switch firehose to connectweb server, disable proxy for firehoseV1, a…

…dd --firehose-enforce-compression true by default

CHANGELOG.md

@@ -8,19 +8,32 @@ Operators, you should copy/paste content of this content straight to your projec
 
 If you were at `firehose-core` version `1.0.0` and are bumping to `1.1.0`, you should copy the content between those 2 version to your own repository, replacing placeholder value `fire{chain}` with your chain's own binary.
 
+## Unreleased
+
+### Firehose
+
+> [!IMPORTANT]
+> This release will reject firehose connections from clients that don't support GZIP or ZSTD compression. Use `--firehose-enforce-compression=false` to keep previous behavior, then check the logs for `incoming Substreams Blocks request` logs with the value `compressed: false` to track users who are not using compressed HTTP connections.
+
+> [!IMPORTANT]
+> This release removes the old `sf.firehose.v1` protocol (replaced by `sf.firehose.v2` in 2022, this should not affect any reasonably recent client)
+
+* Add support for ConnectWeb firehose requests.
+* Always use gzip compression on firehose requests for clients that support it (instead of always answering with the same compression as the request).
+
 ## v1.6.9
 
 ### Substreams
 
 * Fix an issue preventing proper detection of gzip compression when multiple headers are set (ex: python grpc client)
+* Add support for zstd compression on server
 * Fix an issue preventing some tier2 requests on last-stage from correctly generating stores. This could lead to some missing "backfilling" jobs and slower time to first block on reconnection.
 * Fix a thread leak on cursor resolution resulting in bad counter for active connections
-* Add support for zstd encoding on server
 
 ## v1.6.8
 
-> [!NOTE]  
-> This release will reject connections from clients that don't support GZIP compression. Use `--substreams-tier1-enforce-compression=false` to keep previous behavior, then check the logs for `incoming Substreams Blocks request` logs with the value `compressed: false` to track users who are not using compressed HTTP connections.
+> [!NOTE]
+> This release will reject substreams connections from clients that don't support GZIP compression. Use `--substreams-tier1-enforce-compression=false` to keep previous behavior, then check the logs for `incoming Substreams Blocks request` logs with the value `compressed: false` to track users who are not using compressed HTTP connections.
 
 * Substreams: add `--substreams-tier1-enforce-compression` to reject connections from clients that do not support GZIP compression
 * Substreams performance: reduced the number of `mallocs` (patching some third-party libraries)

cmd/apps/firehose.go

@@ -35,6 +35,7 @@ func RegisterFirehoseApp[B firecore.Block](chain *firecore.Chain[B], rootLog *za
 			cmd.Flags().String("firehose-discovery-service-url", "", "Url to configure the gRPC discovery service") //traffic-director://xds?vpc_network=vpc-global&use_xds_reds=true
 			cmd.Flags().Int("firehose-rate-limit-bucket-size", -1, "Rate limit bucket size (default: no rate limit)")
 			cmd.Flags().Duration("firehose-rate-limit-bucket-fill-rate", 10*time.Second, "Rate limit bucket refill rate (default: 10s)")
+			cmd.Flags().Bool("firehose-enforce-compression", true, "Reject any request that does not accept gzip or zstd encoding in their GRPC/Connect header")
 
 			return nil
 		},
@@ -80,6 +81,10 @@ func RegisterFirehoseApp[B firecore.Block](chain *firecore.Chain[B], rootLog *za
 
 			var serverOptions []server.Option
 
+			if viper.GetBool("firehose-enforce-compression") {
+				serverOptions = append(serverOptions, server.WithEnforceCompression(true))
+			}
+
 			limiterSize := viper.GetInt("firehose-rate-limit-bucket-size")
 			limiterRefillRate := viper.GetDuration("firehose-rate-limit-bucket-fill-rate")
 			if limiterSize > 0 {

cmd/apps/substreams_tier1.go

@@ -49,7 +49,7 @@ func RegisterSubstreamsTier1App[B firecore.Block](chain *firecore.Chain[B], root
 			cmd.Flags().String("substreams-tier1-discovery-service-url", "", "URL to configure the grpc discovery service, used for communication with tier2") //traffic-director://xds?vpc_network=vpc-global&use_xds_reds=true
 			cmd.Flags().Bool("substreams-tier1-subrequests-insecure", false, "Connect to tier2 without checking certificate validity")
 			cmd.Flags().Bool("substreams-tier1-subrequests-plaintext", true, "Connect to tier2 without client in plaintext mode")
-			cmd.Flags().Bool("substreams-tier1-enforce-compression", true, "Reject any request that does not accept gzip encoding in their GRPC/Connect header")
+			cmd.Flags().Bool("substreams-tier1-enforce-compression", true, "Reject any request that does not accept gzip or zstd encoding in their GRPC/Connect header")
 			cmd.Flags().Int("substreams-tier1-max-subrequests", 4, "number of parallel subrequests that the tier1 can make to the tier2 per request")
 			cmd.Flags().String("substreams-tier1-block-type", "", "Block type to use for the substreams tier1 (Ex: sf.ethereum.type.v2.Block)")
 

firehose/server/blocks.go

@@ -5,9 +5,12 @@ import (
 	"errors"
 	"fmt"
 	"math/rand"
+	"net/http"
 	"os"
+	"strings"
 	"time"
 
+	connect "connectrpc.com/connect"
 	"github.com/streamingfast/bstream"
 	pbbstream "github.com/streamingfast/bstream/pb/sf/bstream/v1"
 	"github.com/streamingfast/bstream/stream"
@@ -19,16 +22,15 @@ import (
 	pbfirehose "github.com/streamingfast/pbgo/sf/firehose/v2"
 	"go.uber.org/zap"
 	"google.golang.org/grpc/codes"
-	"google.golang.org/grpc/metadata"
 	"google.golang.org/grpc/status"
 	"google.golang.org/protobuf/proto"
 	"google.golang.org/protobuf/types/known/anypb"
 )
 
-func (s *Server) Block(ctx context.Context, request *pbfirehose.SingleBlockRequest) (*pbfirehose.SingleBlockResponse, error) {
+func (s *Server) Block(ctx context.Context, request *connect.Request[pbfirehose.SingleBlockRequest]) (*connect.Response[pbfirehose.SingleBlockResponse], error) {
 	var blockNum uint64
 	var blockHash string
-	switch ref := request.Reference.(type) {
+	switch ref := request.Msg.Reference.(type) {
 	case *pbfirehose.SingleBlockRequest_BlockHashAndNumber_:
 		blockNum = ref.BlockHashAndNumber.Num
 		blockHash = ref.BlockHashAndNumber.Hash
@@ -71,15 +73,22 @@ func (s *Server) Block(ctx context.Context, request *pbfirehose.SingleBlockReque
 	auth := dauth.FromContext(ctx)
 	metering.Send(ctx, meter, auth.UserID(), auth.APIKeyID(), auth.RealIP(), auth.Meta(), "sf.firehose.v2.Firehose/Block", resp)
 
-	return resp, nil
+	return connect.NewResponse(resp), nil
 }
 
-func (s *Server) Blocks(request *pbfirehose.Request, streamSrv pbfirehose.Stream_BlocksServer) error {
-	ctx := streamSrv.Context()
+// Blocks(context.Context, *connect.Request[v2.Request], *connect.ServerStream[v2.Response]) error
+func (s *Server) Blocks(ctx context.Context, request *connect.Request[pbfirehose.Request], streamSrv *connect.ServerStream[pbfirehose.Response]) error {
 	metrics.RequestCounter.Inc()
 
 	logger := logging.Logger(ctx, s.logger)
 
+	if !matchHeader(request.Header(), acceptedCompressionValues) {
+		if s.enforceCompression {
+			return status.Error(codes.InvalidArgument, "client does not support compression")
+		}
+		logger.Info("client does not support compression")
+	}
+
 	if s.rateLimiter != nil {
 		rlCtx, cancel := context.WithTimeout(ctx, 30*time.Second)
 		defer cancel()
@@ -102,10 +111,7 @@ func (s *Server) Blocks(request *pbfirehose.Request, streamSrv pbfirehose.Stream
 			hostname = "unknown"
 			logger.Warn("cannot determine hostname, using 'unknown'", zap.Error(err))
 		}
-		md := metadata.New(map[string]string{"hostname": hostname})
-		if err := streamSrv.SendHeader(md); err != nil {
-			logger.Warn("cannot send metadata header", zap.Error(err))
-		}
+		streamSrv.ResponseHeader().Add("hostname", hostname)
 	}
 
 	var blockCount uint64
@@ -123,7 +129,7 @@ func (s *Server) Blocks(request *pbfirehose.Request, streamSrv pbfirehose.Stream
 			obj = block.Payload
 		}
 
-		protoStep, skip := stepToProto(step, request.FinalBlocksOnly)
+		protoStep, skip := stepToProto(step, request.Msg.FinalBlocksOnly)
 		if skip {
 			return nil
 		}
@@ -175,7 +181,7 @@ func (s *Server) Blocks(request *pbfirehose.Request, streamSrv pbfirehose.Stream
 		return nil
 	})
 
-	if len(request.Transforms) > 0 && s.transformRegistry == nil {
+	if len(request.Msg.Transforms) > 0 && s.transformRegistry == nil {
 		return status.Errorf(codes.Unimplemented, "no transforms registry configured within this instance")
 	}
 
@@ -209,11 +215,11 @@ func (s *Server) Blocks(request *pbfirehose.Request, streamSrv pbfirehose.Stream
 		})
 	}
 
-	ctx = s.initFunc(ctx, request)
+	ctx = s.initFunc(ctx, request.Msg)
 	str, err := s.streamFactory.New(
 		ctx,
 		handlerFunc,
-		request,
+		request.Msg,
 		logger,
 		stream.WithLiveSourceHandlerMiddleware(liveSourceMiddlewareHandler),
 		stream.WithFileSourceHandlerMiddleware(fileSourceMiddlewareHandler),
@@ -294,3 +300,22 @@ func stepToProto(step bstream.StepType, finalBlocksOnly bool) (outStep pbfirehos
 	}
 	return 0, true // simply skip irreversible or stalled here
 }
+
+// must be lowercase
+var compressionHeader = map[string]bool{"grpc-accept-encoding": true, "connect-accept-encoding": true}
+var acceptedCompressionValues = map[string]bool{"gzip": true, "zstd": true}
+
+func matchHeader(headers http.Header, expected map[string]bool) bool {
+	for k, v := range headers {
+		if compressionHeader[strings.ToLower(k)] {
+			for _, vv := range v {
+				for _, vvv := range strings.Split(vv, ",") {
+					if expected[strings.TrimSpace(strings.ToLower(vvv))] {
+						return true
+					}
+				}
+			}
+		}
+	}
+	return false
+}