 是否啟用 Prometheus 格式

# 設(shè)置 Gateway 端口
export OPENCLAW_GATEWAY_PORT=8080
# 設(shè)置認(rèn)證令牌
export OPENCLAW_GATEWAY_AUTH_TOKEN="production-token-xxx"
# 設(shè)置日志級(jí)別
export OPENCLAW_LOGGING_LEVEL=debug
# 設(shè)置會(huì)話存儲(chǔ)類型
export OPENCLAW_SESSION_STORAGE=redis

# 查看 Gateway 服務(wù)狀態(tài)
openclaw gateway status
# 前臺(tái)啟動(dòng) Gateway（調(diào)試用）
openclaw gateway start
# 后臺(tái)啟動(dòng) Gateway（生產(chǎn)環(huán)境推薦）
openclaw gateway start --daemon
# 使用指定配置文件啟動(dòng)
openclaw gateway start --config /path/to/config.yaml
# 停止 Gateway 服務(wù)
openclaw gateway stop
# 重啟 Gateway 服務(wù)
openclaw gateway restart
# 查看 Gateway 幫助信息
openclaw gateway --help

# Gateway 優(yōu)雅關(guān)閉核心邏輯（偽代碼示意）
import signal
import asyncio
from typing import Set
class GatewayServer:
    def __init__(self):
        self.active_requests: Set[asyncio.Task] = set()
        self.shutdown_event = asyncio.Event()
        self.graceful_timeout = 30  # 優(yōu)雅關(guān)閉超時(shí)時(shí)間（秒）
    def setup_signal_handlers(self):
        """注冊(cè)信號(hào)處理器"""
        loop = asyncio.get_event_loop()
        for sig in (signal.SIGTERM, signal.SIGINT):
            loop.add_signal_handler(
                sig,
                lambda: asyncio.create_task(self.graceful_shutdown())
            )
    async def graceful_shutdown(self):
        """優(yōu)雅關(guān)閉主流程"""
        self.logger.info("開始優(yōu)雅關(guān)閉...")
        # 1. 停止接收新請(qǐng)求
        self.server.close()
        self.logger.info("已停止接收新請(qǐng)求")
        # 2. 等待現(xiàn)有請(qǐng)求完成
        if self.active_requests:
            self.logger.info(f"等待 {len(self.active_requests)} 個(gè)請(qǐng)求完成...")
            try:
                await asyncio.wait_for(
                    asyncio.gather(*self.active_requests, return_exceptions=True),
                    timeout=self.graceful_timeout
                )
            except asyncio.TimeoutError:
                self.logger.warning("優(yōu)雅關(guān)閉超時(shí)，強(qiáng)制終止剩余請(qǐng)求")
        # 3. 持久化會(huì)話狀態(tài)
        await self.session_manager.persist_sessions()
        self.logger.info("會(huì)話狀態(tài)已持久化")
        # 4. 釋放資源
        await self.resource_pool.close_all()
        self.logger.info("資源已釋放")
        # 5. 設(shè)置關(guān)閉事件
        self.shutdown_event.set()
        self.logger.info("Gateway 已安全關(guān)閉")

# 正常停止（優(yōu)雅關(guān)閉）
openclaw gateway stop
# 強(qiáng)制停止（立即終止）
openclaw gateway stop --force
# 設(shè)置優(yōu)雅關(guān)閉超時(shí)時(shí)間
openclaw gateway stop --timeout 60
# 停止并保存會(huì)話狀態(tài)
openclaw gateway stop --save-session

# 健康檢查端點(diǎn)
GET /health
# 返回示例
{
  "status": "healthy",
  "timestamp": "2024-01-15T10:30:00Z",
  "version": "1.2.0",
  "uptime": 86400,
  "components": {
    "database": "healthy",
    "redis": "healthy",
    "ai_engine": "healthy"
  }
}
# 就緒檢查端點(diǎn)（Kubernetes Readiness Probe）
GET /ready
# 存活檢查端點(diǎn)（Kubernetes Liveness Probe）
GET /live

# Prometheus 抓取配置示例
scrape_configs:
  - job_name: 'openclaw-gateway'
    static_configs:
      - targets: ['localhost:9090']
    metrics_path: '/metrics'
    scrape_interval: 15s

{
  "dashboard": {
    "title": "OpenClaw Gateway 監(jiān)控",
    "panels": [
      {
        "title": "請(qǐng)求 QPS",
        "type": "graph",
        "targets": [
          {
            "expr": "rate(openclaw_requests_total[5m])",
            "legendFormat": "{{method}} - {{channel}}"
          }
        ]
      },
      {
        "title": "請(qǐng)求延遲 P99",
        "type": "stat",
        "targets": [
          {
            "expr": "histogram_quantile(0.99, rate(openclaw_request_duration_seconds_bucket[5m]))"
          }
        ]
      },
      {
        "title": "錯(cuò)誤率",
        "type": "gauge",
        "targets": [
          {
            "expr": "rate(openclaw_errors_total[5m]) / rate(openclaw_requests_total[5m]) * 100"
          }
        ]
      }
    ]
  }
}

# 1. 查看詳細(xì)日志
openclaw gateway start --log-level debug
# 2. 檢查端口占用
lsof -i :18789
# 3. 檢查配置文件語(yǔ)法
openclaw gateway config validate
# 4. 檢查權(quán)限
ls -la ~/.openclaw/

# 1. 檢查 Gateway 日志
tail -f /var/log/openclaw/gateway.log | grep timeout
# 2. 檢查 AI 引擎狀態(tài)
curl http://localhost:18789/health
# 3. 檢查網(wǎng)絡(luò)連通性
ping your-ai-service.com
# 4. 查看當(dāng)前連接數(shù)
netstat -an | grep 18789 | wc -l

# 1. 監(jiān)控內(nèi)存使用
watch -n 1 'ps aux | grep openclaw'
# 2. 分析內(nèi)存分布
curl http://localhost:9090/metrics | grep memory
# 3. 檢查會(huì)話數(shù)量
curl http://localhost:18789/admin/sessions/count
# 4. 開啟 pprof 分析
openclaw gateway start --enable-pprof

# 查看最近錯(cuò)誤日志
cat gateway.log | jq 'select(.level=="error")'
# 統(tǒng)計(jì)各渠道請(qǐng)求量
cat gateway.log | jq -r '.channel' | sort | uniq -c
# 分析慢請(qǐng)求（超過(guò) 5 秒）
cat gateway.log | jq 'select(.duration > 5000)'
# 按時(shí)間范圍過(guò)濾
cat gateway.log | jq 'select(.timestamp >= "2024-01-15T10:00:00" and .timestamp < "2024-01-15T11:00:00")'

# Nginx 負(fù)載均衡配置
upstream openclaw_gateway {
    # 使用最少連接算法
    least_conn;
    # Gateway 實(shí)例列表
    server 192.168.1.101:18789 weight=1 max_fails=3 fail_timeout=30s;
    server 192.168.1.102:18789 weight=1 max_fails=3 fail_timeout=30s;
    server 192.168.1.103:18789 weight=1 max_fails=3 fail_timeout=30s;
    # 健康檢查（需要 nginx-plus 或 tengine）
    check interval=3000 rise=2 fall=3 timeout=1000 type=http;
    check_http_send "GET /health HTTP/1.0\r\n\r\n";
    check_http_expect_alive http_2xx http_3xx;
}
server {
    listen 80;
    server_name gateway.openclaw.ai;
    # 請(qǐng)求體大小限制
    client_max_body_size 10m;
    # 超時(shí)配置
    proxy_connect_timeout 60s;
    proxy_send_timeout 60s;
    proxy_read_timeout 60s;
    location / {
        proxy_pass http://openclaw_gateway;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

# 會(huì)話 Redis 存儲(chǔ)配置
session:
  storage: "redis"
  redis:
    host: "redis-cluster.openclaw.internal"
    port: 6379
    password: "${REDIS_PASSWORD}"
    db: 0
    pool_size: 50
    key_prefix: "openclaw:session:"
    ttl: 3600

# 安全配置示例
security:
  # 認(rèn)證配置
  auth:
    enabled: true
    token_rotation_days: 30  # 令牌輪換周期
  # 限流配置
  rate_limit:
    enabled: true
    requests_per_minute: 100
    burst: 20
  # IP 白名單
  ip_whitelist:
    enabled: true
    allowed:
      - "10.0.0.0/8"
      - "172.16.0.0/12"
  # HTTPS 配置
  tls:
    enabled: true
    cert_path: "/etc/ssl/certs/gateway.pem"
    key_path: "/etc/ssl/private/gateway.key"
    min_version: "TLS1.2"

# 性能優(yōu)化配置
performance:
  # 連接池配置
  connection_pool:
    max_idle: 100
    max_open: 200
    idle_timeout: 300
  # 緩存配置
  cache:
    enabled: true
    type: "redis"
    ttl: 300
  # 并發(fā)配置
  concurrency:
    max_workers: 100
    queue_size: 1000