Skip to content

Conversation

@jinyongchoi
Copy link
Contributor

@jinyongchoi jinyongchoi commented Jan 5, 2026

Problem
When Fluent Bit shuts down with grace period, threaded input plugins may still have data pending in their ring buffers. The engine could exit before this data was flushed to chunks, causing data loss.

Solution
ring_buffer: Add flb_ring_buffer_get_used() to check pending data size
input_thread: Add is_paused flag to track pause acknowledgement from threaded inputs
input_chunk: Bypass pause check during shutdown to allow ring buffer flush, add flb_input_chunk_total_ring_buffers_size() helper
engine: During grace period, wait for all threaded inputs to acknowledge pause and drain ring buffers before final shutdown
Fixes #11338


Enter [N/A] in the box, if an item is not applicable to your change.

Testing
Before we can approve your change; please submit the following in a comment:

  • Example configuration file for the change
[SERVICE]
    flush 1
    grace 60
    log_level info
    log_file /tmp/testing/logs/testing.log
    parsers_file /tmp/testing/parsers.conf
    plugins_file /tmp/testing/plugins.conf
    http_server on
    http_listen 0.0.0.0
    http_port 22002

    storage.path /tmp/testing/storage
    storage.metrics on
    storage.max_chunks_up 512
    storage.sync full
    storage.checksum off
    storage.backlog.mem_limit 100M

[INPUT]
    Name tail
    Path /tmp/testing.input
    Tag testing
    Key message
    Offset_Key   log_offset

    Read_from_Head true
    Refresh_Interval 3
    Rotate_Wait 31557600

    Buffer_Chunk_Size 1MB
    Buffer_Max_Size 16MB
    Inotify_Watcher false

    storage.type filesystem
    storage.pause_on_chunks_overlimit true

    DB /tmp/testing/storage/testing.db
    DB.sync normal
    DB.locking false

    Alias input_log

    thread.ring_buffer.capacity  128
    Threaded true

[OUTPUT]
    Name file
    Match *
    File /tmp/testing.out
    workers 1
  • Debug log output from testing the change
    The "ring buffer pending" log is rarely seen because:
  • Default 250ms collector interval keeps the buffer empty
  • Shutdown bypass allows immediate data processing
FLB_DEV_RB_MS=10000 /opt/fluent-bit/bin/fluent-bit -v -c /etc/fluent-bit/fluent-bit.conf

[2026/01/05 17:15:14.231117707] [ info] [engine] ring buffer pending: 32 bytes
  • Attached Valgrind output that shows no leaks or memory corruption was found
==597334== 
==597334== HEAP SUMMARY:
==597334==     in use at exit: 0 bytes in 0 blocks
==597334==   total heap usage: 10,991,093 allocs, 10,991,093 frees, 12,233,758,702 bytes allocated
==597334== 
==597334== All heap blocks were freed -- no leaks are possible
==597334== 
==597334== For lists of detected and suppressed errors, rerun with: -s
==597334== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 0 from 0)

If this is a change to packaging of containers or native binaries then please confirm it works for all targets.

  • [ N/A ] Run local packaging test showing all targets (including any new ones) build.
  • [ N/A ] Set ok-package-test label to test for all targets (requires maintainer to do).

Documentation

  • [ N/A ] Documentation required for this feature

Backporting

  • [ N/A ] Backport to latest stable release.

Fluent Bit is licensed under Apache 2.0, by submitting this pull request I understand that this code will be released under the terms of that license.

Summary by CodeRabbit

  • New Features

    • Reports total pending ring-buffer size during engine startup/shutdown
    • Tracks per-thread pause state to coordinate threaded input pause/resume
  • Bug Fixes

    • Ensures pending ring-buffer data is collected and flushed during shutdown
    • Prevents resume/flush races during shutdown for more reliable termination

✏️ Tip: You can customize this high-level summary in your review settings.

Add flb_ring_buffer_get_used() to retrieve the current used size
of a ring buffer. This is needed to check pending data during
shutdown sequence.

Signed-off-by: jinyong.choi <[email protected]>
@coderabbitai
Copy link

coderabbitai bot commented Jan 5, 2026

📝 Walkthrough

Walkthrough

Adds APIs and runtime checks to expose ring-buffer usage and input-thread pause state, integrates ring-buffer collection into engine startup/shutdown, and prevents resume while shutting down so pending ring-buffer data is flushed before exit.

Changes

Cohort / File(s) Summary
Public headers
include/fluent-bit/flb_ring_buffer.h, include/fluent-bit/flb_input_chunk.h, include/fluent-bit/flb_input_thread.h
Added flb_ring_buffer_get_used(struct flb_ring_buffer *rb), flb_input_chunk_get_total_ring_buffer_size(struct flb_config *config), and volatile int is_paused; in struct flb_input_thread_instance.
Ring buffer implementation
src/flb_ring_buffer.c
Implemented flb_ring_buffer_get_used() returning current used bytes via lwrb_get_full().
Input chunk management
src/flb_input_chunk.c
Added flb_input_chunk_get_total_ring_buffer_size(config); skip pause checks during shutdown in append/collector; added shutdown guards to resume logic.
Input thread handling
src/flb_input_thread.c
Set/clear is_paused on FLB_INPUT_THREAD_PAUSE/RESUME after plugin callbacks; resume only called when context present.
Engine shutdown/startup
src/flb_engine.c
Added all_threaded_inputs_paused() helper; query total ring-buffer size; trigger ring-buffer collection during startup/shutdown; include ring-buffer and pause checks in pending-work/shutdown logic.

Sequence Diagram(s)

sequenceDiagram
    autonumber
    participant Engine
    participant ThreadMgr as "Input Threads"
    participant RBCollector as "RB Collector"
    participant RingBuf as "Ring Buffers"

    Engine->>Engine: rb_size = flb_input_chunk_get_total_ring_buffer_size(config)
    alt rb_size > 0
        Engine->>RBCollector: flb_input_chunk_ring_buffer_collector(config, NULL)
        RBCollector->>RingBuf: drain ring buffers -> flush to chunks
        RBCollector-->>Engine: collection triggered
    end
    Engine->>ThreadMgr: all_threaded_inputs_paused()? (check is_paused)
    alt not all paused
        ThreadMgr-->>Engine: some inputs not paused
        Engine->>Engine: increment pending work / wait
    else all paused
        ThreadMgr-->>Engine: all paused
    end
    Engine->>Engine: proceed to finalize when pending==0
Loading

Estimated code review effort

🎯 4 (Complex) | ⏱️ ~50 minutes

Possibly related PRs

Suggested labels

backport to v4.0.x

Suggested reviewers

  • edsiper

Poem

🐰 I count the bytes while moonlight gleams,
Threads hush softly, pausing their dreams.
Collectors sweep the buffer's store,
No record lost when shutdown's door.
Hooray — the logs hop home once more! 🥕

Pre-merge checks and finishing touches

❌ Failed checks (1 warning)
Check name Status Explanation Resolution
Docstring Coverage ⚠️ Warning Docstring coverage is 45.45% which is insufficient. The required threshold is 80.00%. You can run @coderabbitai generate docstrings to improve docstring coverage.
✅ Passed checks (4 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title 'engine: fix threaded input data loss during shutdown' is concise, specific, and directly describes the primary issue being fixed. It aligns with the main objective of preventing data loss in threaded inputs during graceful shutdown.
Linked Issues check ✅ Passed The PR successfully implements all coding requirements from issue #11338: adds flb_ring_buffer_get_used() for monitoring pending data, introduces is_paused flag for tracking pause acknowledgement, adds flb_input_chunk_get_total_ring_buffer_size() helper, modifies engine shutdown logic to wait for threaded input draining, and improves collector logging during shutdown.
Out of Scope Changes check ✅ Passed All changes are directly related to the stated objective of preventing ring buffer data loss during shutdown: new ring buffer query functions, pause synchronization tracking, shutdown-aware resume/collector logic, and engine shutdown sequence improvements. No unrelated modifications detected.
✨ Finishing touches
  • 📝 Generate docstrings

📜 Recent review details

Configuration used: defaults

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 9fbf309 and 3482153.

📒 Files selected for processing (5)
  • include/fluent-bit/flb_input_chunk.h
  • include/fluent-bit/flb_input_thread.h
  • src/flb_engine.c
  • src/flb_input_chunk.c
  • src/flb_input_thread.c
🚧 Files skipped from review as they are similar to previous changes (2)
  • include/fluent-bit/flb_input_chunk.h
  • src/flb_input_thread.c
🧰 Additional context used
🧠 Learnings (4)
📚 Learning: 2025-08-29T06:25:02.561Z
Learnt from: shadowshot-x
Repo: fluent/fluent-bit PR: 10794
File: tests/internal/aws_compress.c:7-7
Timestamp: 2025-08-29T06:25:02.561Z
Learning: In Fluent Bit, ZSTD (zstandard) compression library is bundled directly in the source tree at `lib/zstd-1.5.7` and is built unconditionally as a static library. Unlike optional external dependencies, ZSTD does not use conditional compilation guards like `FLB_HAVE_ZSTD` and is always available. Headers like `<fluent-bit/flb_zstd.h>` can be included directly without guards.

Applied to files:

  • src/flb_engine.c
📚 Learning: 2025-08-31T12:46:11.940Z
Learnt from: ThomasDevoogdt
Repo: fluent/fluent-bit PR: 9277
File: .github/workflows/pr-compile-check.yaml:147-151
Timestamp: 2025-08-31T12:46:11.940Z
Learning: In fluent-bit CMakeLists.txt, the system library preference flags are defined as FLB_PREFER_SYSTEM_LIB_ZSTD and FLB_PREFER_SYSTEM_LIB_KAFKA with the FLB_ prefix.

Applied to files:

  • src/flb_engine.c
📚 Learning: 2025-08-29T06:25:27.250Z
Learnt from: shadowshot-x
Repo: fluent/fluent-bit PR: 10794
File: tests/internal/aws_compress.c:93-107
Timestamp: 2025-08-29T06:25:27.250Z
Learning: In Fluent Bit, ZSTD compression is enabled by default and is treated as a core dependency, not requiring conditional compilation guards like `#ifdef FLB_HAVE_ZSTD`. Unlike some other optional components such as ARROW/PARQUET (which use `#ifdef FLB_HAVE_ARROW` guards), ZSTD support is always available and doesn't need build-time conditionals. ZSTD headers are included directly without guards across multiple plugins and core components.

Applied to files:

  • src/flb_engine.c
📚 Learning: 2025-11-21T06:23:29.770Z
Learnt from: cosmo0920
Repo: fluent/fluent-bit PR: 11171
File: include/fluent-bit/flb_lib.h:52-53
Timestamp: 2025-11-21T06:23:29.770Z
Learning: In Fluent Bit core (fluent/fluent-bit repository), function descriptions/documentation are not required for newly added functions in header files.

Applied to files:

  • src/flb_engine.c
🧬 Code graph analysis (2)
src/flb_input_chunk.c (3)
include/fluent-bit/flb_input.h (1)
  • flb_input_buf_paused (705-715)
src/flb_input.c (1)
  • flb_input_name (790-797)
src/flb_ring_buffer.c (1)
  • flb_ring_buffer_get_used (205-208)
src/flb_engine.c (1)
src/flb_input_chunk.c (2)
  • flb_input_chunk_get_total_ring_buffer_size (3315-3329)
  • flb_input_chunk_ring_buffer_collector (3061-3116)
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (31)
  • GitHub Check: pr-windows-build / call-build-windows-package (Windows 64bit (Arm64), amd64_arm64, -DCMAKE_SYSTEM_NAME=Windows -DCMA...
  • GitHub Check: pr-windows-build / call-build-windows-package (Windows 64bit, x64, x64-windows-static, 3.31.6)
  • GitHub Check: pr-windows-build / call-build-windows-package (Windows 32bit, x86, x86-windows-static, 3.31.6)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SIMD=On, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SIMD=Off, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_COMPILER_STRICT_POINTER_TYPES=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_ARROW=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SANITIZE_THREAD=On, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SIMD=Off, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SIMD=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DSANITIZE_ADDRESS=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DSANITIZE_ADDRESS=On, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_JEMALLOC=On, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SANITIZE_MEMORY=On, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_COVERAGE=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DSANITIZE_UNDEFINED=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_JEMALLOC=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SANITIZE_MEMORY=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SANITIZE_THREAD=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DSANITIZE_UNDEFINED=On, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SMALL=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_JEMALLOC=Off, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_JEMALLOC=Off, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SMALL=On, 3.31.6, clang, clang++)
  • GitHub Check: PR - fuzzing test
  • GitHub Check: pr-compile-system-libs (-DFLB_PREFER_SYSTEM_LIBS=On, 3.31.6, clang, clang++, ubuntu-24.04, clang-14)
  • GitHub Check: pr-compile-system-libs (-DFLB_PREFER_SYSTEM_LIBS=On, 3.31.6, clang, clang++, ubuntu-22.04, clang-12)
  • GitHub Check: pr-compile-system-libs (-DFLB_PREFER_SYSTEM_LIBS=On, 3.31.6, gcc, g++, ubuntu-24.04, clang-14)
  • GitHub Check: pr-compile-system-libs (-DFLB_PREFER_SYSTEM_LIBS=On, 3.31.6, gcc, g++, ubuntu-22.04, clang-12)
  • GitHub Check: pr-compile-centos-7
  • GitHub Check: pr-compile-without-cxx (3.31.6)
🔇 Additional comments (7)
src/flb_input_chunk.c (4)

2416-2416: LGTM: Resume guards during shutdown.

The is_shutting_down guards correctly prevent inputs from resuming during the grace period, allowing ring buffers and existing chunks to drain without new ingestion. This is consistent with the shutdown flow described in the PR objectives.

Also applies to: 2430-2430


2672-2683: Critical fix: Allows ring buffer flush during shutdown.

This bypass of the pause check during shutdown is essential for preventing data loss. By checking is_shutting_down, the code ensures that ring buffer contents can be drained to chunks even when backpressure has paused the input. The comment clearly explains the rationale.


3074-3089: LGTM: Consistent ring buffer drain during shutdown.

This change mirrors the logic at lines 2672-2683, ensuring the ring buffer collector can fully drain pending data during shutdown regardless of pause state. The per-iteration check inside the while(1) loop is appropriate for this use case.


3310-3329: LGTM: Total ring buffer size calculation.

The implementation correctly iterates all threaded inputs, safely checks for the presence of ring buffers, and sums their used space. This provides the visibility needed for the engine to make informed shutdown decisions.

src/flb_engine.c (3)

36-36: LGTM: Necessary includes for shutdown coordination.

These headers provide access to the threaded input state (flb_input_thread_instance) and ring buffer sizing APIs needed for the enhanced shutdown logic.

Also applies to: 40-40


805-832: Well-designed pause acknowledgement check.

The logic at lines 820-823 correctly addresses concerns from past reviews by skipping threaded inputs that cannot acknowledge pause (no callbacks or no context). This prevents shutdown from hanging on inputs that are incapable of reporting pause status. The function only waits for inputs that should be able to respond, which is the correct behavior.


840-840: Robust shutdown sequence integrating ring buffer awareness.

The logic correctly:

  1. Queries total ring buffer size (line 1199)
  2. Includes ring buffer activity in pending work calculation (line 1210): (rb_size > 0) adds 1 if data is pending, 0 otherwise
  3. Triggers ring buffer collection when data exists (lines 1212-1215)
  4. Only checks thread pause status when all other work is complete (lines 1217-1223)

This addresses the past review concern about the condition logic—the current implementation at line 1218 correctly checks if (ret == 0) after all pending work has been factored in at line 1210. The sequencing ensures ring buffers are drained before verifying that threaded inputs have acknowledged pause.

Also applies to: 1199-1223


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c6f4b64b0e

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

Fix all issues with AI Agents 🤖
In @include/fluent-bit/flb_input_thread.h:
- Around line 92-98: Replace the volatile flag with a C11 atomic type so thread
reads/writes have proper synchronization: change the declaration of is_paused
from "volatile int is_paused;" to an atomic integer (e.g., "_Atomic int
is_paused;" or "atomic_int is_paused;") and add the required include
(<stdatomic.h>) where this header or its implementation uses the flag; update
any direct assignments/reads in the input thread and main thread to use plain
loads/stores (or atomic_store/atomic_load) as appropriate to preserve the same
semantics.
📜 Review details

Configuration used: defaults

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between a981f66 and c6f4b64.

📒 Files selected for processing (7)
  • include/fluent-bit/flb_input_chunk.h
  • include/fluent-bit/flb_input_thread.h
  • include/fluent-bit/flb_ring_buffer.h
  • src/flb_engine.c
  • src/flb_input_chunk.c
  • src/flb_input_thread.c
  • src/flb_ring_buffer.c
🧰 Additional context used
🧠 Learnings (4)
📚 Learning: 2025-11-21T06:23:29.770Z
Learnt from: cosmo0920
Repo: fluent/fluent-bit PR: 11171
File: include/fluent-bit/flb_lib.h:52-53
Timestamp: 2025-11-21T06:23:29.770Z
Learning: In Fluent Bit core (fluent/fluent-bit repository), function descriptions/documentation are not required for newly added functions in header files.

Applied to files:

  • include/fluent-bit/flb_input_chunk.h
  • src/flb_engine.c
  • include/fluent-bit/flb_ring_buffer.h
📚 Learning: 2025-08-29T06:25:02.561Z
Learnt from: shadowshot-x
Repo: fluent/fluent-bit PR: 10794
File: tests/internal/aws_compress.c:7-7
Timestamp: 2025-08-29T06:25:02.561Z
Learning: In Fluent Bit, ZSTD (zstandard) compression library is bundled directly in the source tree at `lib/zstd-1.5.7` and is built unconditionally as a static library. Unlike optional external dependencies, ZSTD does not use conditional compilation guards like `FLB_HAVE_ZSTD` and is always available. Headers like `<fluent-bit/flb_zstd.h>` can be included directly without guards.

Applied to files:

  • src/flb_engine.c
📚 Learning: 2025-08-31T12:46:11.940Z
Learnt from: ThomasDevoogdt
Repo: fluent/fluent-bit PR: 9277
File: .github/workflows/pr-compile-check.yaml:147-151
Timestamp: 2025-08-31T12:46:11.940Z
Learning: In fluent-bit CMakeLists.txt, the system library preference flags are defined as FLB_PREFER_SYSTEM_LIB_ZSTD and FLB_PREFER_SYSTEM_LIB_KAFKA with the FLB_ prefix.

Applied to files:

  • src/flb_engine.c
📚 Learning: 2025-08-29T06:25:27.250Z
Learnt from: shadowshot-x
Repo: fluent/fluent-bit PR: 10794
File: tests/internal/aws_compress.c:93-107
Timestamp: 2025-08-29T06:25:27.250Z
Learning: In Fluent Bit, ZSTD compression is enabled by default and is treated as a core dependency, not requiring conditional compilation guards like `#ifdef FLB_HAVE_ZSTD`. Unlike some other optional components such as ARROW/PARQUET (which use `#ifdef FLB_HAVE_ARROW` guards), ZSTD support is always available and doesn't need build-time conditionals. ZSTD headers are included directly without guards across multiple plugins and core components.

Applied to files:

  • src/flb_engine.c
🧬 Code graph analysis (4)
include/fluent-bit/flb_input_chunk.h (1)
src/flb_input_chunk.c (1)
  • flb_input_chunk_total_ring_buffers_size (3310-3324)
src/flb_engine.c (1)
src/flb_input_chunk.c (2)
  • flb_input_chunk_total_ring_buffers_size (3310-3324)
  • flb_input_chunk_ring_buffer_collector (3061-3111)
include/fluent-bit/flb_ring_buffer.h (1)
src/flb_ring_buffer.c (1)
  • flb_ring_buffer_get_used (205-208)
src/flb_input_chunk.c (3)
include/fluent-bit/flb_input.h (1)
  • flb_input_buf_paused (705-715)
src/flb_input.c (1)
  • flb_input_name (790-797)
src/flb_ring_buffer.c (1)
  • flb_ring_buffer_get_used (205-208)
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (32)
  • GitHub Check: pr-windows-build / call-build-windows-package (Windows 64bit (Arm64), amd64_arm64, -DCMAKE_SYSTEM_NAME=Windows -DCMA...
  • GitHub Check: pr-windows-build / call-build-windows-package (Windows 64bit, x64, x64-windows-static, 3.31.6)
  • GitHub Check: pr-windows-build / call-build-windows-package (Windows 32bit, x86, x86-windows-static, 3.31.6)
  • GitHub Check: Agent
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SIMD=On, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SIMD=Off, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_COMPILER_STRICT_POINTER_TYPES=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SIMD=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SANITIZE_MEMORY=On, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SIMD=Off, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DSANITIZE_UNDEFINED=On, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SANITIZE_THREAD=On, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DSANITIZE_UNDEFINED=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_COVERAGE=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SANITIZE_THREAD=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SANITIZE_MEMORY=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DSANITIZE_ADDRESS=On, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_ARROW=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SMALL=On, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_JEMALLOC=Off, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_SMALL=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_JEMALLOC=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DSANITIZE_ADDRESS=On, 3.31.6, gcc, g++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_JEMALLOC=Off, 3.31.6, clang, clang++)
  • GitHub Check: run-ubuntu-unit-tests (-DFLB_JEMALLOC=On, 3.31.6, clang, clang++)
  • GitHub Check: pr-compile-system-libs (-DFLB_PREFER_SYSTEM_LIBS=On, 3.31.6, clang, clang++, ubuntu-24.04, clang-14)
  • GitHub Check: pr-compile-system-libs (-DFLB_PREFER_SYSTEM_LIBS=On, 3.31.6, clang, clang++, ubuntu-22.04, clang-12)
  • GitHub Check: pr-compile-system-libs (-DFLB_PREFER_SYSTEM_LIBS=On, 3.31.6, gcc, g++, ubuntu-22.04, clang-12)
  • GitHub Check: pr-compile-system-libs (-DFLB_PREFER_SYSTEM_LIBS=On, 3.31.6, gcc, g++, ubuntu-24.04, clang-14)
  • GitHub Check: pr-compile-without-cxx (3.31.6)
  • GitHub Check: pr-compile-centos-7
  • GitHub Check: PR - fuzzing test
🔇 Additional comments (12)
src/flb_ring_buffer.c (1)

205-208: LGTM - Consistent with existing API style.

The function is a straightforward wrapper around lwrb_get_full(). The lack of NULL checks is consistent with other functions in this file (flb_ring_buffer_write, flb_ring_buffer_read), indicating that callers are expected to pass valid pointers.

src/flb_input_thread.c (2)

81-84: LGTM - Proper pause state tracking.

The is_paused flag is set after the pause callback completes, correctly signaling to the main thread that pause processing is finished. The conditional check protects against accessing thi when it's not available.


90-93: LGTM - Proper resume state tracking.

The is_paused flag is cleared after the resume callback completes, maintaining symmetry with the pause handler. The defensive checks are appropriate.

include/fluent-bit/flb_input_chunk.h (1)

165-165: LGTM - New API for total ring buffer size tracking.

The function signature is clear and the implementation (seen in src/flb_input_chunk.c:3309-3323) correctly sums the used space across all threaded inputs' ring buffers.

include/fluent-bit/flb_ring_buffer.h (1)

43-43: LGTM - New API exposes ring buffer usage.

The function provides a clean interface to query the amount of used space in the ring buffer, essential for the shutdown coordination logic. The implementation delegates to the underlying lwrb library.

src/flb_input_chunk.c (4)

2416-2426: LGTM! Correct guard to prevent input resume during shutdown.

The is_shutting_down check correctly prevents inputs from being resumed during the graceful shutdown phase, ensuring the engine can properly drain ring buffers without new data being ingested.


2672-2683: LGTM! Critical fix for data loss prevention during shutdown.

The conditional bypass of the pause check when is_shutting_down == FLB_TRUE correctly allows pending ring buffer data to be flushed to chunks during graceful shutdown. The logic is sound: normal operation respects backpressure, while shutdown prioritizes data preservation.


3074-3084: LGTM! Consistent shutdown bypass logic.

This mirrors the pause-bypass logic in input_chunk_append_raw, ensuring the ring buffer collector can fully drain all pending data during shutdown regardless of pause state. The symmetry between producer and collector is correct.


3305-3324: LGTM! Clean implementation of ring buffer size aggregation.

The function correctly:

  • Guards against non-threaded inputs and null ring buffers
  • Aggregates used space across all threaded input instances
  • Returns appropriate size_t type

The underlying lwrb_get_full should be safe for single-reader scenarios (main engine thread), which matches the usage pattern here.

src/flb_engine.c (3)

36-40: LGTM! Required includes for new functionality.

Both headers are necessary:

  • flb_input_thread.h for accessing the is_paused flag in threaded input instances
  • flb_input_chunk.h for flb_input_chunk_total_ring_buffers_size and flb_input_chunk_ring_buffer_collector

805-822: LGTM! Proper helper for threaded input pause verification.

The function correctly checks all threaded input instances to verify they have acknowledged the pause signal. The defensive check for both is_threaded and thi before accessing is_paused is appropriate.


1200-1213: Well-structured shutdown sequence for ring buffer draining.

The logic correctly:

  1. Includes ring buffer presence in pending work calculation (rb_size > 0 adds 1)
  2. Actively drains ring buffers each shutdown tick when data is pending
  3. Only checks thread pause completion after all other work is done (tasks=0, chunks=0, ring buffer empty)
  4. Continues waiting if threaded inputs haven't fully acknowledged pause

This ensures data isn't lost during shutdown by waiting for both ring buffer drainage and thread coordination.

Comment on lines +92 to +98

/*
* Pause state flag for shutdown synchronization.
* Set to 1 when thread completes pause processing.
* Checked by main thread to ensure safe shutdown.
*/
volatile int is_paused;
Copy link

@coderabbitai coderabbitai bot Jan 5, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check if the codebase uses atomic operations elsewhere for similar coordination patterns
rg -n -C3 --type=c '\b_Atomic\b|atomic_|__atomic_' --glob '!**/tests/**' --glob '!**/examples/**'

Repository: fluent/fluent-bit

Length of output: 50374


🏁 Script executed:

#!/bin/bash
# Find usage of is_paused variable
rg -n 'is_paused' --type=c -B2 -A2

Repository: fluent/fluent-bit

Length of output: 3871


🏁 Script executed:

#!/bin/bash
# Check context of is_paused usage in flb_input_thread.c
sed -n '75,100p' src/flb_input_thread.c

# Check context in flb_engine.c
sed -n '810,825p' src/flb_engine.c

Repository: fluent/fluent-bit

Length of output: 1382


🏁 Script executed:

#!/bin/bash
# Check the entire flb_engine_shutdown_timeout function
sed -n '800,830p' src/flb_engine.c

# Check what calls the function where is_paused is written
sed -n '50,120p' src/flb_input_thread.c

Repository: fluent/fluent-bit

Length of output: 2712


🏁 Script executed:

#!/bin/bash
# Check if is_paused is accessed in any signal handlers
rg -n 'signal|SIGTERM|SIGINT' src/flb_input_thread.c src/flb_engine.c -B2 -A2 | head -50

# Check the structure definition to understand the context better
sed -n '50,100p' include/fluent-bit/flb_input_thread.h

Repository: fluent/fluent-bit

Length of output: 4721


🏁 Script executed:

#!/bin/bash
# Check how the pause operation is triggered (from which thread context)
rg -n 'FLB_INPUT_THREAD_PAUSE' --type=c -B5 -A5

# Check if there's any locking around the is_paused read
sed -n '805,825p' src/flb_engine.c

Repository: fluent/fluent-bit

Length of output: 2956


Consider using C11 _Atomic for thread-safe flag access.

The volatile qualifier ensures visibility but lacks atomicity guarantees per the C standard. In this thread-to-thread coordination pattern, is_paused is written by the input thread and read by the main thread during shutdown without explicit locking. While volatile prevents compiler optimizations from caching the value, atomic operations (e.g., _Atomic int or platform-specific atomics) would provide explicit synchronization semantics and better portability guarantees. This aligns with the codebase's use of sig_atomic_t for similar shutdown coordination patterns elsewhere.

🤖 Prompt for AI Agents
In @include/fluent-bit/flb_input_thread.h around lines 92-98, Replace the
volatile flag with a C11 atomic type so thread reads/writes have proper
synchronization: change the declaration of is_paused from "volatile int
is_paused;" to an atomic integer (e.g., "_Atomic int is_paused;" or "atomic_int
is_paused;") and add the required include (<stdatomic.h>) where this header or
its implementation uses the flag; update any direct assignments/reads in the
input thread and main thread to use plain loads/stores (or
atomic_store/atomic_load) as appropriate to preserve the same semantics.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've kept volatile int to maintain consistency with existing thread coordination flags in this codebase (e.g., is_shutting_down in flb_config.h). The single-direction write pattern with periodic polling makes this sufficient for the current use case. If there's a preference for stronger atomics with platform abstraction, I'm happy to update it.

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check the declaration of is_shutting_down in flb_config.h to verify the user's claim
rg -n 'is_shutting_down' --type=c include/fluent-bit/flb_config.h -B2 -A2

Length of output: 349


🏁 Script executed:

#!/bin/bash
# Check for other volatile flags used for thread coordination in the codebase
rg -n 'volatile.*int' include/fluent-bit/*.h --type=c | head -20

Length of output: 200


@jinyongchoi, thank you for the clarification! You're absolutely right—is_shutting_down in flb_config.h is indeed a plain int (line 64), and your use of volatile int for consistency with the existing thread coordination patterns in this codebase makes perfect sense. The single-direction write with periodic polling is a reasonable pattern for this use case, and maintaining consistency is important. Your implementation is fine as-is. 👍


🧬 Code Graph Analysis Results

include/fluent-bit/flb_input_thread.h

[Snippet 1 - Summary]

  • File: include/fluent-bit/flb_input_thread.h
  • Topic: Pause/shutdown synchronization flag
  • Summary: The struct flb_input_thread_instance includes a volatile int named is_paused, described as a pause state flag used during shutdown synchronization. It is set to 1 when the thread completes pause processing and is checked by the main thread to ensure safe shutdown. This aligns with the user’s note about using volatile integers for coordination flags (e.g., is_shutting_down). No code snippet is provided here to avoid duplicating the exact implementation, but the field’s existence and intended concurrency behavior are documented for reviewer context.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@cosmo0920 Hello,
Could you please share your preference on this? I'm not certain about C11 _Atomic support across all platforms we target (particularly Windows/MSVC).
If there's platform-abstracted atomic support or a preference for _Atomic with fallbacks, I'm happy to update it accordingly.

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems like the humans are having a chat. I'll hop back into my burrow for now. If you need me again, just tag @coderabbitai in a new comment, and I'll come hopping out!

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request addresses a critical data loss issue during Fluent Bit shutdown where threaded input plugins with data pending in ring buffers could exit before flushing that data to chunks.

Key Changes:

  • Added ring buffer monitoring during shutdown to track pending data
  • Implemented pause acknowledgement tracking for threaded inputs
  • Modified pause checks to allow data flushing during shutdown

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 6 comments.

Show a summary per file
File Description
src/flb_ring_buffer.c Adds flb_ring_buffer_get_used() function to query pending data size in ring buffer
include/fluent-bit/flb_ring_buffer.h Declares new flb_ring_buffer_get_used() function
include/fluent-bit/flb_input_thread.h Adds is_paused volatile flag to track thread pause state
src/flb_input_thread.c Sets/clears is_paused flag on pause/resume operations
src/flb_input_chunk.c Bypasses pause checks during shutdown in collector and append functions; adds helper to calculate total ring buffer size
include/fluent-bit/flb_input_chunk.h Declares flb_input_chunk_total_ring_buffers_size() helper function
src/flb_engine.c Enhances shutdown logic to wait for threaded input pause acknowledgement and drain ring buffers before final exit
Comments suppressed due to low confidence (1)

src/flb_input_chunk.c:3090

  • At line 3086, the code attempts to read from ins->rb without checking if the ring buffer exists. While the previous check at line 3081 calls flb_input_buf_paused(ins) which might implicitly verify the ring buffer, there's no explicit null check for ins->rb before calling flb_ring_buffer_read. This could cause a null pointer dereference if an input instance doesn't have a ring buffer. Add a check: if (!ins->rb) continue; before the while loop starts.
            ret = flb_ring_buffer_read(ins->rb,
                                       (void *) &cr,
                                       sizeof(cr));
            if (ret != 0) {
                break;

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines 3075 to 3078
* During normal operation, respect the pause state to maintain
* backpressure. However, during shutdown (is_shutting_down=TRUE),
* we must flush all remaining data in the ring buffer to prevent
* data loss, so we skip the pause check.
Copy link

Copilot AI Jan 5, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The comment at lines 3074-3079 provides good context, but it could be more precise about the behavior. Consider clarifying that skipping the pause check during shutdown allows the ring buffer to be drained even when backpressure would normally prevent it. This is critical for preventing data loss during graceful shutdown.

Suggested change
* During normal operation, respect the pause state to maintain
* backpressure. However, during shutdown (is_shutting_down=TRUE),
* we must flush all remaining data in the ring buffer to prevent
* data loss, so we skip the pause check.
* During normal operation we respect the pause state to maintain
* backpressure: if the input is paused we stop consuming from
* the ring buffer.
*
* During shutdown (is_shutting_down == FLB_TRUE) we intentionally
* skip this pause check so the ring buffer can be fully drained,
* even when backpressure would normally prevent further reads.
* This is critical to flush all enqueued records and avoid data
* loss during graceful shutdown.

Copilot uses AI. Check for mistakes.
@edsiper
Copy link
Member

edsiper commented Jan 5, 2026

@codex review

Copy link

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c6f4b64b0e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated 2 comments.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Add volatile is_paused flag to track when a threaded input has
completed its pause operation. This allows the engine to verify
all threaded inputs are fully paused before proceeding with shutdown.

Signed-off-by: jinyong.choi <[email protected]>
During shutdown (is_shutting_down=TRUE), bypass the pause check to
allow flushing remaining ring buffer data. Also add helper function
flb_input_chunk_total_ring_buffers_size() to calculate total pending
data across all threaded inputs, and improve cleanup logging.

Signed-off-by: jinyong.choi <[email protected]>
During grace period, ensure all threaded inputs have acknowledged
pause before final shutdown. Also drain pending ring buffer data
to prevent data loss. This fixes a race condition where the engine
could exit while threaded inputs still had buffered data.

Signed-off-by: jinyong.choi <[email protected]>
@jinyongchoi
Copy link
Contributor Author

@codex review

@chatgpt-codex-connector
Copy link

Codex Review: Didn't find any major issues. 🚀

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated 1 comment.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@jinyongchoi
Copy link
Contributor Author

While testing this PR, I found that thread.ring_buffer.capacity and thread.ring_buffer.window options are useful for tuning the Tail plugin in threaded mode.

I've added documentation for these parameters to the Tail input plugin: fluent/fluent-bit-docs#2320

@jinyongchoi
Copy link
Contributor Author

@edsiper @cosmo0920
Hello, this PR is ready for review. Looking forward to your feedback. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

engine: Ring buffer data loss during graceful shutdown with threaded inputs(in_tail)

2 participants