How does grpc-web security work in production?

302

There is no perfect solution currently. Only thing you can hope for is browsers to support GRPC. Current situation demands that you host proxy and web app on same server so that there is no external access. If proxy and web app are on different servers it depends on security of proxy provider.

Share:
302
Flimzy
Author by

Flimzy

I coach small teams to benefit from DevOps, without the Enterprise scale. Contact me on my web site, or read my blog. You can also find me at: GitHub GitLab LinkedIn Twitter YouTube I am the author of Kivik which provides a common interface to CouchDB and PouchDB for Go and GopherJS. I am a contributor to the Apache CouchDB project, and a member of the CouchDB PMC.

Updated on December 21, 2022

Comments

  • Flimzy
    Flimzy over 1 year

    I'm using envoy proxy between Go server with gRPC and my Flutter web app. I can use TLS between envoy and Go server, that's fine, but my concern is between envoy and my web app. How can I protect this connection? What is the best way?