If a variable is set in both branches of an if, it can be replaced with a single if.
Bad
Good
```go
var a int
if b {
a = 100
} else {
a = 10
}
```
```go
a := 10
if b {
a = 100
}
```
Use go.uber.org/atomic
Atomic operations with the sync/atomic package operate on the raw types
(int32, int64, etc.) so it is easy to forget to use the atomic operation to
read or modify the variables.
go.uber.org/atomic adds type safety to these operations by hiding the
underlying type. Additionally, it includes a convenient atomic.Bool type.
Styles are the conventions that govern our code. The term style is a bit of a
misnomer, since these conventions cover far more than just source file
formatting—gofmt handles that for us.
The goal of this guide is to manage this complexity by describing in detail the
Dos and Don'ts of writing Go code at Uber. These rules exist to keep the code
base manageable while still allowing engineers to use Go language features
productively.
This guide was originally created by Prashant Varanasi and Simon Newton as
a way to bring some colleagues up to speed with using Go. Over the years it has
been amended based on feedback from others.
This documents idiomatic conventions in Go code that we follow at Uber. A lot
of these are general guidelines for Go, while others extend upon external
resources:
You almost never need a pointer to an interface. You should be passing
interfaces as values—the underlying data can still be a pointer.
An interface is two fields:
A pointer to some type-specific information. You can think of this as
"type."
Data pointer. If the data stored is a pointer, it’s stored directly. If
the data stored is a value, then a pointer to the value is stored.
If you want interface methods to modify the underlying data, you must use a
pointer.
Verify Interface Compliance
Verify interface compliance at compile time where appropriate. This includes:
Exported types that are required to implement specific interfaces as part of
their API contract
Exported or unexported types that are part of a collection of types
implementing the same interface
Other cases where violating an interface would break users
Bad
Good
```go
type Handler struct {
// ...
}
func (h *Handler) ServeHTTP(
w http.ResponseWriter,
r *http.Request,
) {
...
}
```
```go
type Handler struct {
// ...
}
var _ http.Handler = (*Handler)(nil)
func (h *Handler) ServeHTTP(
w http.ResponseWriter,
r *http.Request,
) {
// ...
}
```
The statement var _ http.Handler = (*Handler)(nil) will fail to compile if
*Handler ever stops matching the http.Handler interface.
The right hand side of the assignment should be the zero value of the asserted
type. This is nil for pointer types (like *Handler), slices, and maps, and
an empty struct for struct types.
type LogHandler struct {
h http.Handler
log *zap.Logger
}
var _ http.Handler = LogHandler{}
func (h LogHandler) ServeHTTP(
w http.ResponseWriter,
r *http.Request,
) {
// ...
}
Receivers and Interfaces
Methods with value receivers can be called on pointers as well as values.
Methods with pointer receivers can only be called on pointers or addressable values.
For example,
type S struct {
data string
}
func (s S) Read() string {
return s.data
}
func (s *S) Write(str string) {
s.data = str
}
// We cannot get pointers to values stored in maps, because they are not
// addressable values.
sVals := map[int]S{1: {"A"}}
// We can call Read on values stored in the map because Read
// has a value receiver, which does not require the value to
// be addressable.
sVals[1].Read()
// We cannot call Write on values stored in the map because Write
// has a pointer receiver, and it's not possible to get a pointer
// to a value stored in a map.
//
// sVals[1].Write("test")
sPtrs := map[int]*S{1: {"A"}}
// You can call both Read and Write if the map stores pointers,
// because pointers are intrinsically addressable.
sPtrs[1].Read()
sPtrs[1].Write("test")
Similarly, an interface can be satisfied by a pointer, even if the method has a
value receiver.
type F interface {
f()
}
type S1 struct{}
func (s S1) f() {}
type S2 struct{}
func (s *S2) f() {}
s1Val := S1{}
s1Ptr := &S1{}
s2Val := S2{}
s2Ptr := &S2{}
var i F
i = s1Val
i = s1Ptr
i = s2Ptr
// The following doesn't compile, since s2Val is a value, and there is no value receiver for f.
// i = s2Val
The zero-value of sync.Mutex and sync.RWMutex is valid, so you almost
never need a pointer to a mutex.
Bad
Good
```go
mu := new(sync.Mutex)
mu.Lock()
```
```go
var mu sync.Mutex
mu.Lock()
```
If you use a struct by pointer, then the mutex should be a non-pointer field on
it. Do not embed the mutex on the struct, even if the struct is not exported.
The `Mutex` field, and the `Lock` and `Unlock` methods are unintentionally part
of the exported API of `SMap`.
The mutex and its methods are implementation details of `SMap` hidden from its
callers.
Copy Slices and Maps at Boundaries
Slices and maps contain pointers to the underlying data so be wary of scenarios
when they need to be copied.
Receiving Slices and Maps
Keep in mind that users can modify a map or slice you received as an argument
if you store a reference to it.
Bad
Good
```go
func (d *Driver) SetTrips(trips []Trip) {
d.trips = trips
}
trips := ...
d1.SetTrips(trips)
// Did you mean to modify d1.trips?
trips[0] = ...
```
```go
func (d *Driver) SetTrips(trips []Trip) {
d.trips = make([]Trip, len(trips))
copy(d.trips, trips)
}
trips := ...
d1.SetTrips(trips)
// We can now modify trips[0] without affecting d1.trips.
trips[0] = ...
```
Returning Slices and Maps
Similarly, be wary of user modifications to maps or slices exposing internal
state.
Bad
Good
```go
type Stats struct {
mu sync.Mutex
counters map[string]int
}
// Snapshot returns the current stats.
func (s *Stats) Snapshot() map[string]int {
s.mu.Lock()
defer s.mu.Unlock()
return s.counters
}
// snapshot is no longer protected by the mutex, so any
// access to the snapshot is subject to data races.
snapshot := stats.Snapshot()
```
```go
type Stats struct {
mu sync.Mutex
counters map[string]int
}
func (s *Stats) Snapshot() map[string]int {
s.mu.Lock()
defer s.mu.Unlock()
result := make(map[string]int, len(s.counters))
for k, v := range s.counters {
result[k] = v
}
return result
}
// Snapshot is now a copy.
snapshot := stats.Snapshot()
```
Defer to Clean Up
Use defer to clean up resources such as files and locks.
Bad
Good
```go
p.Lock()
if p.count < 10 {
p.Unlock()
return p.count
}
p.count++
newCount := p.count
p.Unlock()
return newCount
// easy to miss unlocks due to multiple returns
```
```go
p.Lock()
defer p.Unlock()
if p.count < 10 {
return p.count
}
p.count++
return p.count
// more readable
```
Defer has an extremely small overhead and should be avoided only if you can
prove that your function execution time is in the order of nanoseconds. The
readability win of using defers is worth the miniscule cost of using them. This
is especially true for larger methods that have more than simple memory
accesses, where the other computations are more significant than the defer.
Channel Size is One or None
Channels should usually have a size of one or be unbuffered. By default,
channels are unbuffered and have a size of zero. Any other size
must be subject to a high level of scrutiny. Consider how the size is
determined, what prevents the channel from filling up under load and blocking
writers, and what happens when this occurs.
Bad
Good
```go
// Ought to be enough for anybody!
c := make(chan int, 64)
```
```go
// Size of one
c := make(chan int, 1) // or
// Unbuffered channel, size of zero
c := make(chan int)
```
Start Enums at One
The standard way of introducing enumerations in Go is to declare a custom type
and a const group with iota. Since variables have a 0 default value, you
should usually start your enums on a non-zero value.
Bad
Good
```go
type Operation int
const (
Add Operation = iota
Subtract
Multiply
)
// Add=0, Subtract=1, Multiply=2
```
```go
type Operation int
const (
Add Operation = iota + 1
Subtract
Multiply
)
// Add=1, Subtract=2, Multiply=3
```
There are cases where using the zero value makes sense, for example when the
zero value case is the desirable default behavior.
type LogOutput int
const (
LogToStdout LogOutput = iota
LogToFile
LogToRemote
)
// LogToStdout=0, LogToFile=1, LogToRemote=2
Use "time" to handle time
Time is complicated. Incorrect assumptions often made about time include the
following.
For example, 1 means that adding 24 hours to a time instant will not always
yield a new calendar day.
Therefore, always use the "time" package when dealing with time because it
helps deal with these incorrect assumptions in a safer, more accurate manner.
Use time.Time for instants of time
Use time.Time when dealing with instants of time, and the methods on
time.Time when comparing, adding, or subtracting time.
Bad
Good
```go
func isActive(now, start, stop int) bool {
return start <= now && now < stop
}
```
Going back to the example of adding 24 hours to a time instant, the method we
use to add time depends on intent. If we want the same time of the day, but on
the next calendar day, we should use Time.AddDate. However, if we want an
instant of time guaranteed to be 24 hours after the previous time, we should
use Time.Add.
newDay := t.AddDate(0 /* years */, 0 /* months */, 1 /* days */)
maybeNewDay := t.Add(24 * time.Hour)
Use time.Time and time.Duration with external systems
Use time.Duration and time.Time in interactions with external systems when
possible. For example:
When it is not possible to use time.Duration in these interactions, use
int or float64 and include the unit in the name of the field.
For example, since encoding/json does not support time.Duration, the unit
is included in the name of the field.
Bad
Good
```go
// {"interval": 2}
type Config struct {
Interval int `json:"interval"`
}
```
```go
// {"intervalMillis": 2000}
type Config struct {
IntervalMillis int `json:"intervalMillis"`
}
```
When it is not possible to use time.Time in these interactions, unless an
alternative is agreed upon, use string and format timestamps as defined in
RFC 3339. This format is used by default by Time.UnmarshalText and is
available for use in Time.Format and time.Parse via time.RFC3339.
Although this tends to not be a problem in practice, keep in mind that the
"time" package does not support parsing timestamps with leap seconds
(8728), nor does it account for leap seconds in calculations (15190). If
you compare two instants of time, the difference will not include the leap
seconds that may have occurred between those two instants.
Errors
Error Types
There are few options for declaring errors.
Consider the following before picking the option best suited for your use case.
Does the caller need to match the error so that they can handle it?
If yes, we must support the errors.Is or errors.As functions
by declaring a top-level error variable or a custom type.
Is the error message a static string,
or is it a dynamic string that requires contextual information?
For the former, we can use errors.New, but for the latter we must
use fmt.Errorf or a custom error type.
Are we propagating a new error returned by a downstream function?
If so, see the section on error wrapping.
For example,
use errors.New for an error with a static string.
Export this error as a variable to support matching it with errors.Is
if the caller needs to match and handle this error.
No error matching
Error matching
```go
// package foo
func Open() error {
return errors.New("could not open")
}
// package bar
if err := foo.Open(); err != nil {
// Can't handle the error.
panic("unknown error")
}
```
```go
// package foo
var ErrCouldNotOpen = errors.New("could not open")
func Open() error {
return ErrCouldNotOpen
}
// package bar
if err := foo.Open(); err != nil {
if errors.Is(err, foo.ErrCouldNotOpen) {
// handle the error
} else {
panic("unknown error")
}
}
```
For an error with a dynamic string,
use fmt.Errorf if the caller does not need to match it,
and a custom error if the caller does need to match it.
No error matching
Error matching
```go
// package foo
func Open(file string) error {
return fmt.Errorf("file %q not found", file)
}
// package bar
if err := foo.Open("testfile.txt"); err != nil {
// Can't handle the error.
panic("unknown error")
}
```
```go
// package foo
type NotFoundError struct {
File string
}
func (e *NotFoundError) Error() string {
return fmt.Sprintf("file %q not found", e.File)
}
func Open(file string) error {
return &NotFoundError{File: file}
}
// package bar
if err := foo.Open("testfile.txt"); err != nil {
var notFound *NotFoundError
if errors.As(err, ¬Found) {
// handle the error
} else {
panic("unknown error")
}
}
```
Note that if you export error variables or types from a package,
they will become part of the public API of the package.
Error Wrapping
There are three main options for propagating errors if a call fails:
return the original error as-is
add context with fmt.Errorf and the %w verb
add context with fmt.Errorf and the %v verb
Return the original error as-is if there is no additional context to add.
This maintains the original error type and message.
This is well suited for cases when the underlying error message
has sufficient information to track down where it came from.
Otherwise, add context to the error message where possible
so that instead of a vague error such as "connection refused",
you get more useful errors such as "call service foo: connection refused".
Use fmt.Errorf to add context to your errors,
picking between the %w or %v verbs
based on whether the caller should be able to
match and extract the underlying cause.
Use %w if the caller should have access to the underlying error.
This is a good default for most wrapped errors,
but be aware that callers may begin to rely on this behavior.
So for cases where the wrapped error is a known var or type,
document and test it as part of your function's contract.
Use %v to obfuscate the underlying error.
Callers will be unable to match it,
but you can switch to %w in the future if needed.
When adding context to returned errors, keep the context succinct by avoiding
phrases like "failed to", which state the obvious and pile up as the error
percolates up through the stack:
Bad
Good
```go
s, err := store.New()
if err != nil {
return fmt.Errorf(
"failed to create new store: %w", err)
}
```
```go
s, err := store.New()
if err != nil {
return fmt.Errorf(
"new store: %w", err)
}
```
```plain
failed to x: failed to y: failed to create new store: the error
```
```plain
x: y: new store: the error
```
However once the error is sent to another system, it should be clear the
message is an error (e.g. an err tag or "Failed" prefix in logs).
For error values stored as global variables,
use the prefix Err or err depending on whether they're exported.
This guidance supersedes the Prefix Unexported Globals with _.
var (
// The following two errors are exported
// so that users of this package can match them
// with errors.Is.
ErrBrokenLink = errors.New("link is broken")
ErrCouldNotOpen = errors.New("could not open")
// This error is not exported because
// we don't want to make it part of our public API.
// We may still use it inside the package
// with errors.Is.
errNotFound = errors.New("not found")
)
For custom error types, use the suffix Error instead.
// Similarly, this error is exported
// so that users of this package can match it
// with errors.As.
type NotFoundError struct {
File string
}
func (e *NotFoundError) Error() string {
return fmt.Sprintf("file %q not found", e.File)
}
// And this error is not exported because
// we don't want to make it part of the public API.
// We can still use it inside the package
// with errors.As.
type resolveError struct {
Path string
}
func (e *resolveError) Error() string {
return fmt.Sprintf("resolve %q", e.Path)
}
Handle Errors Once
When a caller receives an error from a callee,
it can handle it in a variety of different ways
depending on what it knows about the error.
These include, but not are limited to:
if the callee contract defines specific errors,
matching the error with errors.Is or errors.As
and handling the branches differently
if the error is recoverable,
logging the error and degrading gracefully
if the error represents a domain-specific failure condition,
returning a well-defined error
Regardless of how the caller handles the error,
it should typically handle each error only once.
The caller should not, for example, log the error and then return it,
because its callers may handle the error as well.
For example, consider the following cases:
Description
Code
**Bad**: Log the error and return it
Callers further up the stack will likely take a similar action with the error.
Doing so causing a lot of noise in the application logs for little value.
```go
u, err := getUser(id)
if err != nil {
// BAD: See description
log.Printf("Could not get user %q: %v", id, err)
return err
}
```
**Good**: Wrap the error and return it
Callers further up the stack will handle the error.
Use of `%w` ensures they can match the error with `errors.Is` or `errors.As`
if relevant.
```go
u, err := getUser(id)
if err != nil {
return fmt.Errorf("get user %q: %w", id, err)
}
```
**Good**: Log the error and degrade gracefully
If the operation isn't strictly necessary,
we can provide a degraded but unbroken experience
by recovering from it.
```go
if err := emitMetrics(); err != nil {
// Failure to write metrics should not
// break the application.
log.Printf("Could not emit metrics: %v", err)
}
```
**Good**: Match the error and degrade gracefully
If the callee defines a specific error in its contract,
and the failure is recoverable,
match on that error case and degrade gracefully.
For all other cases, wrap the error and return it.
Callers further up the stack will handle other errors.
```go
tz, err := getUserTimeZone(id)
if err != nil {
if errors.Is(err, ErrUserNotFound) {
// User doesn't exist. Use UTC.
tz = time.UTC
} else {
return fmt.Errorf("get user %q: %w", id, err)
}
}
```
Handle Type Assertion Failures
The single return value form of a type assertion will panic on an incorrect
type. Therefore, always use the "comma ok" idiom.
Bad
Good
```go
t := i.(string)
```
```go
t, ok := i.(string)
if !ok {
// handle the error gracefully
}
```
Don't Panic
Code running in production must avoid panics. Panics are a major source of
cascading failures. If an error occurs, the function must return an error and
allow the caller to decide how to handle it.
Panic/recover is not an error handling strategy. A program must panic only when
something irrecoverable happens such as a nil dereference. An exception to this is
program initialization: bad things at program startup that should abort the
program may cause panic.
var _statusTemplate = template.Must(template.New("name").Parse("_statusHTML"))
Even in tests, prefer t.Fatal or t.FailNow over panics to ensure that the
test is marked as failed.
Bad
Good
```go
// func TestFoo(t *testing.T)
f, err := os.CreateTemp("", "test")
if err != nil {
panic("failed to set up test")
}
```
```go
// func TestFoo(t *testing.T)
f, err := os.CreateTemp("", "test")
if err != nil {
t.Fatal("failed to set up test")
}
```
Use go.uber.org/atomic
Atomic operations with the sync/atomic package operate on the raw types
(int32, int64, etc.) so it is easy to forget to use the atomic operation to
read or modify the variables.
go.uber.org/atomic adds type safety to these operations by hiding the
underlying type. Additionally, it includes a convenient atomic.Bool type.
These embedded types leak implementation details, inhibit type evolution, and
obscure documentation.
Assuming you have implemented a variety of list types using a shared
AbstractList, avoid embedding the AbstractList in your concrete list
implementations.
Instead, hand-write only the methods to your concrete list that will delegate
to the abstract list.
type AbstractList struct {}
// Add adds an entity to the list.
func (l *AbstractList) Add(e Entity) {
// ...
}
// Remove removes an entity from the list.
func (l *AbstractList) Remove(e Entity) {
// ...
}
Bad
Good
```go
// ConcreteList is a list of entities.
type ConcreteList struct {
*AbstractList
}
```
```go
// ConcreteList is a list of entities.
type ConcreteList struct {
list *AbstractList
}
// Add adds an entity to the list.
func (l *ConcreteList) Add(e Entity) {
l.list.Add(e)
}
// Remove removes an entity from the list.
func (l *ConcreteList) Remove(e Entity) {
l.list.Remove(e)
}
```
Go allows type embedding as a compromise between inheritance and composition.
The outer type gets implicit copies of the embedded type's methods.
These methods, by default, delegate to the same method of the embedded
instance.
The struct also gains a field by the same name as the type.
So, if the embedded type is public, the field is public.
To maintain backward compatibility, every future version of the outer type must
keep the embedded type.
An embedded type is rarely necessary.
It is a convenience that helps you avoid writing tedious delegate methods.
Even embedding a compatible AbstractList interface, instead of the struct,
would offer the developer more flexibility to change in the future, but still
leak the detail that the concrete lists use an abstract implementation.
Bad
Good
```go
// AbstractList is a generalized implementation
// for various kinds of lists of entities.
type AbstractList interface {
Add(Entity)
Remove(Entity)
}
// ConcreteList is a list of entities.
type ConcreteList struct {
AbstractList
}
```
```go
// ConcreteList is a list of entities.
type ConcreteList struct {
list AbstractList
}
// Add adds an entity to the list.
func (l *ConcreteList) Add(e Entity) {
l.list.Add(e)
}
// Remove removes an entity from the list.
func (l *ConcreteList) Remove(e Entity) {
l.list.Remove(e)
}
```
Either with an embedded struct or an embedded interface, the embedded type
places limits on the evolution of the type.
Adding methods to an embedded interface is a breaking change.
Removing methods from an embedded struct is a breaking change.
Removing the embedded type is a breaking change.
Replacing the embedded type, even with an alternative that satisfies the same
interface, is a breaking change.
Although writing these delegate methods is tedious, the additional effort hides
an implementation detail, leaves more opportunities for change, and also
eliminates indirection for discovering the full List interface in
documentation.
Depending on context, reusing these identifiers as names will either shadow
the original within the current lexical scope (and any nested scopes) or make
affected code confusing. In the best case, the compiler will complain; in the
worst case, such code may introduce latent, hard-to-grep bugs.
Bad
Good
```go
var error string
// `error` shadows the builtin
// or
func handleErrorMessage(error string) {
// `error` shadows the builtin
}
```
```go
var errorMessage string
// `error` refers to the builtin
// or
func handleErrorMessage(msg string) {
// `error` refers to the builtin
}
```
```go
type Foo struct {
// While these fields technically don't
// constitute shadowing, grepping for
// `error` or `string` strings is now
// ambiguous.
error error
string string
}
func (f Foo) Error() error {
// `error` and `f.error` are
// visually similar
return f.error
}
func (f Foo) String() string {
// `string` and `f.string` are
// visually similar
return f.string
}
```
```go
type Foo struct {
// `error` and `string` strings are
// now unambiguous.
err error
str string
}
func (f Foo) Error() error {
return f.err
}
func (f Foo) String() string {
return f.str
}
```
Note that the compiler will not generate errors when using predeclared
identifiers, but tools such as go vet should correctly point out these and
other cases of shadowing.
Avoid init()
Avoid init() where possible. When init() is unavoidable or desirable, code
should attempt to:
Be completely deterministic, regardless of program environment or invocation.
Avoid depending on the ordering or side-effects of other init() functions.
While init() ordering is well-known, code can change, and thus
relationships between init() functions can make code brittle and
error-prone.
Avoid accessing or manipulating global or environment state, such as machine
information, environment variables, working directory, program
arguments/inputs, etc.
Avoid I/O, including both filesystem, network, and system calls.
Code that cannot satisfy these requirements likely belongs as a helper to be
called as part of main() (or elsewhere in a program's lifecycle), or be
written as part of main() itself. In particular, libraries that are intended
to be used by other programs should take special care to be completely
deterministic and not perform "init magic".
Rationale: Programs with multiple functions that exit present a few issues:
Non-obvious control flow: Any function can exit the program so it becomes
difficult to reason about the control flow.
Difficult to test: A function that exits the program will also exit the test
calling it. This makes the function difficult to test and introduces risk of
skipping other tests that have not yet been run by go test.
Skipped cleanup: When a function exits the program, it skips function calls
enqueued with defer statements. This adds risk of skipping important
cleanup tasks.
Exit Once
If possible, prefer to call os.Exit or log.Fatalat most once in your
main(). If there are multiple error scenarios that halt program execution,
put that logic under a separate function and return errors from it.
This has the effect of shortening your main() function and putting all key
business logic into a separate, testable function.
Bad
Good
```go
package main
func main() {
args := os.Args[1:]
if len(args) != 1 {
log.Fatal("missing file")
}
name := args[0]
f, err := os.Open(name)
if err != nil {
log.Fatal(err)
}
defer f.Close()
// If we call log.Fatal after this line,
// f.Close will not be called.
b, err := io.ReadAll(f)
if err != nil {
log.Fatal(err)
}
// ...
}
```
Any struct field that is marshaled into JSON, YAML,
or other formats that support tag-based field naming
should be annotated with the relevant tag.
Bad
Good
```go
type Stock struct {
Price int
Name string
}
bytes, err := json.Marshal(Stock{
Price: 137,
Name: "UBER",
})
```
```go
type Stock struct {
Price int `json:"price"`
Name string `json:"name"`
// Safe to rename Name to Symbol.
}
bytes, err := json.Marshal(Stock{
Price: 137,
Name: "UBER",
})
```
Rationale:
The serialized form of the structure is a contract between different systems.
Changes to the structure of the serialized form--including field names--break
this contract. Specifying field names inside tags makes the contract explicit,
and it guards against accidentally breaking the contract by refactoring or
renaming fields.
Don't fire-and-forget goroutines
Goroutines are lightweight, but they're not free:
at minimum, they cost memory for their stack and CPU to be scheduled.
While these costs are small for typical uses of goroutines,
they can cause significant performance issues
when spawned in large numbers without controlled lifetimes.
Goroutines with unmanaged lifetimes can also cause other issues
like preventing unused objects from being garbage collected
and holding onto resources that are otherwise no longer used.
Therefore, do not leak goroutines in production code.
Use go.uber.org/goleak
to test for goroutine leaks inside packages that may spawn goroutines.
In general, every goroutine:
must have a predictable time at which it will stop running; or
there must be a way to signal to the goroutine that it should stop
In both cases, there must be a way code to block and wait for the goroutine to
finish.
For example:
Bad
Good
```go
go func() {
for {
flush()
time.Sleep(delay)
}
}()
```
```go
var (
stop = make(chan struct{}) // tells the goroutine to stop
done = make(chan struct{}) // tells us that the goroutine exited
)
go func() {
defer close(done)
ticker := time.NewTicker(delay)
defer ticker.Stop()
for {
select {
case <-ticker.C:
flush()
case <-stop:
return
}
}
}()
// Elsewhere...
close(stop) // signal the goroutine to stop
<-done // and wait for it to exit
```
There's no way to stop this goroutine.
This will run until the application exits.
This goroutine can be stopped with `close(stop)`,
and we can wait for it to exit with `<-done`.
Wait for goroutines to exit
Given a goroutine spawned by the system,
there must be a way to wait for the goroutine to exit.
There are two popular ways to do this:
Use a sync.WaitGroup.
Do this if there are multiple goroutines that you want to wait for
var wg sync.WaitGroup
for i := 0; i < N; i++ {
wg.Add(1)
go func() {
defer wg.Done()
// ...
}()
}
// To wait for all to finish:
wg.Wait()
Add another chan struct{} that the goroutine closes when it's done.
Do this if there's only one goroutine.
done := make(chan struct{})
go func() {
defer close(done)
// ...
}()
// To wait for the goroutine to finish:
<-done
No goroutines in init()
init() functions should not spawn goroutines.
See also Avoid init().
If a package has need of a background goroutine,
it must expose an object that is responsible for managing a goroutine's
lifetime.
The object must provide a method (Close, Stop, Shutdown, etc)
that signals the background goroutine to stop, and waits for it to exit.
Bad
Good
```go
func init() {
go doWork()
}
func doWork() {
for {
// ...
}
}
```
```go
type Worker struct{ /* ... */ }
func NewWorker(...) *Worker {
w := &Worker{
stop: make(chan struct{}),
done: make(chan struct{}),
// ...
}
go w.doWork()
}
func (w *Worker) doWork() {
defer close(w.done)
for {
// ...
case <-w.stop:
return
}
}
// Shutdown tells the worker to stop
// and waits until it has finished.
func (w *Worker) Shutdown() {
close(w.stop)
<-w.done
}
```
Spawns a background goroutine unconditionally when the user exports this package.
The user has no control over the goroutine or a means of stopping it.
Spawns the worker only if the user requests it.
Provides a means of shutting down the worker so that the user can free up
resources used by the worker.
Note that you should use `WaitGroup`s if the worker manages multiple
goroutines.
See [Wait for goroutines to exit](#wait-for-goroutines-to-exit).
Performance
Performance-specific guidelines apply only to the hot path.
Prefer strconv over fmt
When converting primitives to/from strings, strconv is faster than
fmt.
Bad
Good
```go
for i := 0; i < b.N; i++ {
s := fmt.Sprint(rand.Int())
}
```
```go
for i := 0; i < b.N; i++ {
s := strconv.Itoa(rand.Int())
}
```
Do not create byte slices from a fixed string repeatedly. Instead, perform the
conversion once and capture the result.
Bad
Good
```go
for i := 0; i < b.N; i++ {
w.Write([]byte("Hello world"))
}
```
```go
data := []byte("Hello world")
for i := 0; i < b.N; i++ {
w.Write(data)
}
```
```plain
BenchmarkBad-4 50000000 22.2 ns/op
```
```plain
BenchmarkGood-4 500000000 3.25 ns/op
```
Prefer Specifying Container Capacity
Specify container capacity where possible in order to allocate memory for the
container up front. This minimizes subsequent allocations (by copying and
resizing of the container) as elements are added.
Specifying Map Capacity Hints
Where possible, provide capacity hints when initializing
maps with make().
make(map[T1]T2, hint)
Providing a capacity hint to make() tries to right-size the
map at initialization time, which reduces the need for growing
the map and allocations as elements are added to the map.
Note that, unlike slices, map capacity hints do not guarantee complete,
preemptive allocation, but are used to approximate the number of hashmap buckets
required. Consequently, allocations may still occur when adding elements to the
map, even up to the specified capacity.
Bad
Good
```go
m := make(map[string]os.FileInfo)
files, _ := os.ReadDir("./files")
for _, f := range files {
m[f.Name()] = f
}
```
```go
files, _ := os.ReadDir("./files")
m := make(map[string]os.DirEntry, len(files))
for _, f := range files {
m[f.Name()] = f
}
```
`m` is created without a size hint; there may be more
allocations at assignment time.
`m` is created with a size hint; there may be fewer
allocations at assignment time.
Specifying Slice Capacity
Where possible, provide capacity hints when initializing slices with make(),
particularly when appending.
make([]T, length, capacity)
Unlike maps, slice capacity is not a hint: the compiler will allocate enough
memory for the capacity of the slice as provided to make(), which means that
subsequent append() operations will incur zero allocations (until the length
of the slice matches the capacity, after which any appends will require a resize
to hold additional elements).
Bad
Good
```go
for n := 0; n < b.N; n++ {
data := make([]int, 0)
for k := 0; k < size; k++{
data = append(data, k)
}
}
```
```go
for n := 0; n < b.N; n++ {
data := make([]int, 0, size)
for k := 0; k < size; k++{
data = append(data, k)
}
}
```
```plain
BenchmarkBad-4 100000000 2.48s
```
```plain
BenchmarkGood-4 100000000 0.21s
```
Style
Avoid overly long lines
Avoid lines of code that require readers to scroll horizontally
or turn their heads too much.
We recommend a soft line length limit of 99 characters.
Authors should aim to wrap lines before hitting this limit,
but it is not a hard limit.
Code is allowed to exceed this limit.
Be Consistent
Some of the guidelines outlined in this document can be evaluated objectively;
others are situational, contextual, or subjective.
Above all else, be consistent.
Consistent code is easier to maintain, is easier to rationalize, requires less
cognitive overhead, and is easier to migrate or update as new conventions emerge
or classes of bugs are fixed.
Conversely, having multiple disparate or conflicting styles within a single
codebase causes maintenance overhead, uncertainty, and cognitive dissonance,
all of which can directly contribute to lower velocity, painful code reviews,
and bugs.
When applying these guidelines to a codebase, it is recommended that changes
are made at a package (or larger) level: application at a sub-package level
violates the above concern by introducing multiple styles into the same code.
Group Similar Declarations
Go supports grouping similar declarations.
Bad
Good
```go
import "a"
import "b"
```
```go
import (
"a"
"b"
)
```
This also applies to constants, variables, and type declarations.
Bad
Good
```go
const a = 1
const b = 2
var a = 1
var b = 2
type Area float64
type Volume float64
```
```go
const (
a = 1
b = 2
)
var (
a = 1
b = 2
)
type (
Area float64
Volume float64
)
```
Only group related declarations. Do not group declarations that are unrelated.
Bad
Good
```go
type Operation int
const (
Add Operation = iota + 1
Subtract
Multiply
EnvVar = "MY_ENV"
)
```
```go
type Operation int
const (
Add Operation = iota + 1
Subtract
Multiply
)
const EnvVar = "MY_ENV"
```
Groups are not limited in where they can be used. For example, you can use them
inside of functions.
Bad
Good
```go
func f() string {
red := color.New(0xff0000)
green := color.New(0x00ff00)
blue := color.New(0x0000ff)
// ...
}
```
```go
func f() string {
var (
red = color.New(0xff0000)
green = color.New(0x00ff00)
blue = color.New(0x0000ff)
)
// ...
}
```
Exception: Variable declarations, particularly inside functions, should be
grouped together if declared adjacent to other variables. Do this for variables
declared together even if they are unrelated.
We follow the Go community's convention of using MixedCaps for function
names. An exception is made for test functions, which may contain underscores
for the purpose of grouping related test cases, e.g.,
TestMyFunction_WhatIsBeingTested.
Import Aliasing
Import aliasing must be used if the package name does not match the last
element of the import path.
Functions in a file should be grouped by receiver.
Therefore, exported functions should appear first in a file, after
struct, const, var definitions.
A newXYZ()/NewXYZ() may appear after the type is defined, but before the
rest of the methods on the receiver.
Since functions are grouped by receiver, plain utility functions should appear
towards the end of the file.
Bad
Good
```go
func (s *something) Cost() {
return calcCost(s.weights)
}
type something struct{ ... }
func calcCost(n []int) int {...}
func (s *something) Stop() {...}
func newSomething() *something {
return &something{}
}
```
```go
type something struct{ ... }
func newSomething() *something {
return &something{}
}
func (s *something) Cost() {
return calcCost(s.weights)
}
func (s *something) Stop() {...}
func calcCost(n []int) int {...}
```
Reduce Nesting
Code should reduce nesting where possible by handling error cases/special
conditions first and returning early or continuing the loop. Reduce the amount
of code that is nested multiple levels.
Bad
Good
```go
for _, v := range data {
if v.F1 == 1 {
v = process(v)
if err := v.Call(); err == nil {
v.Send()
} else {
return err
}
} else {
log.Printf("Invalid v: %v", v)
}
}
```
```go
for _, v := range data {
if v.F1 != 1 {
log.Printf("Invalid v: %v", v)
continue
}
v = process(v)
if err := v.Call(); err != nil {
return err
}
v.Send()
}
```
Unnecessary Else
If a variable is set in both branches of an if, it can be replaced with a
single if.
Bad
Good
```go
var a int
if b {
a = 100
} else {
a = 10
}
```
```go
a := 10
if b {
a = 100
}
```
Top-level Variable Declarations
At the top level, use the standard var keyword. Do not specify the type,
unless it is not the same type as the expression.
Bad
Good
```go
var _s string = F()
func F() string { return "A" }
```
```go
var _s = F()
// Since F already states that it returns a string, we don't need to specify
// the type again.
func F() string { return "A" }
```
Specify the type if the type of the expression does not match the desired type
exactly.
type myError struct{}
func (myError) Error() string { return "error" }
func F() myError { return myError{} }
var _e error = F()
// F returns an object of type myError but we want error.
Prefix Unexported Globals with _
Prefix unexported top-level vars and consts with _ to make it clear when
they are used that they are global symbols.
Rationale: Top-level variables and constants have a package scope. Using a
generic name makes it easy to accidentally use the wrong value in a different
file.
Bad
Good
```go
// foo.go
const (
defaultPort = 8080
defaultUser = "user"
)
// bar.go
func Bar() {
defaultPort := 9090
...
fmt.Println("Default port", defaultPort)
// We will not see a compile error if the first line of
// Bar() is deleted.
}
```
Exception: Unexported error values may use the prefix err without the underscore.
See Error Naming.
Embedding in Structs
Embedded types should be at the top of the field list of a
struct, and there must be an empty line separating embedded fields from regular
fields.
Bad
Good
```go
type Client struct {
version int
http.Client
}
```
```go
type Client struct {
http.Client
version int
}
```
Embedding should provide tangible benefit, like adding or augmenting
functionality in a semantically-appropriate way. It should do this with zero
adverse user-facing effects (see also: Avoid Embedding Types in Public Structs).
Make outer types more difficult to construct or use.
Affect outer types' zero values. If the outer type has a useful zero value, it
should still have a useful zero value after embedding the inner type.
Expose unrelated functions or fields from the outer type as a side-effect of
embedding the inner type.
Expose unexported types.
Affect outer types' copy semantics.
Change the outer type's API or type semantics.
Embed a non-canonical form of the inner type.
Expose implementation details of the outer type.
Allow users to observe or control type internals.
Change the general behavior of inner functions through wrapping in a way that
would reasonably surprise users.
Simply put, embed consciously and intentionally. A good litmus test is, "would
all of these exported inner methods/fields be added directly to the outer type";
if the answer is "some" or "no", don't embed the inner type - use a field
instead.
Bad
Good
```go
type A struct {
// Bad: A.Lock() and A.Unlock() are
// now available, provide no
// functional benefit, and allow
// users to control details about
// the internals of A.
sync.Mutex
}
```
```go
type countingWriteCloser struct {
// Good: Write() is provided at this
// outer layer for a specific
// purpose, and delegates work
// to the inner type's Write().
io.WriteCloser
count int
}
func (w *countingWriteCloser) Write(bs []byte) (int, error) {
w.count += len(bs)
return w.WriteCloser.Write(bs)
}
```
```go
type Book struct {
// Bad: pointer changes zero value usefulness
io.ReadWriter
// other fields
}
// later
var b Book
b.Read(...) // panic: nil pointer
b.String() // panic: nil pointer
b.Write(...) // panic: nil pointer
```
```go
type Book struct {
// Good: has useful zero value
bytes.Buffer
// other fields
}
// later
var b Book
b.Read(...) // ok
b.String() // ok
b.Write(...) // ok
```
```go
var nums []int
if add1 {
nums = append(nums, 1)
}
if add2 {
nums = append(nums, 2)
}
```
Remember that, while it is a valid slice, a nil slice is not equivalent to an
allocated slice of length 0 - one is nil and the other is not - and the two may
be treated differently in different situations (such as serialization).
Reduce Scope of Variables
Where possible, reduce scope of variables. Do not reduce the scope if it
conflicts with Reduce Nesting.
Better yet, replace naked bool types with custom types for more readable and
type-safe code. This allows more than just two states (true/false) for that
parameter in the future.
type Region int
const (
UnknownRegion Region = iota
Local
)
type Status int
const (
StatusReady Status = iota + 1
StatusDone
// Maybe we will have a StatusInProgress in the future.
)
func printInfo(name string, region Region, status Status)
Use Raw String Literals to Avoid Escaping
Go supports raw string literals,
which can span multiple lines and include quotes. Use these to avoid
hand-escaped strings which are much harder to read.
Bad
Good
```go
wantError := "unknown name:\"test\""
```
```go
wantError := `unknown error:"test"`
```
Initializing Structs
Use Field Names to Initialize Structs
You should almost always specify field names when initializing structs. This is
now enforced by go vet.
When initializing structs with field names, omit fields that have zero values
unless they provide meaningful context. Otherwise, let Go set these to zero
values automatically.
```go
user := User{
FirstName: "John",
LastName: "Doe",
}
```
This helps reduce noise for readers by omitting values that are default in
that context. Only meaningful values are specified.
Include zero values where field names provide meaningful context. For example,
test cases in Test Tables can benefit from names of fields
even when they are zero-valued.
tests := []struct{
give string
want int
}{
{give: "0", want: 0},
// ...
}
Use var for Zero Value Structs
When all the fields of a struct are omitted in a declaration, use the var
form to declare the struct.
Bad
Good
```go
user := User{}
```
```go
var user User
```
This differentiates zero valued structs from those with non-zero fields
similar to the distinction created for map initialization, and matches how
we prefer to declare empty slices.
Initializing Struct References
Use &T{} instead of new(T) when initializing struct references so that it
is consistent with the struct initialization.
Prefer make(..) for empty maps, and maps populated
programmatically. This makes map initialization visually
distinct from declaration, and it makes it easy to add size
hints later if available.
Bad
Good
```go
var (
// m1 is safe to read and write;
// m2 will panic on writes.
m1 = map[T1]T2{}
m2 map[T1]T2
)
```
```go
var (
// m1 is safe to read and write;
// m2 will panic on writes.
m1 = make(map[T1]T2)
m2 map[T1]T2
)
```
Declaration and initialization are visually similar.
Declaration and initialization are visually distinct.
Where possible, provide capacity hints when initializing
maps with make(). See
Specifying Map Capacity Hints
for more information.
On the other hand, if the map holds a fixed list of elements,
use map literals to initialize the map.
The basic rule of thumb is to use map literals when adding a fixed set of
elements at initialization time, otherwise use make (and specify a size hint
if available).
Format Strings outside Printf
If you declare format strings for Printf-style functions outside a string
literal, make them const values.
This helps go vet perform static analysis of the format string.
When you declare a Printf-style function, make sure that go vet can detect
it and check the format string.
This means that you should use predefined Printf-style function
names if possible. go vet will check these by default. See Printf family
for more information.
If using the predefined names is not an option, end the name you choose with
f: Wrapf, not Wrap. go vet can be asked to check specific Printf-style
names but they must end with f.
Table-driven tests with subtests can be a helpful pattern for writing tests
to avoid duplicating code when the core test logic is repetitive.
If a system under test needs to be tested against multiple conditions where
certain parts of the the inputs and outputs change, a table-driven test should
be used to reduce redundancy and improve readability.
Test tables make it easier to add context to error messages, reduce duplicate
logic, and add new test cases.
We follow the convention that the slice of structs is referred to as tests
and each test case tt. Further, we encourage explicating the input and output
values for each test case with give and want prefixes.
tests := []struct{
give string
wantHost string
wantPort string
}{
// ...
}
for _, tt := range tests {
// ...
}
Avoid Unnecessary Complexity in Table Tests
Table tests can be difficult to read and maintain if the subtests contain conditional
assertions or other branching logic. Table tests should NOT be used whenever
there needs to be complex or conditional logic inside subtests (i.e. complex logic inside the for loop).
Large, complex table tests harm readability and maintainability because test readers may
have difficulty debugging test failures that occur.
Table tests like this should be split into either multiple test tables or multiple
individual Test... functions.
Some ideals to aim for are:
Focus on the narrowest unit of behavior
Minimize "test depth", and avoid conditional assertions (see below)
Ensure that all table fields are used in all tests
Ensure that all test logic runs for all table cases
In this context, "test depth" means "within a given test, the number of
successive assertions that require previous assertions to hold" (similar
to cyclomatic complexity).
Having "shallower" tests means that there are fewer relationships between
assertions and, more importantly, that those assertions are less likely
to be conditional by default.
Concretely, table tests can become confusing and difficult to read if they use multiple branching
pathways (e.g. shouldError, expectCall, etc.), use many if statements for
specific mock expectations (e.g. shouldCallFoo), or place functions inside the
table (e.g. setupMocks func(*FooMock)).
However, when testing behavior that only
changes based on changed input, it may be preferable to group similar cases
together in a table test to better illustrate how behavior changes across all inputs,
rather than splitting otherwise comparable units into separate tests
and making them harder to compare and contrast.
If the test body is short and straightforward,
it's acceptable to have a single branching pathway for success versus failure cases
with a table field like shouldErr to specify error expectations.
This complexity makes it more difficult to change, understand, and prove the
correctness of the test.
While there are no strict guidelines, readability and maintainability should
always be top-of-mind when deciding between Table Tests versus separate tests
for multiple inputs/outputs to a system.
Parallel Tests
Parallel tests, like some specialized loops (for example, those that spawn
goroutines or capture references as part of the loop body),
must take care to explicitly assign loop variables within the loop's scope to
ensure that they hold the expected values.
tests := []struct{
give string
// ...
}{
// ...
}
for _, tt := range tests {
tt := tt // for t.Parallel
t.Run(tt.give, func(t *testing.T) {
t.Parallel()
// ...
})
}
In the example above, we must declare a tt variable scoped to the loop
iteration because of the use of t.Parallel() below.
If we do not do that, most or all tests will receive an unexpected value for
tt, or a value that changes as they're running.
Functional Options
Functional options is a pattern in which you declare an opaque Option type
that records information in some internal struct. You accept a variadic number
of these options and act upon the full information recorded by the options on
the internal struct.
Use this pattern for optional arguments in constructors and other public APIs
that you foresee needing to expand, especially if you already have three or
more arguments on those functions.
The cache and logger parameters must always be provided, even if the user
wants to use the default.
```go
db.Open(addr, db.DefaultCache, zap.NewNop())
db.Open(addr, db.DefaultCache, log)
db.Open(addr, false /* cache */, zap.NewNop())
db.Open(addr, false /* cache */, log)
```
Options are provided only if needed.
```go
db.Open(addr)
db.Open(addr, db.WithLogger(log))
db.Open(addr, db.WithCache(false))
db.Open(
addr,
db.WithCache(false),
db.WithLogger(log),
)
```
Our suggested way of implementing this pattern is with an Option interface
that holds an unexported method, recording options on an unexported options
struct.
Note that there's a method of implementing this pattern with closures but we
believe that the pattern above provides more flexibility for authors and is
easier to debug and test for users. In particular, it allows options to be
compared against each other in tests and mocks, versus closures where this is
impossible. Further, it lets options implement other interfaces, including
fmt.Stringer which allows for user-readable string representations of the
options.
More importantly than any "blessed" set of linters, lint consistently across a
codebase.
We recommend using the following linters at a minimum, because we feel that they
help to catch the most common issues and also establish a high bar for code
quality without being unnecessarily prescriptive:
We recommend golangci-lint as the go-to lint runner for Go code, largely due
to its performance in larger codebases and ability to configure and use many
canonical linters at once. This repo has an example .golangci.yml config file
with recommended linters and settings.
golangci-lint has various linters available for use. The above linters are
recommended as a base set, and we encourage teams to add any additional linters
that make sense for their projects.
Enhancement
Prefer strconv over fmt
When converting primitives to/from strings,
strconv
is faster thanfmt
.Unnecessary Else
If a variable is set in both branches of an if, it can be replaced with a single if.
Use go.uber.org/atomic
Atomic operations with the sync/atomic package operate on the raw types (
int32
,int64
, etc.) so it is easy to forget to use the atomic operation to read or modify the variables.go.uber.org/atomic adds type safety to these operations by hiding the underlying type. Additionally, it includes a convenient
atomic.Bool
type.============= Below is Uber's code style =============
Uber Go Style Guide
"time"
to handle timeinit()
init()
var
for Zero Value StructsIntroduction
Styles are the conventions that govern our code. The term style is a bit of a misnomer, since these conventions cover far more than just source file formatting—gofmt handles that for us.
The goal of this guide is to manage this complexity by describing in detail the Dos and Don'ts of writing Go code at Uber. These rules exist to keep the code base manageable while still allowing engineers to use Go language features productively.
This guide was originally created by Prashant Varanasi and Simon Newton as a way to bring some colleagues up to speed with using Go. Over the years it has been amended based on feedback from others.
This documents idiomatic conventions in Go code that we follow at Uber. A lot of these are general guidelines for Go, while others extend upon external resources:
We aim for the code samples to be accurate for the two most recent minor versions of Go releases.
All code should be error-free when run through
golint
andgo vet
. We recommend setting up your editor to:goimports
on savegolint
andgo vet
to check for errorsYou can find information in editor support for Go tools here: https://github.com/golang/go/wiki/IDEsAndTextEditorPlugins
Guidelines
Pointers to Interfaces
You almost never need a pointer to an interface. You should be passing interfaces as values—the underlying data can still be a pointer.
An interface is two fields:
If you want interface methods to modify the underlying data, you must use a pointer.
Verify Interface Compliance
Verify interface compliance at compile time where appropriate. This includes:
The statement
var _ http.Handler = (*Handler)(nil)
will fail to compile if*Handler
ever stops matching thehttp.Handler
interface.The right hand side of the assignment should be the zero value of the asserted type. This is
nil
for pointer types (like*Handler
), slices, and maps, and an empty struct for struct types.Receivers and Interfaces
Methods with value receivers can be called on pointers as well as values. Methods with pointer receivers can only be called on pointers or addressable values.
For example,
Similarly, an interface can be satisfied by a pointer, even if the method has a value receiver.
Effective Go has a good write up on Pointers vs. Values.
Zero-value Mutexes are Valid
The zero-value of
sync.Mutex
andsync.RWMutex
is valid, so you almost never need a pointer to a mutex.If you use a struct by pointer, then the mutex should be a non-pointer field on it. Do not embed the mutex on the struct, even if the struct is not exported.
Copy Slices and Maps at Boundaries
Slices and maps contain pointers to the underlying data so be wary of scenarios when they need to be copied.
Receiving Slices and Maps
Keep in mind that users can modify a map or slice you received as an argument if you store a reference to it.
Returning Slices and Maps
Similarly, be wary of user modifications to maps or slices exposing internal state.
Defer to Clean Up
Use defer to clean up resources such as files and locks.
Defer has an extremely small overhead and should be avoided only if you can prove that your function execution time is in the order of nanoseconds. The readability win of using defers is worth the miniscule cost of using them. This is especially true for larger methods that have more than simple memory accesses, where the other computations are more significant than the
defer
.Channel Size is One or None
Channels should usually have a size of one or be unbuffered. By default, channels are unbuffered and have a size of zero. Any other size must be subject to a high level of scrutiny. Consider how the size is determined, what prevents the channel from filling up under load and blocking writers, and what happens when this occurs.
Start Enums at One
The standard way of introducing enumerations in Go is to declare a custom type and a
const
group withiota
. Since variables have a 0 default value, you should usually start your enums on a non-zero value.There are cases where using the zero value makes sense, for example when the zero value case is the desirable default behavior.
Use
"time"
to handle timeTime is complicated. Incorrect assumptions often made about time include the following.
For example, 1 means that adding 24 hours to a time instant will not always yield a new calendar day.
Therefore, always use the
"time"
package when dealing with time because it helps deal with these incorrect assumptions in a safer, more accurate manner.Use
time.Time
for instants of timeUse
time.Time
when dealing with instants of time, and the methods ontime.Time
when comparing, adding, or subtracting time.Use
time.Duration
for periods of timeUse
time.Duration
when dealing with periods of time.Going back to the example of adding 24 hours to a time instant, the method we use to add time depends on intent. If we want the same time of the day, but on the next calendar day, we should use
Time.AddDate
. However, if we want an instant of time guaranteed to be 24 hours after the previous time, we should useTime.Add
.Use
time.Time
andtime.Duration
with external systemsUse
time.Duration
andtime.Time
in interactions with external systems when possible. For example:flag
supportstime.Duration
viatime.ParseDuration
encoding/json
supports encodingtime.Time
as an RFC 3339 string via itsUnmarshalJSON
methoddatabase/sql
supports convertingDATETIME
orTIMESTAMP
columns intotime.Time
and back if the underlying driver supports itgopkg.in/yaml.v2
supportstime.Time
as an RFC 3339 string, andtime.Duration
viatime.ParseDuration
.When it is not possible to use
time.Duration
in these interactions, useint
orfloat64
and include the unit in the name of the field.For example, since
encoding/json
does not supporttime.Duration
, the unit is included in the name of the field.When it is not possible to use
time.Time
in these interactions, unless an alternative is agreed upon, usestring
and format timestamps as defined in RFC 3339. This format is used by default byTime.UnmarshalText
and is available for use inTime.Format
andtime.Parse
viatime.RFC3339
.Although this tends to not be a problem in practice, keep in mind that the
"time"
package does not support parsing timestamps with leap seconds (8728), nor does it account for leap seconds in calculations (15190). If you compare two instants of time, the difference will not include the leap seconds that may have occurred between those two instants.Errors
Error Types
There are few options for declaring errors. Consider the following before picking the option best suited for your use case.
errors.Is
orerrors.As
functions by declaring a top-level error variable or a custom type.errors.New
, but for the latter we must usefmt.Errorf
or a custom error type.errors.New
fmt.Errorf
var
witherrors.New
error
typeFor example, use
errors.New
for an error with a static string. Export this error as a variable to support matching it witherrors.Is
if the caller needs to match and handle this error.For an error with a dynamic string, use
fmt.Errorf
if the caller does not need to match it, and a customerror
if the caller does need to match it.Note that if you export error variables or types from a package, they will become part of the public API of the package.
Error Wrapping
There are three main options for propagating errors if a call fails:
fmt.Errorf
and the%w
verbfmt.Errorf
and the%v
verbReturn the original error as-is if there is no additional context to add. This maintains the original error type and message. This is well suited for cases when the underlying error message has sufficient information to track down where it came from.
Otherwise, add context to the error message where possible so that instead of a vague error such as "connection refused", you get more useful errors such as "call service foo: connection refused".
Use
fmt.Errorf
to add context to your errors, picking between the%w
or%v
verbs based on whether the caller should be able to match and extract the underlying cause.%w
if the caller should have access to the underlying error. This is a good default for most wrapped errors, but be aware that callers may begin to rely on this behavior. So for cases where the wrapped error is a knownvar
or type, document and test it as part of your function's contract.%v
to obfuscate the underlying error. Callers will be unable to match it, but you can switch to%w
in the future if needed.When adding context to returned errors, keep the context succinct by avoiding phrases like "failed to", which state the obvious and pile up as the error percolates up through the stack:
However once the error is sent to another system, it should be clear the message is an error (e.g. an
err
tag or "Failed" prefix in logs).See also Don't just check errors, handle them gracefully.
Error Naming
For error values stored as global variables, use the prefix
Err
orerr
depending on whether they're exported. This guidance supersedes the Prefix Unexported Globals with _.For custom error types, use the suffix
Error
instead.Handle Errors Once
When a caller receives an error from a callee, it can handle it in a variety of different ways depending on what it knows about the error.
These include, but not are limited to:
errors.Is
orerrors.As
and handling the branches differentlyRegardless of how the caller handles the error, it should typically handle each error only once. The caller should not, for example, log the error and then return it, because its callers may handle the error as well.
For example, consider the following cases:
Handle Type Assertion Failures
The single return value form of a type assertion will panic on an incorrect type. Therefore, always use the "comma ok" idiom.
Don't Panic
Code running in production must avoid panics. Panics are a major source of cascading failures. If an error occurs, the function must return an error and allow the caller to decide how to handle it.
Panic/recover is not an error handling strategy. A program must panic only when something irrecoverable happens such as a nil dereference. An exception to this is program initialization: bad things at program startup that should abort the program may cause panic.
Even in tests, prefer
t.Fatal
ort.FailNow
over panics to ensure that the test is marked as failed.Use go.uber.org/atomic
Atomic operations with the sync/atomic package operate on the raw types (
int32
,int64
, etc.) so it is easy to forget to use the atomic operation to read or modify the variables.go.uber.org/atomic adds type safety to these operations by hiding the underlying type. Additionally, it includes a convenient
atomic.Bool
type.Avoid Mutable Globals
Avoid mutating global variables, instead opting for dependency injection. This applies to function pointers as well as other kinds of values.
Avoid Embedding Types in Public Structs
These embedded types leak implementation details, inhibit type evolution, and obscure documentation.
Assuming you have implemented a variety of list types using a shared
AbstractList
, avoid embedding theAbstractList
in your concrete list implementations. Instead, hand-write only the methods to your concrete list that will delegate to the abstract list.Go allows type embedding as a compromise between inheritance and composition. The outer type gets implicit copies of the embedded type's methods. These methods, by default, delegate to the same method of the embedded instance.
The struct also gains a field by the same name as the type. So, if the embedded type is public, the field is public. To maintain backward compatibility, every future version of the outer type must keep the embedded type.
An embedded type is rarely necessary. It is a convenience that helps you avoid writing tedious delegate methods.
Even embedding a compatible AbstractList interface, instead of the struct, would offer the developer more flexibility to change in the future, but still leak the detail that the concrete lists use an abstract implementation.
Either with an embedded struct or an embedded interface, the embedded type places limits on the evolution of the type.
Although writing these delegate methods is tedious, the additional effort hides an implementation detail, leaves more opportunities for change, and also eliminates indirection for discovering the full List interface in documentation.
Avoid Using Built-In Names
The Go language specification outlines several built-in, predeclared identifiers that should not be used as names within Go programs.
Depending on context, reusing these identifiers as names will either shadow the original within the current lexical scope (and any nested scopes) or make affected code confusing. In the best case, the compiler will complain; in the worst case, such code may introduce latent, hard-to-grep bugs.
Note that the compiler will not generate errors when using predeclared identifiers, but tools such as
go vet
should correctly point out these and other cases of shadowing.Avoid
init()
Avoid
init()
where possible. Wheninit()
is unavoidable or desirable, code should attempt to:init()
functions. Whileinit()
ordering is well-known, code can change, and thus relationships betweeninit()
functions can make code brittle and error-prone.Code that cannot satisfy these requirements likely belongs as a helper to be called as part of
main()
(or elsewhere in a program's lifecycle), or be written as part ofmain()
itself. In particular, libraries that are intended to be used by other programs should take special care to be completely deterministic and not perform "init magic".Considering the above, some situations in which
init()
may be preferable or necessary might include:database/sql
dialects, encoding type registries, etc.Exit in Main
Go programs use
os.Exit
orlog.Fatal*
to exit immediately. (Panicking is not a good way to exit programs, please don't panic.)Call one of
os.Exit
orlog.Fatal*
only inmain()
. All other functions should return errors to signal failure.Rationale: Programs with multiple functions that exit present a few issues:
go test
.defer
statements. This adds risk of skipping important cleanup tasks.Exit Once
If possible, prefer to call
os.Exit
orlog.Fatal
at most once in yourmain()
. If there are multiple error scenarios that halt program execution, put that logic under a separate function and return errors from it.This has the effect of shortening your
main()
function and putting all key business logic into a separate, testable function.Use field tags in marshaled structs
Any struct field that is marshaled into JSON, YAML, or other formats that support tag-based field naming should be annotated with the relevant tag.
Rationale: The serialized form of the structure is a contract between different systems. Changes to the structure of the serialized form--including field names--break this contract. Specifying field names inside tags makes the contract explicit, and it guards against accidentally breaking the contract by refactoring or renaming fields.
Don't fire-and-forget goroutines
Goroutines are lightweight, but they're not free: at minimum, they cost memory for their stack and CPU to be scheduled. While these costs are small for typical uses of goroutines, they can cause significant performance issues when spawned in large numbers without controlled lifetimes. Goroutines with unmanaged lifetimes can also cause other issues like preventing unused objects from being garbage collected and holding onto resources that are otherwise no longer used.
Therefore, do not leak goroutines in production code. Use go.uber.org/goleak to test for goroutine leaks inside packages that may spawn goroutines.
In general, every goroutine:
In both cases, there must be a way code to block and wait for the goroutine to finish.
For example:
Wait for goroutines to exit
Given a goroutine spawned by the system, there must be a way to wait for the goroutine to exit. There are two popular ways to do this:
Use a
sync.WaitGroup
. Do this if there are multiple goroutines that you want to wait forAdd another
chan struct{}
that the goroutine closes when it's done. Do this if there's only one goroutine.No goroutines in
init()
init()
functions should not spawn goroutines. See also Avoid init().If a package has need of a background goroutine, it must expose an object that is responsible for managing a goroutine's lifetime. The object must provide a method (
Close
,Stop
,Shutdown
, etc) that signals the background goroutine to stop, and waits for it to exit.Performance
Performance-specific guidelines apply only to the hot path.
Prefer strconv over fmt
When converting primitives to/from strings,
strconv
is faster thanfmt
.Avoid string-to-byte conversion
Do not create byte slices from a fixed string repeatedly. Instead, perform the conversion once and capture the result.
Prefer Specifying Container Capacity
Specify container capacity where possible in order to allocate memory for the container up front. This minimizes subsequent allocations (by copying and resizing of the container) as elements are added.
Specifying Map Capacity Hints
Where possible, provide capacity hints when initializing maps with
make()
.Providing a capacity hint to
make()
tries to right-size the map at initialization time, which reduces the need for growing the map and allocations as elements are added to the map.Note that, unlike slices, map capacity hints do not guarantee complete, preemptive allocation, but are used to approximate the number of hashmap buckets required. Consequently, allocations may still occur when adding elements to the map, even up to the specified capacity.
Specifying Slice Capacity
Where possible, provide capacity hints when initializing slices with
make()
, particularly when appending.Unlike maps, slice capacity is not a hint: the compiler will allocate enough memory for the capacity of the slice as provided to
make()
, which means that subsequentappend()
operations will incur zero allocations (until the length of the slice matches the capacity, after which any appends will require a resize to hold additional elements).Style
Avoid overly long lines
Avoid lines of code that require readers to scroll horizontally or turn their heads too much.
We recommend a soft line length limit of 99 characters. Authors should aim to wrap lines before hitting this limit, but it is not a hard limit. Code is allowed to exceed this limit.
Be Consistent
Some of the guidelines outlined in this document can be evaluated objectively; others are situational, contextual, or subjective.
Above all else, be consistent.
Consistent code is easier to maintain, is easier to rationalize, requires less cognitive overhead, and is easier to migrate or update as new conventions emerge or classes of bugs are fixed.
Conversely, having multiple disparate or conflicting styles within a single codebase causes maintenance overhead, uncertainty, and cognitive dissonance, all of which can directly contribute to lower velocity, painful code reviews, and bugs.
When applying these guidelines to a codebase, it is recommended that changes are made at a package (or larger) level: application at a sub-package level violates the above concern by introducing multiple styles into the same code.
Group Similar Declarations
Go supports grouping similar declarations.
This also applies to constants, variables, and type declarations.
Only group related declarations. Do not group declarations that are unrelated.
Groups are not limited in where they can be used. For example, you can use them inside of functions.
Exception: Variable declarations, particularly inside functions, should be grouped together if declared adjacent to other variables. Do this for variables declared together even if they are unrelated.
Import Group Ordering
There should be two import groups:
This is the grouping applied by goimports by default.
Package Names
When naming packages, choose a name that is:
net/url
, notnet/urls
.See also Package Names and Style guideline for Go packages.
Function Names
We follow the Go community's convention of using MixedCaps for function names. An exception is made for test functions, which may contain underscores for the purpose of grouping related test cases, e.g.,
TestMyFunction_WhatIsBeingTested
.Import Aliasing
Import aliasing must be used if the package name does not match the last element of the import path.
In all other scenarios, import aliases should be avoided unless there is a direct conflict between imports.
Function Grouping and Ordering
Therefore, exported functions should appear first in a file, after
struct
,const
,var
definitions.A
newXYZ()
/NewXYZ()
may appear after the type is defined, but before the rest of the methods on the receiver.Since functions are grouped by receiver, plain utility functions should appear towards the end of the file.
Reduce Nesting
Code should reduce nesting where possible by handling error cases/special conditions first and returning early or continuing the loop. Reduce the amount of code that is nested multiple levels.
Unnecessary Else
If a variable is set in both branches of an if, it can be replaced with a single if.
Top-level Variable Declarations
At the top level, use the standard
var
keyword. Do not specify the type, unless it is not the same type as the expression.Specify the type if the type of the expression does not match the desired type exactly.
Prefix Unexported Globals with _
Prefix unexported top-level
var
s andconst
s with_
to make it clear when they are used that they are global symbols.Rationale: Top-level variables and constants have a package scope. Using a generic name makes it easy to accidentally use the wrong value in a different file.
Exception: Unexported error values may use the prefix
err
without the underscore. See Error Naming.Embedding in Structs
Embedded types should be at the top of the field list of a struct, and there must be an empty line separating embedded fields from regular fields.
Embedding should provide tangible benefit, like adding or augmenting functionality in a semantically-appropriate way. It should do this with zero adverse user-facing effects (see also: Avoid Embedding Types in Public Structs).
Exception: Mutexes should not be embedded, even on unexported types. See also: Zero-value Mutexes are Valid.
Embedding should not:
Simply put, embed consciously and intentionally. A good litmus test is, "would all of these exported inner methods/fields be added directly to the outer type"; if the answer is "some" or "no", don't embed the inner type - use a field instead.
Local Variable Declarations
Short variable declarations (
:=
) should be used if a variable is being set to some value explicitly.However, there are cases where the default value is clearer when the
var
keyword is used. Declaring Empty Slices, for example.nil is a valid slice
nil
is a valid slice of length 0. This means that,You should not return a slice of length zero explicitly. Return
nil
instead.To check if a slice is empty, always use
len(s) == 0
. Do not check fornil
.The zero value (a slice declared with
var
) is usable immediately withoutmake()
.Remember that, while it is a valid slice, a nil slice is not equivalent to an allocated slice of length 0 - one is nil and the other is not - and the two may be treated differently in different situations (such as serialization).
Reduce Scope of Variables
Where possible, reduce scope of variables. Do not reduce the scope if it conflicts with Reduce Nesting.
If you need a result of a function call outside of the if, then you should not try to reduce the scope.
Avoid Naked Parameters
Naked parameters in function calls can hurt readability. Add C-style comments (
/* ... */
) for parameter names when their meaning is not obvious.Better yet, replace naked
bool
types with custom types for more readable and type-safe code. This allows more than just two states (true/false) for that parameter in the future.Use Raw String Literals to Avoid Escaping
Go supports raw string literals, which can span multiple lines and include quotes. Use these to avoid hand-escaped strings which are much harder to read.
Initializing Structs
Use Field Names to Initialize Structs
You should almost always specify field names when initializing structs. This is now enforced by
go vet
.Exception: Field names may be omitted in test tables when there are 3 or fewer fields.
Omit Zero Value Fields in Structs
When initializing structs with field names, omit fields that have zero values unless they provide meaningful context. Otherwise, let Go set these to zero values automatically.
This helps reduce noise for readers by omitting values that are default in that context. Only meaningful values are specified.
Include zero values where field names provide meaningful context. For example, test cases in Test Tables can benefit from names of fields even when they are zero-valued.
Use
var
for Zero Value StructsWhen all the fields of a struct are omitted in a declaration, use the
var
form to declare the struct.This differentiates zero valued structs from those with non-zero fields similar to the distinction created for map initialization, and matches how we prefer to declare empty slices.
Initializing Struct References
Use
&T{}
instead ofnew(T)
when initializing struct references so that it is consistent with the struct initialization.Initializing Maps
Prefer
make(..)
for empty maps, and maps populated programmatically. This makes map initialization visually distinct from declaration, and it makes it easy to add size hints later if available.Where possible, provide capacity hints when initializing maps with
make()
. See Specifying Map Capacity Hints for more information.On the other hand, if the map holds a fixed list of elements, use map literals to initialize the map.
The basic rule of thumb is to use map literals when adding a fixed set of elements at initialization time, otherwise use
make
(and specify a size hint if available).Format Strings outside Printf
If you declare format strings for
Printf
-style functions outside a string literal, make themconst
values.This helps
go vet
perform static analysis of the format string.Naming Printf-style Functions
When you declare a
Printf
-style function, make sure thatgo vet
can detect it and check the format string.This means that you should use predefined
Printf
-style function names if possible.go vet
will check these by default. See Printf family for more information.If using the predefined names is not an option, end the name you choose with f:
Wrapf
, notWrap
.go vet
can be asked to check specificPrintf
-style names but they must end with f.See also go vet: Printf family check.
Patterns
Test Tables
Table-driven tests with subtests can be a helpful pattern for writing tests to avoid duplicating code when the core test logic is repetitive.
If a system under test needs to be tested against multiple conditions where certain parts of the the inputs and outputs change, a table-driven test should be used to reduce redundancy and improve readability.
Test tables make it easier to add context to error messages, reduce duplicate logic, and add new test cases.
We follow the convention that the slice of structs is referred to as
tests
and each test casett
. Further, we encourage explicating the input and output values for each test case withgive
andwant
prefixes.Avoid Unnecessary Complexity in Table Tests
Table tests can be difficult to read and maintain if the subtests contain conditional assertions or other branching logic. Table tests should NOT be used whenever there needs to be complex or conditional logic inside subtests (i.e. complex logic inside the
for
loop).Large, complex table tests harm readability and maintainability because test readers may have difficulty debugging test failures that occur.
Table tests like this should be split into either multiple test tables or multiple individual
Test...
functions.Some ideals to aim for are:
In this context, "test depth" means "within a given test, the number of successive assertions that require previous assertions to hold" (similar to cyclomatic complexity). Having "shallower" tests means that there are fewer relationships between assertions and, more importantly, that those assertions are less likely to be conditional by default.
Concretely, table tests can become confusing and difficult to read if they use multiple branching pathways (e.g.
shouldError
,expectCall
, etc.), use manyif
statements for specific mock expectations (e.g.shouldCallFoo
), or place functions inside the table (e.g.setupMocks func(*FooMock)
).However, when testing behavior that only changes based on changed input, it may be preferable to group similar cases together in a table test to better illustrate how behavior changes across all inputs, rather than splitting otherwise comparable units into separate tests and making them harder to compare and contrast.
If the test body is short and straightforward, it's acceptable to have a single branching pathway for success versus failure cases with a table field like
shouldErr
to specify error expectations.This complexity makes it more difficult to change, understand, and prove the correctness of the test.
While there are no strict guidelines, readability and maintainability should always be top-of-mind when deciding between Table Tests versus separate tests for multiple inputs/outputs to a system.
Parallel Tests
Parallel tests, like some specialized loops (for example, those that spawn goroutines or capture references as part of the loop body), must take care to explicitly assign loop variables within the loop's scope to ensure that they hold the expected values.
In the example above, we must declare a
tt
variable scoped to the loop iteration because of the use oft.Parallel()
below. If we do not do that, most or all tests will receive an unexpected value fortt
, or a value that changes as they're running.Functional Options
Functional options is a pattern in which you declare an opaque
Option
type that records information in some internal struct. You accept a variadic number of these options and act upon the full information recorded by the options on the internal struct.Use this pattern for optional arguments in constructors and other public APIs that you foresee needing to expand, especially if you already have three or more arguments on those functions.
Our suggested way of implementing this pattern is with an
Option
interface that holds an unexported method, recording options on an unexportedoptions
struct.Note that there's a method of implementing this pattern with closures but we believe that the pattern above provides more flexibility for authors and is easier to debug and test for users. In particular, it allows options to be compared against each other in tests and mocks, versus closures where this is impossible. Further, it lets options implement other interfaces, including
fmt.Stringer
which allows for user-readable string representations of the options.See also,
Linting
More importantly than any "blessed" set of linters, lint consistently across a codebase.
We recommend using the following linters at a minimum, because we feel that they help to catch the most common issues and also establish a high bar for code quality without being unnecessarily prescriptive:
Lint Runners
We recommend golangci-lint as the go-to lint runner for Go code, largely due to its performance in larger codebases and ability to configure and use many canonical linters at once. This repo has an example .golangci.yml config file with recommended linters and settings.
golangci-lint has various linters available for use. The above linters are recommended as a base set, and we encourage teams to add any additional linters that make sense for their projects.