解决方法:使用nginx反向代理时收到错误代码为2的RST_STREAM

时间:2019-08-30 14:31:06

标签: nginx grpc nginx-reverse-proxy

我目前正在树莓派上使用dialogflow API。 使用grpc调用StreamingDetectIntent方法时,一切正常。 我必须在我的产品上使用多个api,因此,我试图在它们前面放置一个反向代理。这样我只能叫一个地址 我正在使用nginx将GRPC请求反向代理到Google api。 调用简单方法时没有问题,但是调用诸如StreamingDetectIntent之类的流方法时,请求期间出现错误。

Dialogflow在获取来自我的客户端的音频通量方面没有问题,但是我在获取请求的最后一部分,下游通量方面遇到了问题。

这是我的客户给我的错误:

grpc._channel._Rendezvous: <_Rendezvous of RPC that terminated with:
        status = StatusCode.INTERNAL
        details = "Received RST_STREAM with error code 2"
        debug_error_string = "{"created":"@1567173815.816362297","description":"Error received from peer ipv4:163.172.143.250:443","file":"src/core/lib/surface/call.cc","file_line":1041,"grpc_message":"Received RST_STREAM with error code 2","grpc_status":13}"
>

,这里是我在Nginx日志中看到的错误:

upstream sent frame for closed stream 1 while reading upstream, client: ..., server: exemple.com, request: "POST /google.cloud.dialogflow.v2beta1.Sessions/StreamingDetectIntent HTTP/2.0", upstream: "grpcs://...:443", host: "example.com:443"

我尝试将grpc_buffer_size参数增加到较大的值,但是没有用。

这是我当前的Nginx配置:

user  nginx;
worker_processes  1;

error_log  /var/log/nginx/error.log debug;
pid        /var/run/nginx.pid;

events {
    worker_connections  1024;
}

http {

    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;

    keepalive_timeout  65;

    client_max_body_size 4000M;
    grpc_read_timeout 1d;
    grpc_send_timeout 1d;
    # this seems to fix it; but see comment in README.md
    grpc_buffer_size 100M;

    include /etc/nginx/conf.d/*.conf;

    server {

        # SSL configuration
        listen 443 ssl http2;

        access_log /var/log/nginx/access_grpc.log main;

        location / {
            grpc_pass grpcs://dialogflow.googleapis.com:443;
        }

        ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
        ssl_certificate_key/etc/letsencrypt/live/exemple.com/privkey.pem;
    }

    server {

        if ($host = example.com) {
            return 301 https://$host$request_uri;
        }

        listen 80 ;
        listen [::]:80 ;

        return 404; # managed by Certbot

    }

}

1 个答案:

答案 0 :(得分:0)

GRPC元数据可能存在问题(尤其是用户代理)。看一下这些问题:

https://github.com/grpc/grpc-go/issues/1888

https://github.com/improbable-eng/grpc-web/issues/145