feat: support grpc proxy with insecure mode

[sysulq]

I checked the current implementation, for now apisix seems only support grpc proxy with ssl.

In my case, we want to try apisix to balance grpc traffic with insecure mode in intranet environment.

Is there any reason not to support grpc without ssl enabled? Looking forward to your reply :-)

        {% for _, port in ipairs(node_listen) do %}
        listen {* port *} {% if enable_reuseport then %} reuseport {% end %};
        {% end %}
        {% if ssl.enable then %}
        {% for _, port in ipairs(ssl.listen_port) do %}
        listen {* port *} ssl {% if ssl.enable_http2 then %} http2 {% end %} {% if enable_reuseport then %} reuseport {% end %};
        {% end %}
        {% end %}

[spacewander]

Maybe we can allow plaintext HTTP2?

[sysulq]

Maybe we can allow plaintext HTTP2?

That's it.

[nic-chen]

@hnlq715 PR is welcome.

[sysulq]

@spacewander @nic-chen
Seems like nginx do not support h2c and http1 on the same port without ssl...
So, maybe we need to add a new port for this?

nginx issue:
https://trac.nginx.org/nginx/ticket/816

without ssl:

https://github.com/nginx/nginx/blob/9e07862d6e9d37041a42bbfa34dd1f56ed547505/src/http/ngx_http_request.c#L324-L331

with ssl:

https://github.com/nginx/nginx/blob/9e07862d6e9d37041a42bbfa34dd1f56ed547505/src/http/ngx_http_request.c#L812-L831

[membphis]

Seems like nginx do not support h2c and http1 on the same port without ssl...

confirm this ^_^

[tokers]

Seems like nginx do not support h2c and http1 on the same port without ssl...

confirm this ^_^

That's true, we cannot use same port for both http/1.1 and http2 if we don't use TLS/SSL.

[spacewander]

Maybe we can extend the array format of node_listen, allow providing http2 flag?

apisix/conf/config-default.yaml

Line 23 in 1e35cc0

node_listen: 9080 # APISIX listening port

[tokers]

Maybe we can extend the array format of node_listen, allow providing http2 flag?

That's good.

[sysulq]

Maybe we can extend the array format of node_listen, allow providing http2 flag?

apisix/conf/config-default.yaml

Line 23 in 1e35cc0

node_listen: 9080 # APISIX listening port

It’s good if we do not need to consider compatibility

[spacewander]

We should support current way too.

[spacewander]

Solved.