question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Netty client channel with TLS over proxy does not establish a connection anymore in 1.22.0 and 1.23.0

See original GitHub issue

A netty grpc channel never establishes a TLS connection to a valid grpc server when using a HTTP proxy. The problem is reproducible in versions 1.23.0 and 1.22.0 but not in 1.21.0 and earlier.

The proxy is configured on the JVM with -Dhttps.proxyHost/-Dhttps.proxyPort. The channel does send http CONNECT with the correct destination to the configured proxy but after the proxy responds with HTTP/1.1 200, instead of starting with the TLS connection the channel simply hangs and does not send any further traffic to the proxy. The issue is caused by changes in io.grpc.netty.ProtocolNegotiators. Replacing this file in 1.23.0 with the one from 1.21.0 (with some minor compile fixes) restores the functionality.

Issue Analytics

  • State:closed
  • Created 4 years ago
  • Comments:6 (4 by maintainers)

github_iconTop GitHub Comments

1reaction
creamsoupcommented, Sep 19, 2019

thanks @chris-blacker, the proxy handler during ProtocolNegotiation is not converted to the aka new style. The new protocol negotiation started before the proxy is connected because of ProtocolNegotiationEvent is passed to the later pipeline before the proxy is connected as you mentioned. I created PR (#6159) that converts the ProxyHandler to follow new style.

0reactions
creamsoupcommented, Sep 20, 2019

awesome thanks for the verification, @chris-blacker

Read more comments on GitHub >

github_iconTop Results From Across the Web

Proxy rules doesn't get applied while connecting through Netty
It is observed that some rules applied thorough a proxy is not supported by Netty because of the HTTP CONNECT request is sent...
Read more >
Full Release Notes Index - Humio Documentation
If you are running Humio self-hosted and authenticate using Authenticating with OpenID Connect and are using an HTTP Proxy, if Humio should not...
Read more >
Security Bulletin 07 Dec 2022
CVE Number Base Score Reference CVE‑2019‑7226 8.8 https://nvd.nist.gov/vuln/detail/CVE‑2019‑7226 CVE‑2020‑27386 8.8 https://nvd.nist.gov/vuln/detail/CVE‑2020‑27386 CVE‑2022‑3861 8.8 https://nvd.nist.gov/vuln/detail/CVE‑2022‑3861
Read more >
Vulnerability Summary for the Week of January 27, 2020 | CISA
Primary Vendor ‑‑ Product Description Published CVSS Score apache ‑‑ spamassassin 2020‑01‑30 9.3 apache ‑‑ spamassassin 2020‑01‑30 9.3 asus ‑‑ rt‑n56u_devices ASUS RT‑N56U devices allow CSRF....
Read more >
What's New for SAP Cloud Platform
2019-20 What's New (Archive). This section provides an overview of the new and changed features for 2019 and 2020 introduced in SAP Cloud...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found