1 files changed, 154 insertions, 0 deletions
diff --git a/plugins/grpc/server.go b/plugins/grpc/server.go
new file mode 100644
index 00000000..323f73a0
--- /dev/null
+++ b/plugins/grpc/server.go
@@ -0,0 +1,154 @@
+package grpc
+
+import (
+	"context"
+	"crypto/tls"
+	"crypto/x509"
+	"fmt"
+	"os"
+	"path"
+	"time"
+
+	"github.com/spiral/errors"
+	"github.com/spiral/roadrunner/v2/pkg/events"
+	"github.com/spiral/roadrunner/v2/plugins/grpc/parser"
+	"github.com/spiral/roadrunner/v2/plugins/grpc/proxy"
+	"google.golang.org/grpc"
+	"google.golang.org/grpc/credentials"
+	"google.golang.org/grpc/keepalive"
+)
+
+func (p *Plugin) createGRPCserver() (*grpc.Server, error) {
+	const op = errors.Op("grpc_plugin_create_server")
+	opts, err := p.serverOptions()
+	if err != nil {
+		return nil, errors.E(op, err)
+	}
+
+	server := grpc.NewServer(opts...)
+
+	if p.config.Proto != "" {
+		// php proxy services
+		services, err := parser.File(p.config.Proto, path.Dir(p.config.Proto))
+		if err != nil {
+			return nil, err
+		}
+
+		for _, service := range services {
+			p := proxy.NewProxy(fmt.Sprintf("%s.%s", service.Package, service.Name), p.config.Proto, p.gPool, p.mu)
+			for _, m := range service.Methods {
+				p.RegisterMethod(m.Name)
+			}
+
+			server.RegisterService(p.ServiceDesc(), p)
+		}
+	}
+
+	// external and native  services
+	for _, r := range p.services {
+		r(server)
+	}
+
+	return server, nil
+}
+
+func (p *Plugin) interceptor(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (interface{}, error) {
+	start := time.Now()
+	resp, err := handler(ctx, req)
+	if err != nil {
+		p.events.Push(events.GRPCEvent{
+			Event:   events.EventUnaryCallErr,
+			Info:    info,
+			Error:   err,
+			Start:   start,
+			Elapsed: time.Since(start),
+		})
+
+		return nil, err
+	}
+
+	p.events.Push(events.GRPCEvent{
+		Event:   events.EventUnaryCallOk,
+		Info:    info,
+		Start:   start,
+		Elapsed: time.Since(start),
+	})
+
+	return resp, nil
+}
+
+func (p *Plugin) serverOptions() ([]grpc.ServerOption, error) {
+	const op = errors.Op("grpc_plugin_server_options")
+
+	var tcreds credentials.TransportCredentials
+	var opts []grpc.ServerOption
+	var cert tls.Certificate
+	var certPool *x509.CertPool
+	var rca []byte
+	var err error
+
+	if p.config.EnableTLS() {
+		// if client CA is not empty we combine it with Cert and Key
+		if p.config.TLS.RootCA != "" {
+			cert, err = tls.LoadX509KeyPair(p.config.TLS.Cert, p.config.TLS.Key)
+			if err != nil {
+				return nil, err
+			}
+
+			certPool, err = x509.SystemCertPool()
+			if err != nil {
+				return nil, err
+			}
+			if certPool == nil {
+				certPool = x509.NewCertPool()
+			}
+
+			rca, err = os.ReadFile(p.config.TLS.RootCA)
+			if err != nil {
+				return nil, err
+			}
+
+			if ok := certPool.AppendCertsFromPEM(rca); !ok {
+				return nil, errors.E(op, errors.Str("could not append Certs from PEM"))
+			}
+
+			tcreds = credentials.NewTLS(&tls.Config{
+				MinVersion:   tls.VersionTLS12,
+				ClientAuth:   tls.RequireAndVerifyClientCert,
+				Certificates: []tls.Certificate{cert},
+				ClientCAs:    certPool,
+			})
+		} else {
+			tcreds, err = credentials.NewServerTLSFromFile(p.config.TLS.Cert, p.config.TLS.Key)
+			if err != nil {
+				return nil, err
+			}
+		}
+
+		serverOptions := []grpc.ServerOption{
+			grpc.MaxSendMsgSize(int(p.config.MaxSendMsgSize)),
+			grpc.MaxRecvMsgSize(int(p.config.MaxRecvMsgSize)),
+			grpc.KeepaliveParams(keepalive.ServerParameters{
+				MaxConnectionIdle:     p.config.MaxConnectionIdle,
+				MaxConnectionAge:      p.config.MaxConnectionAge,
+				MaxConnectionAgeGrace: p.config.MaxConnectionAge,
+				Time:                  p.config.PingTime,
+				Timeout:               p.config.Timeout,
+			}),
+			grpc.MaxConcurrentStreams(uint32(p.config.MaxConcurrentStreams)),
+		}
+
+		opts = append(opts, grpc.Creds(tcreds))
+		opts = append(opts, serverOptions...)
+	}
+
+	opts = append(opts, p.opts...)
+
+	// custom codec is required to bypass protobuf, common interceptor used for debug and stats
+	return append(
+		opts,
+		grpc.UnaryInterceptor(p.interceptor),
+		// TODO(rustatian): check deprecation
+		// grpc.CustomCodec(&codec{encoding.GetCodec(encCodec)}),
+	), nil
+}