TLS support?

[UladzimirTrehubenka]

Is TLS support planned?

In accordance with tidwall/evio#28 there are no easy way to implement it:

The problem is in standard Go TLS implementation. It doesn't have an event-based idea mechanism and actually it can block calls like Reader.Read() during handshake, what is actually not accurate by the io.Reader contract.

Looks like custom TLS implementation is required for this.

[panjf2000]

@UladzimirTrehubenka
It's no plan for now, but I will keep investigating it and support TLS if it is possible.

[jingc1413]

hi, brother, When can the tls/dtls be supported?
wait your messge

[ivanjaros]

yeah, without tls this is quite useless these days where even services in a private network use encryption. tls is simply a must, no matter which protocol you're using these days, there's no way around it.

[chowyu08]

does now support tls?

[chowyu08]

什么时候支持tls

[HeisenbergV]

请问tls还会支持吗

[panjf2000]

Sorry, I don't have a particularly convincing idea of how to implement TLS in gnet at the present stage, and I don't have much time to do this at the moment, it'd be great if anyone could take this job and open a PR for it, contribute code or provide some insightful thoughts.

[vikassandhu999]

Sorry, I don't have a particularly convincing idea of how to implement TLS in gnet at the present stage, and I don't have much time to do this at the moment, it'd be great if anyone could take this job and open a PR for it, contribute code or provide some insightful thoughts.

Though I don't have much experience with TLS implementations but If someone is willing to take the charge of the job, I can assist them.

[seymourtang]

Here is an example on how to implement TLS in gnet：gnet TLS

[rock59]

s2n-tls is a small, modern, secure and fast TLS implementation developed and used by AWS. It provides posix-like api so it seems easy to integrate it in gent for developers who dont mind using cgo.

[github-actions]

This issue is marked as stale because it has been open for 30 days with no activity.

You should take one of the following actions:

• Manually close this issue if it is no longer relevant
• Comment if you have more information to share

This issue will be automatically closed in 7 days if no further activity occurs.

[github-actions]

This issue is marked as stale because it has been open for 30 days with no activity.

You should take one of the following actions:

• Manually close this issue if it is no longer relevant
• Comment if you have more information to share

This issue will be automatically closed in 7 days if no further activity occurs.

[github-actions]

This issue is marked as stale because it has been open for 30 days with no activity.

You should take one of the following actions:

• Manually close this issue if it is no longer relevant
• Comment if you have more information to share

This issue will be automatically closed in 7 days if no further activity occurs.

[ruimya]

@panjf2000 Has gnet considered which version will officially support TLS? Additionally, is there a way to minimize intrusion into TLS source code and avoid maintaining another set of TLS source code? Can we simply call non blocking code from the crypto/tls and rewrite the blocking code in gnet? just immature suggestion

[panjf2000]

Sorry, I can't give you a specific ETA for gnet TLS. It's not a trivial job, I don't have much time for that, also I don't have the urge to use TLS on gnet cuz the major companies that are currently using gnet employ TLS in API gateway, thus gnet itself doesn't need it. If somebody wants to implement TLS for gnet, I'd love to review it.