Netty client channel with TLS over proxy does not establish a connection anymore in 1.22.0 and 1.23.0
See original GitHub issueA netty grpc channel never establishes a TLS connection to a valid grpc server when using a HTTP proxy. The problem is reproducible in versions 1.23.0 and 1.22.0 but not in 1.21.0 and earlier.
The proxy is configured on the JVM with -Dhttps.proxyHost
/-Dhttps.proxyPort
.
The channel does send http CONNECT
with the correct destination to the configured proxy but after the proxy responds with HTTP/1.1 200
, instead of starting with the TLS connection the channel simply hangs and does not send any further traffic to the proxy.
The issue is caused by changes in io.grpc.netty.ProtocolNegotiators
. Replacing this file in 1.23.0 with the one from 1.21.0 (with some minor compile fixes) restores the functionality.
Issue Analytics
- State:
- Created 4 years ago
- Comments:6 (4 by maintainers)
Top Results From Across the Web
Proxy rules doesn't get applied while connecting through Netty
It is observed that some rules applied thorough a proxy is not supported by Netty because of the HTTP CONNECT request is sent...
Read more >Full Release Notes Index - Humio Documentation
If you are running Humio self-hosted and authenticate using Authenticating with OpenID Connect and are using an HTTP Proxy, if Humio should not...
Read more >Security Bulletin 07 Dec 2022
CVE Number Base Score Reference
CVE‑2019‑7226 8.8 https://nvd.nist.gov/vuln/detail/CVE‑2019‑7226
CVE‑2020‑27386 8.8 https://nvd.nist.gov/vuln/detail/CVE‑2020‑27386
CVE‑2022‑3861 8.8 https://nvd.nist.gov/vuln/detail/CVE‑2022‑3861
Read more >Vulnerability Summary for the Week of January 27, 2020 | CISA
Primary Vendor ‑‑ Product Description Published CVSS Score
apache ‑‑ spamassassin 2020‑01‑30 9.3
apache ‑‑ spamassassin 2020‑01‑30 9.3
asus ‑‑ rt‑n56u_devices ASUS RT‑N56U devices allow CSRF....
Read more >What's New for SAP Cloud Platform
2019-20 What's New (Archive). This section provides an overview of the new and changed features for 2019 and 2020 introduced in SAP Cloud...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
thanks @chris-blacker, the proxy handler during
ProtocolNegotiation
is not converted to the aka new style. The new protocol negotiation started before the proxy is connected because ofProtocolNegotiationEvent
is passed to the later pipeline before the proxy is connected as you mentioned. I created PR (#6159) that converts the ProxyHandler to follow new style.awesome thanks for the verification, @chris-blacker