IBM Security Verify

 View Only
  • 1.  IBM Application Gateway (IAG) and gRPC support

    Posted Fri April 01, 2022 10:09 AM

    Hi, this might be a bit far off, but I was wondering if there are any plans to support the gRPC protocol for IAG? (I assume it is not supported now, could not find any documentation on this?).

    Thanks!



    ------------------------------
    S Kjemp
    ------------------------------


  • 2.  RE: IBM Application Gateway (IAG) and gRPC support

    Posted Sun April 03, 2022 04:12 PM

    There are no plans at the moment to specifically support gRPC.  Having said this, IAG does support HTTP/2, and gRPC is apparently constructed on HTTP/2.  So, providing gRPC has been developed as a standard HTTP/2 application it should already work.

     

    Thanks.

     

     

    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access

    IBM Master Inventor

     

     






  • 3.  RE: IBM Application Gateway (IAG) and gRPC support

    Posted Mon April 25, 2022 08:23 AM
    Thanks for the answer. I tested a bit with using IAG as reverse proxy for GRPC (enabling HTTP/2 for client and resource server). I have two issues.

    1) When IAG is started and tries to do health checks with the resource server (GRPC server) it receives the following:

    [0] date:Tue, 19 Apr 2022 07:53:00 GMT

    [1] grpc-message:Content-Type is missing from the request

    [2] grpc-status:13

    [3] content-type:text/plain; charset=utf-8

    [4] :status:415:


    So it seems that Content-Type is not sent with HTTP/2 requests?

    2) When sending a GRPC request from a client. The following is shown in IAG log:

    19/Apr/2022:10:37:45 +0000 Request from client IP: 127.0.0.1, User: unauthenticated, POST HTTPS://test-grpc-mock.test-namespace.svc.cluster.local:50051/helloworld.Greeter/SayHello HTTP/2, Response: 200 from test-grpc-mock.test-namespace.svc.cluster.local

    However, the following is logged in GRPC server:

    Apr 19, 2022 10:37:45 AM io.grpc.netty.shaded.io.grpc.netty.NettyServerHandler onHeadersRead 1 WARNING: Expected header TE: trailers, but null is received. This means some intermediate proxy may not support trailers

    So maybe it has not been fully implemented?



    ------------------------------
    S Kjemp
    ------------------------------



  • 4.  RE: IBM Application Gateway (IAG) and gRPC support

    Posted Wed September 28, 2022 06:13 AM
    Hello @Scott Exton,

    We really need to make this work. have you come across uses cases like this?
    Now a days bany backend resources are migrating from old REST to gRPC and they want to know if IAG can be used or not.

    Regards,
    Piyush​

    ------------------------------
    Piyush Agrawal
    https://www.linkedin.com/in/piyush-norway/
    Gjensidige Norway
    ------------------------------



  • 5.  RE: IBM Application Gateway (IAG) and gRPC support

    Posted Wed September 28, 2022 06:22 AM

    Piyush,

     

    Unfortunately it sounds like IAG won't currently work with gRPC without additional changes to the software.  If this is important to you I would suggest that you raise an enhancement request against the product so that this work can be prioritised against other requirements.

     

    Thanks.

     

     

     

    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access

    IBM Master Inventor

    cid4122760825*<a href=image002.png@01D85F83.85516C50">