tekmonksgithub / monkshu Goto Github PK

I think it is better if backend APIs are not something special, running on a special server. Of course, they have to be, but there is no reason to need another port, open to the entire world just for them.

We need to add some sort of a proxy bypass into the front-end server, if the URL scheme matches the bypass, then route it as a proxy pattern to a backend API server.

This will allow the API server to be isolated behind the frontend HTTP server, and also reduce the ports open.

Testing conditions

• Tested using latest monkshu code. Commit id 3f482a8
• Node v14.15.1

Success case:

• Launch backend using backend/server/server.js
• Call /__org_monkshu__release API using backend/server/lib/rest.js
• Tested OK

Screenshots:

• API Call:
  
• Logs:
  

Failure case:

• Launch backend using backend/server/cluster.js
• Call /__org_monkshu__release API using backend/server/lib/rest.js
• No response to the API call
• Backend server logs error

StackTrace:

TypeError: Cannot read property '/__org_monkshu__release' of undefined
    at Object.getAPI (/home/arpit/Documents/git_repos/monkshu/backend/server/lib/apiregistry.js:65:12)
    at doService (/home/arpit/Documents/git_repos/monkshu/backend/server/server.js:94:26)
    at Object.server.onReqEnd (/home/arpit/Documents/git_repos/monkshu/backend/server/server.js:65:33)
    at IncomingMessage.<anonymous> (/home/arpit/Documents/git_repos/monkshu/backend/server/lib/http_server.js:32:38)
    at IncomingMessage.emit (events.js:327:22)
    at endReadableNT (_stream_readable.js:1327:12)
    at processTicksAndRejections (internal/process/task_queues.js:80:21)

Suspected cause:

• backend/server/lib/apiregistry.js line 64, apireg is set as undefined in the worker processes.

Screenshots:

• API Call:
  
• Logs:
  

Both frontend and backend HTTPDs should use HTTP/2.

Up to a certain size and maybe with filters (e.g. don't cache a large PDF). Then gzip it. On init.

So when requests come in - nothing to read (no IO) and nothing to gzip (no CPU). Just respond...

This should significantly improve performance.

A static file must NEVER have an unencrypted password. It is against most security compliance regulations, e.g. PCI.

So the PFX passphrases must be using crypt and be encrypted.

Tokens for APIs are not working in clustered mode, when needsToken=true is set in apiregistry.json for APIs in Monkvision

Some errors seen, when needsToken=true is set: