Table of Contents |
---|
Background
Protocol
We've been writing a new client-server protocol as a public API for the creation of new Geode clients. We settled on using Protobuf as the encoding for the protocol as it allows a user not to think about a makes writing clients easier by abstracting away a lot of the encoding details, which makes writing clients significantly easier.
Encoding
One of the big challenges in designing a new protocol has been how to encode values. Like the old binary client protocol, the PDX encoding is complicated, underdocumented, and stateful. However, we need a way for users to send values that are more complex than mere primitives or maps of primitives..
The first approach was to use the JSON-PDX conversion that is already used for the REST API. Many languages have libraries to encode objects as JSON, but this and it's a familiar format to many developers. However, using JSON for encoding has downsides, among them being slow.
...
in that it's large and slow.
Selecting an Encoding Mechanism
Adding this encoding mechanism to the protocol is not exclusive with allowing JSON or custom encodings – the object encoding can be pluggable, and the user's desired response encoding should be selected during the handshake process.
Regardless of proposal, we should allow users to have a pluggable object encoding that they can register a handler with on the server. This encoder will receive a byte array and return an Object
. This allows users to do custom serialization if desired.
...
Protobuf Struct Encoding and Extension
This section is intended as useful background on the start of some thoughts about encoding a PDX-like type with Protobuf; for the proposed encoding, see "The Proposed Encoding", below.
Protobuf ships with a file, described a Struct
message, defined in struct.proto
, that can be recursively nested to encode JSON.
By extending the same sort of structure, we can encode almost any value with a type that is supported, including adding support for more complex types like dates or UUIDs. Clients can write their own encoders and driver developers can This should make it possible to write serializers and should enable driver developers to write auto-serializers that will serialize these objects via reflection to Protobuf in a manner similar to how JSON is currently serialized:.
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
message Struct { string typeName = 1; repeated StructEntry entries = 2; } message StructEntry { string fieldName = 1; oneof value { int32Struct intFieldnestedStruct = 2; int64 int64numericValue longField = 3; int32byte shortFieldbyteValue = 4; bytebool byteFieldbooleanValue = 5; booldouble booleanFielddoubleValue = 6; doublefloat doubleFieldfloatValue = 7; floatbytes floatFieldbinaryValue = 8; bytesstring binaryFieldstringValue = 9; string stringField = 10; google.protobuf.NullValue nullFieldnullValue = 1110; // Field serialized using a custom// serializationCollections format. This can onlyList belistResult used= if15; //Map AmapResult HandshakeRequest= is sent with valueFormat set to a valid format. // // See HandshakeRequest.valueFormat. bytes customObjectField = 12; } 16; } } message List { repeated EncodedValue elements = 1; } message Map { repeated Entry entries = 1; } |
The typeName
field can be used for other clients to recognize the same type. Internally, it will be stored in the PDXInstance that this is converted to, but that detail shouldn't need to be exposed to the userdriver developer.
So for example, given the following class and value:
Code Block |
---|
class User { String name; int age; } value = new User("Amy", 4464); |
would encode as (using a pseudo-static initializer syntax):
Code Block |
---|
Struct{ typeName: "<packagename?>UserUser", entries: [ StructEntry{ fieldName: "name", value: stringValue{"Amy"} }, StructEntry{ fieldName: "age", value: intValue{44} } ] } |
...
Ideally, a driver developer would provide annotations or registration for client application developers to register their typesspecify the manner in which a type should be serialized. In languages that use setters and getters by convention, it would probably be more idiomatic to refer to setters getters for reflection rather than the member variables of the object.
...
The Proposed Encoding
As an optimization to avoid sending field names with every message, allow clients to register types to communicate the (and servers) to cache metadata for data they are about to send. The server will give back This is done by registering an ID for that datatype, and the ID can be used in future messages to refer to the metadata without retransmitting that metadata. This encoding will not actually be smaller for single values of a type, but if multiple values of the same type are sent the savings can be significant.
Type registration will be per-connection (meaning IDs cannot be cached between connections). This eliminates the need to keep synchronization on the server, as well as decoupling client type registrations from the internal details of PDX. It also means that the clients drivers only have to keep track of a relatively small amount of data.
The outline of type registration for the client is this:
- Send
- Get back a type ID that references the type description
- Use that type ID when encoding values of that type
The message for sending a type definition will look like this:
first time a client (or server) sends a type, it will send it with the NewStructType
message, along with a unique ID number, which will lead the other side to cache it. After that, it should reuse that ID number and send StructById
messages.
So for example, using the same User from above:
Code Block | ||||
---|---|---|---|---|
| ||||
Code Block | ||||
| ||||
messageclass TypeRegistrationRequestUser { String ValueTypeDefinitionname; typeDefinition =int 1age; } message TypeRegistrationResponse { int typeID = 1; } message ValueTypeDefinition { string typeName = 1; repeated ValueTypeFieldDefinition definition = 2; } message ValueTypeFieldDefinition { string fieldName = 1; enum fieldType { intField; longField; shortField; byteField; booleanField; doubleField; floatField; binaryField; stringField; // no JSON? string jsonObjectField; // Field serialized using a custom serialization format. This can only be used if // A HandshakeRequest is sent with valueFormat set to a valid format. // // See HandshakeRequest.valueFormat. customObjectField; } } |
and for sending values:
value = new User("Amy", 64); |
Suppose the client chose ID 42 for this type. Then the first put message using such a value would have a value like so:
Code Block |
---|
PutRequest{
key: EncodedValue{intValue: 12},
EncodedValue{
newStructType: NewStructType{
typename: "User",
typeID: 42,
fieldNames: ["name", "age"],
fieldValues: [
ValueField{stringField: "Amy"},
ValueField{intField: 64}
]
}
}
} |
A later PutRequest would encode the value like this (enclosing Request omitted for succinctness):
Code Block |
---|
PutRequest{
key: EncodedValue{intValue: 111},
value: EncodedValue{
structById: StructById{
id: 42,
fields: [
ValueField{stringField: "Amy"},
ValueField{intField: 64}
]
}
}
} |
Message Definitions
Anchor | ||||
---|---|---|---|---|
|
This is the proposed EncodedValue message that will contain values a client sends to the server or the server sends to the client:
Code Block | ||||||||
---|---|---|---|---|---|---|---|---|
| ||||||||
Code Block | ||||||||
| ||||||||
message ValueEntry { intEncodedValue typeIDkey = 1; repeated ValueFieldEncodedValue fieldvalue = 2; } message ValueFieldEncodedValue = { oneof value { { // primitives int32 intFieldintResult = 1; int64 longFieldlongResult = 2; int32 shortFieldshortResult = 3; byteint32 byteFieldbyteResult = 4; bool booleanFieldbooleanResult = 5; double doubleFielddoubleResult = 6; float floatFieldfloatResult = 7; bytes binaryFieldbinaryResult = 8; string stringFieldstringResult = 9; google.protobuf.NullValue nullFieldnullResult = 11; NewStruct newStruct = 12; StructByID structById = 13; // FieldResult serialized using a custom serialization format. This can only be used if // A HandshakeRequest is sent with valueFormat set to a valid format. // // See HandshakeRequest.valueFormat. bytes customObjectField = 12; } } |
The client sends a registration request, and the server can determine the typeID.
If a server sends back a value of a type a client has not registered, the client can send a TypeDefinitionLookupRequest:
Code Block |
---|
message TypeDefinitionLookupRequest { int typeId = 1; } message TypeDefinitionLookupResponse { int typeId customObjectResult = 14; // Collections List listResult = 15; Map mapResult = 16; Set setResult = 17; // Primitive arrays NumericArray intArray = 18; NumericArray longArray = 19; NumericArray shortArray = 20; NumericArray booleanArray = 21; ByteArrayArray byteArrayArray = 22; ObjectArray objectArray = 23; // Used in NewStruct messages for defining fields that can be of multiple types. // This encoded value will contain the actual type of the field but the type // definition will have Object for the field type. // This is kind of a hack, sorry. EncodedValue objectField = 23; // if we decide to add builtin support for additional types, they can go here. } } message NewStruct { string typename = 1; int32 typeID = 2; repeated string fieldNames = 3; repeated EncodedValue fields = 4; } message StructByID { int32 typeID = 1; string fieldName repeated EncodedValue fields = 2; } message List { repeated EncodedValue elements ValueTypeDefinition typeDefinition = 3; }= 1; } message Map { repeated Entry entries = 1; } // All numeric values in Protobuf are encoded using the same varint encoding, // so this encodes identically for all numbers and booleans. message NumericArray { repeated int64 elements = 1; } message ByteArrayArray { repeated bytes arrays = 1; } message ObjectArray { repeated EncodedValue objects = 1; } |
Under this EncodedValue scheme, types defined by the server and types defined by the client will use different sets of IDs (though these can refer to the same cached values if they are the same). This is because we intend to add support for asynchronous messages and/or multiplexing of multiple channels of communication over one socket, and this avoids having the server and client race to assign IDs. If IDs were shared, the server would need to send back new IDs when it sent back types the client had not seen before.
Type definitions will encode all values that are not primitives or arrays of primitives as Objects that may be of any type, whereas primitives will be type checked. Clients may do their own validation. This is, in significant part, a leaky abstraction due to the way PDX saves values.
If a client is sending mutually recursive types or types that contain instances of themselves, it should send the type definition the first time one is seen (or in the parent instance) and send the type with ID in each later instance.
Whether a client must send all following values by ID or the values can be sent with a full ID each time should be configurable in the handshake.
Considerations
In order to avoid arbitrary object serialization (which can lead to gadget chain exploits), we will probably need to constrain valid types to those registered as DataSerializable, or possibly even only those registered with the ReflectionBasedAutoSerializer
. This may also mean that we need a special class of typenames for those types that are put first by a client.
The way that objects are deserialized on the server is dependent on how PDX behaves now.
A driver developer may wish to provide a way for users to register types before sending values. An earlier version of this document described a protocol where the types had to be defined in a separate message before the value in which they are first put. That had separate list of types for the registration method. Because using the same list of types as EncodedValue amounts to pretty much the same as sending a new value, we opted for the method above.
Driver developers will have to make sure that types they want to use in different language clients can be correlated. So package names may or may not make sense. The naming convention is not entirely decided, nor is whether we can register nameless types. It may be wise to reserve a set of names with special meaning ("JSON" perhaps?) and perhaps a set of names that would correspond to classes that have no domain class in Java (leading underscore, or just those with no package name?)
The use of NumericArray for all the integral types is because they all have the same varint encoding and will encode the same way on the wire. It may be advisable to use more restricted types and separate messages to get better typing in the generated Protobuf code.
Type Mappings
Each of the primitives maps to the corresponding Java primitive. Arrays map to arrays of Java primitives. Other fields will encode to the corresponding objectsThis way a client can implement logic to find the correct type and deserialize the value.