Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/zhongzc/tidb-topsql-tls
https://github.com/zhongzc/tidb-topsql-tls
Last synced: 25 days ago
JSON representation
- Host: GitHub
- URL: https://github.com/zhongzc/tidb-topsql-tls
- Owner: zhongzc
- Created: 2022-07-28T07:54:10.000Z (over 2 years ago)
- Default Branch: master
- Last Pushed: 2022-07-29T09:35:21.000Z (over 2 years ago)
- Last Synced: 2023-03-05T02:03:03.566Z (over 1 year ago)
- Language: Rust
- Size: 25.4 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Demo of a TLS issue for topsql
gRPC client written in Rust cannot connect to topsql pubsub endpoint with TLS, but which written in Golang works well. :(
## Deploy tidb cluster via tiup-cluster (Linux support only)
My `topo.yaml`:
```yaml
global:
user: "zhongzc"
deploy_dir: "/home/zhongzc/tmp/tmpcluster/deploy"
data_dir: "/home/zhongzc/tmp/tmpcluster/data"
enable_tls: true
pd_servers:
- host: localhost
client_port: 2379
peer_port: 2380
tidb_servers:
- host: localhost
port: 4000
status_port: 10080
tikv_servers:
- host: localhost
port: 20160
status_port: 20180
```
Deploy & Start:
```sh
tiup cluster deploy tmp v6.1.0 topo.yaml -y && tiup cluster start tmp -y
```
## Get TLS certs
Run `tiup cluster display tmp`:
```
Starting component `cluster`: /home/zhongzc/.tiup/components/cluster/v1.8.2/tiup-cluster display tmp
Cluster type: tidb
Cluster name: tmp
Cluster version: v6.1.0
Deploy user: zhongzc
SSH type: builtin
TLS encryption: enabled
CA certificate: /home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/ca.crt
Client private key: /home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/client.pem
Client certificate: /home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/client.crt
```
What we need:
```
CA certificate: /home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/ca.crt
Client private key: /home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/client.pem
Client certificate: /home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/client.crt
```
## Build Clients
Build the Rust one:
```sh
cargo build
```
Build the Golang one:
```sh
go build -o target/debug/tidb-topsql-tls-go
```
## Run All
Connect to _TiDB_ from the **Rust client**:
```sh
CA=/home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/ca.crt \
CRT=/home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/client.crt \
KEY=/home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/client.pem \
ADDR=localhost:10080 \
INSTANCE=tidb \
target/debug/tidb-topsql-tls
```
Got errors:
```
recv Some(Err(RpcFailure(RpcStatus { code: 14-UNAVAILABLE, message: "failed to connect to all addresses", details: [] })))
get error, reconnecting
recv Some(Err(RpcFailure(RpcStatus { code: 14-UNAVAILABLE, message: "failed to connect to all addresses", details: [] })))
get error, reconnecting
...
```
Connect to _TiKV_ from the **Rust client**:
```sh
CA=/home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/ca.crt \
CRT=/home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/client.crt \
KEY=/home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/client.pem \
ADDR=localhost:20160 \
INSTANCE=tikv \
target/debug/tidb-topsql-tls
```
Succeeded:
```
recv Some(Ok(record_oneof { resource_group_tag: 0A20B95A604794F9EFF17A1A6A37D754324BE11EDE348A0D1E53DA2BC3C32D6A414212209449388A4EFBC35C8ECA1639AEC164392DF687869239F9AD16EA37887D98C42A1802 items { timestamp_sec: 1659011944 read_keys: 3 } items { timestamp_sec: 1659011947 read_keys: 3 } items { timestamp_sec: 1659011950 read_keys: 3 } items { timestamp_sec: 1659011953 read_keys: 3 } }))
recv Some(Ok(record_oneof { resource_group_tag: 0A20D0DF18D1BF1327763C0CDBC95F5EBDDB19615094EF253F4951925A7EA3F129B912207CEE07289863E5F61E4232BCA41716BC770459D034FBFC8D76DBF75F905ED96B1801 items { timestamp_sec: 1659011945 read_keys: 1 } }))
recv Some(Ok(record_oneof { resource_group_tag: 0A20D0DF18D1BF1327763C0CDBC95F5EBDDB19615094EF253F4951925A7EA3F129B912207CEE07289863E5F61E4232BCA41716BC770459D034FBFC8D76DBF75F905ED96B1802 items { timestamp_sec: 1659011945 read_keys: 1 } }))
...
```
Connect to _TiDB_ from the **Golang client**:
```sh
CA=/home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/ca.crt \
CRT=/home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/client.crt \
KEY=/home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/client.pem \
ADDR=localhost:10080 \
INSTANCE=tidb \
target/debug/tidb-topsql-tls-go
```
Succeeded:
```
2022/07/28 12:41:20 recv record: items: items: >
2022/07/28 12:41:20 recv record: items: stmt_duration_sum_ns:2514953 stmt_duration_count:1 > items: stmt_duration_sum_ns:2730836 stmt_duration_count:1 > items: >
2022/07/28 12:41:20 recv record: items: > items: items: stmt_duration_sum_ns:4051958 stmt_duration_count:1 > >
...
```
Connect to _TiKV_ from the **Golang client**:
```sh
CA=/home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/ca.crt \
CRT=/home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/client.crt \
KEY=/home/zhongzc/.tiup/storage/cluster/clusters/tmp/tls/client.pem \
ADDR=localhost:20160 \
INSTANCE=tikv \
target/debug/tidb-topsql-tls-go
```
Succeeded:
```
2022/07/28 12:43:16 recv record: items: items: items: items: items: items: items: items: items: items: items: >
...
```