IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  IBM Application Gateway (IAG) and gRPC support

    Posted Fri April 01, 2022 10:09 AM

    Hi, this might be a bit far off, but I was wondering if there are any plans to support the gRPC protocol for IAG? (I assume it is not supported now, could not find any documentation on this?).

    Thanks!



    ------------------------------
    S Kjemp
    ------------------------------


  • 2.  RE: IBM Application Gateway (IAG) and gRPC support

    Posted Sun April 03, 2022 04:12 PM

    There are no plans at the moment to specifically support gRPC.  Having said this, IAG does support HTTP/2, and gRPC is apparently constructed on HTTP/2.  So, providing gRPC has been developed as a standard HTTP/2 application it should already work.

     

    Thanks.

     

     

    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access
    IBM Master Inventor

     

     




    Original Message


  • 3.  RE: IBM Application Gateway (IAG) and gRPC support

    Posted Mon April 25, 2022 08:23 AM
    Thanks for the answer. I tested a bit with using IAG as reverse proxy for GRPC (enabling HTTP/2 for client and resource server). I have two issues.

    1) When IAG is started and tries to do health checks with the resource server (GRPC server) it receives the following:

    [0] date:Tue, 19 Apr 2022 07:53:00 GMT

    [1] grpc-message:Content-Type is missing from the request

    [2] grpc-status:13

    [3] content-type:text/plain; charset=utf-8

    [4] :status:415:


    So it seems that Content-Type is not sent with HTTP/2 requests?

    2) When sending a GRPC request from a client. The following is shown in IAG log:

    19/Apr/2022:10:37:45 +0000 Request from client IP: 127.0.0.1, User: unauthenticated, POST HTTPS://test-grpc-mock.test-namespace.svc.cluster.local:50051/helloworld.Greeter/SayHello HTTP/2, Response: 200 from test-grpc-mock.test-namespace.svc.cluster.local

    However, the following is logged in GRPC server:

    Apr 19, 2022 10:37:45 AM io.grpc.netty.shaded.io.grpc.netty.NettyServerHandler onHeadersRead 1 WARNING: Expected header TE: trailers, but null is received. This means some intermediate proxy may not support trailers

    So maybe it has not been fully implemented?



    ------------------------------
    S Kjemp
    ------------------------------

    Original Message


  • 4.  RE: IBM Application Gateway (IAG) and gRPC support

    Posted Wed September 28, 2022 06:13 AM
    Hello @Scott Exton,

    We really need to make this work. have you come across uses cases like this?
    Now a days bany backend resources are migrating from old REST to gRPC and they want to know if IAG can be used or not.

    Regards,
    Piyush​

    ------------------------------
    Piyush Agrawal
    https://www.linkedin.com/in/piyush-norway/
    Gjensidige Norway
    ------------------------------

    Original Message


  • 5.  RE: IBM Application Gateway (IAG) and gRPC support

    Posted Wed September 28, 2022 06:22 AM

    Piyush,

     

    Unfortunately it sounds like IAG won't currently work with gRPC without additional changes to the software.  If this is important to you I would suggest that you raise an enhancement request against the product so that this work can be prioritised against other requirements.

     

    Thanks.

     

     

     

    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access
    IBM Master Inventor

    cid4122760825*<a href=image002.png@01D85F83.85516C50">

     

     




    Original Message


Related Content