The NGINX code module relies on ahead-of-time assumptions about the internal NGINX data structure declarations and their layout in the memory during its automatic instrumentation. If the underlying data structure declarations are patched (meaning the source code defining these structures has been modified) and hence the ahead-of-time assumptions are invalid, the automatic instrumentation done by the code module may cause problems on NGINX due to reading from, or writing to, wrong parts of the memory.
To avoid such a scenario, the NGINX code module tries to detect patched NGINX data structure declarations. If a patched declaration is detected, the code module disables its automatic instrumentation and shows the following note on the process page in the web UI:
The NGINX code module can inspect internal NGINX data structure declarations on startup (during runtime) instead of relying on ahead-of-time assumptions. With this approach, Dynatrace can instrument a patched NGINX typically without any problems, but this approach has some limitations that need to be considered.
An example of a patched NGINX is the Kong Gateway.
The runtime instrumentation depends on debug symbols being available for the NGINX binary, which is not always the case.
The runtime instrumentation adds a notable startup delay (10 seconds or more) to NGINX.
In cloud deployments, adjust your Pod or container startup timeouts to prevent NGINX from running into a timeout when starting up.
If an NGINX or Kong pod in Kubernetes is not starting up, look for a mention of failing liveness or readiness probes in the logs, and adjust the initial delay, timeout, and failure threshold values of these probes to high enough values. The exact configuration depends on the deployment.
The runtime instrumentation requires more memory during the startup of NGINX. This higher peak memory consumption can lead to Pods being killed by Kubernetes (or other container runtimes) in case of strict memory limits. Please adjust your memory limits to accommodate runtime instrumentation.
To manually instrument a patched NGINX during runtime
DT_NGINX_FORCE_RUNTIME_INSTRUMENTATION to your NGINX:DT_NGINX_FORCE_RUNTIME_INSTRUMENTATION=on