Skip to content
GitLab
Next
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • scalability scalability
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Locked Files
  • Issues 270
    • Issues 270
    • List
    • Boards
    • Service Desk
    • Milestones
    • Iterations
    • Requirements
  • Merge requests 1
    • Merge requests 1
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • Code review
    • Insights
    • Issue
    • Repository
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • GitLab.comGitLab.com
  • GitLab Infrastructure TeamGitLab Infrastructure Team
  • scalabilityscalability
  • Issues
  • #1301
Closed
Open
Issue created Sep 21, 2021 by Jacob Vosmaer@jacobvosmaer-gitlabOwner

How and when to deprecate PostUploadPack

In &463 (closed) we are creating a replacement for the Gitaly PostUploadPack RPC called PostUploadPackWithSidechannel. That means GitLab should stop using PostUploadPack.

PostUploadPack is a normal gRPC RPC. PostUploadPackWithSidechannel only works if the gRPC connection is encapsulated in the Gitaly-specific "backchannel" network protocol. This presents a possible obstacle. If self-managed installations have a gRPC proxy between Workhorse and Gitaly for whatever reason, then that proxy would reject the backchannel connections.

  1. Is this something we need to worry about?
  2. If so, what do we do about it?

Conclusion

The benefits of the new protocol are so great that everyone should be using it. It makes no sense to long-term support not using the protocol.

If anybody runs into trouble because their self-managed infrastructure does not allow the new protocol through then the solution is to modify their infrastructure: either bypass the proxy, or configure the proxy to work at the level of TCP connections (OSI layer 4).

Within the scope of &463 (closed), we will move forward by enabling the workhorse_use_sidechannel feature flag by default, and eventually removing it.

Edited Oct 14, 2021 by Jacob Vosmaer
Assignee
Assign to
Time tracking