You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2020/03/05 12:21:05 UTC
[GitHub] [incubator-apisix] wanzhenhan opened a new issue #1209: request
help:
wanzhenhan opened a new issue #1209: request help:
URL: https://github.com/apache/incubator-apisix/issues/1209
### Issue description
APISiX can't proxy grpc
when grpc client transport first package like "PRI * HTTP/2.0", apisix print logs "client sent invalid request while reading client request line, client: 10.82.4.71, server: , request: "PRI * HTTP/2.0",and reply 400 bad request to client
### Environment
CENTOS 7
* apisix version (cmd: `apisix version`):
* OS:1.0
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [incubator-apisix] moonming commented on issue #1209: request help:
grpc proxy is not running
Posted by GitBox <gi...@apache.org>.
moonming commented on issue #1209: request help: grpc proxy is not running
URL: https://github.com/apache/incubator-apisix/issues/1209#issuecomment-596177158
> apisix只支持 https端口，目前不支持 http端口，因为 其http的端口无法支持 HTTP2
> 但是：nginx早已支持HTTP2，我们只需要手动更改nginx配置，将监听的那个http端口加上 HTTP2的配置即可 (note:不要执行 make init)
Apache APISIX enabled `http2` default: https://github.com/apache/incubator-apisix/blob/master/conf/config.yaml#L77
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [incubator-apisix] nic-chen edited a comment on issue #1209:
request help: grpc proxy is not running
Posted by GitBox <gi...@apache.org>.
nic-chen edited a comment on issue #1209: request help: grpc proxy is not running
URL: https://github.com/apache/incubator-apisix/issues/1209#issuecomment-595614275
我们默认只支持9443端口代理 gRPC 。
使用9443端口或者其他ssl端口时，请确保客户端请求有带tsl相关参数。
这里是一个最简单的，跳过证书验证的 gRPC-go 示例：
We only support port 9443 proxy gRPC by default.
When using port 9443 or other ssl ports, please ensure that the client request has tsl parameters.
Here is the simplest gRPC-go example that skips certificate verification:
`
var tlsConf tls.Config
tlsConf.InsecureSkipVerify = true
creds := credentials.NewTLS(&tlsConf)
creds = &errSignalingCreds{
TransportCredentials: creds,
}
conn, err := grpc.Dial(address, grpc.WithBlock(), grpc.WithTransportCredentials(creds))
`
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [incubator-apisix] nic-chen edited a comment on issue #1209:
request help: grpc proxy is not running
Posted by GitBox <gi...@apache.org>.
nic-chen edited a comment on issue #1209: request help: grpc proxy is not running
URL: https://github.com/apache/incubator-apisix/issues/1209#issuecomment-595614275
We only support port 9443 proxy gRPC by default.
When using port 9443 or other ssl ports, please ensure that the client request has tsl parameters.
Here is the simplest gRPC-go example that skips certificate verification:
我们默认只支持9443端口代理 gRPC 。
使用9443端口或者其他ssl端口时，请确保客户端请求有带tsl相关参数。
这里是一个最简单的，跳过证书验证的 gRPC-go 示例：
`
var tlsConf tls.Config
tlsConf.InsecureSkipVerify = true
creds := credentials.NewTLS(&tlsConf)
creds = &errSignalingCreds{
TransportCredentials: creds,
}
conn, err := grpc.Dial(address, grpc.WithBlock(), grpc.WithTransportCredentials(creds))
`
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [incubator-apisix] nic-chen edited a comment on issue #1209:
request help: grpc proxy is not running
Posted by GitBox <gi...@apache.org>.
nic-chen edited a comment on issue #1209: request help: grpc proxy is not running
URL: https://github.com/apache/incubator-apisix/issues/1209#issuecomment-595614275
我们默认只支持9443端口代理 gRPC 。
使用9443端口或者其他ssl端口时，请确保客户端请求有带tsl相关参数。
这里是一个最简单的，跳过证书验证的 gRPC-go 示例：
We only support port 9443 proxy gRPC by default.
When using port 9443 or other ssl ports, please ensure that the client request has tsl parameters.
Here is the simplest gRPC-go example that skips certificate verification:
`var tlsConf tls.Config
tlsConf.InsecureSkipVerify = true
creds := credentials.NewTLS(&tlsConf)
creds = &errSignalingCreds{
TransportCredentials: creds,
}
conn, err := grpc.Dial(address, grpc.WithBlock(), grpc.WithTransportCredentials(creds))`
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [incubator-apisix] nic-chen edited a comment on issue #1209:
request help: grpc proxy is not running
Posted by GitBox <gi...@apache.org>.
nic-chen edited a comment on issue #1209: request help: grpc proxy is not running
URL: https://github.com/apache/incubator-apisix/issues/1209#issuecomment-595614275
我们默认只支持9443端口代理 gRPC 。
使用9443端口或者其他ssl端口时，请确保客户端请求有带tsl相关参数。
这里是一个最简单的，跳过证书验证的 gRPC-go 示例：
We only support port 9443 proxy gRPC by default.
When using port 9443 or other ssl ports, please ensure that the client request has tsl parameters.
Here is the simplest gRPC-go example that skips certificate verification:
`
var tlsConf tls.Config
tlsConf.InsecureSkipVerify = true
creds := credentials.NewTLS(&tlsConf)
creds = &errSignalingCreds{
TransportCredentials: creds,
}
conn, err := grpc.Dial(address, grpc.WithBlock(), grpc.WithTransportCredentials(creds))
`
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [incubator-apisix] nic-chen commented on issue #1209: request help:
grpc proxy is not running
Posted by GitBox <gi...@apache.org>.
nic-chen commented on issue #1209: request help: grpc proxy is not running
URL: https://github.com/apache/incubator-apisix/issues/1209#issuecomment-595614275
我们默认只支持9443端口代理 gRPC 。
使用9443端口或者其他ssl端口时，请确保客户端请求有带tsl相关参数。
这里是一个最简单的，跳过证书验证的 gRPC-go 示例：
We only support port 9443 proxy gRPC by default.
When using port 9443 or other ssl ports, please ensure that the client request has tsl parameters.
Here is the simplest gRPC-go example that skips certificate verification:
`
var tlsConf tls.Config
tlsConf.InsecureSkipVerify = true
creds := credentials.NewTLS(&tlsConf)
creds = &errSignalingCreds{
TransportCredentials: creds,
}
conn, err := grpc.Dial(address, grpc.WithBlock(), grpc.WithTransportCredentials(creds))
`
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [incubator-apisix] wanzhenhan closed issue #1209: request help:
grpc proxy is not running
Posted by GitBox <gi...@apache.org>.
wanzhenhan closed issue #1209: request help: grpc proxy is not running
URL: https://github.com/apache/incubator-apisix/issues/1209
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [incubator-apisix] wanzhenhan commented on issue #1209: request
help: grpc proxy is not running
Posted by GitBox <gi...@apache.org>.
wanzhenhan commented on issue #1209: request help: grpc proxy is not running
URL: https://github.com/apache/incubator-apisix/issues/1209#issuecomment-596070176
apisix只支持 https端口，目前不支持 http端口，因为 其http的端口无法支持 HTTP2
但是：nginx早已支持HTTP2，我们只需要手动更改nginx配置，将监听的那个http端口加上 HTTP2的配置即可 (note:不要执行 make init)
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [incubator-apisix] nic-chen edited a comment on issue #1209:
request help: grpc proxy is not running
Posted by GitBox <gi...@apache.org>.
nic-chen edited a comment on issue #1209: request help: grpc proxy is not running
URL: https://github.com/apache/incubator-apisix/issues/1209#issuecomment-595614275
我们默认只支持9443端口代理 gRPC 。
使用9443端口或者其他ssl端口时，请确保客户端请求有带tsl相关参数。
这里是一个最简单的，跳过证书验证的 gRPC-go 示例：
We only support port 9443 proxy gRPC by default.
When using port 9443 or other ssl ports, please ensure that the client request has tsl parameters.
Here is the simplest gRPC-go example that skips certificate verification:
`
var tlsConf tls.Config
tlsConf.InsecureSkipVerify = true
creds := credentials.NewTLS(&tlsConf)
creds = &errSignalingCreds{
TransportCredentials: creds,
}
conn, err := grpc.Dial(address, grpc.WithBlock(), grpc.WithTransportCredentials(creds))
`
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
[GitHub] [incubator-apisix] nic-chen edited a comment on issue #1209:
request help: grpc proxy is not running
Posted by GitBox <gi...@apache.org>.
nic-chen edited a comment on issue #1209: request help: grpc proxy is not running
URL: https://github.com/apache/incubator-apisix/issues/1209#issuecomment-595614275
我们默认只支持9443端口代理 gRPC 。
使用9443端口或者其他ssl端口时，请确保客户端请求有带tsl相关参数。
这里是一个最简单的，跳过证书验证的 gRPC-go 示例：
We only support port 9443 proxy gRPC by default.
When using port 9443 or other ssl ports, please ensure that the client request has tsl parameters.
Here is the simplest gRPC-go example that skips certificate verification:
`
var tlsConf tls.Config
tlsConf.InsecureSkipVerify = true
creds := credentials.NewTLS(&tlsConf)
creds = &errSignalingCreds{
TransportCredentials: creds,
}
conn, err := grpc.Dial(address, grpc.WithBlock(), grpc.WithTransportCredentials(creds))
`
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services