Configuring a gRPC tunnel in SR OS

Configure the destination group.

Configure 1 or 2 destinations using the destination command.
Configure whether transport is secure or unsecure using the allow-secure-connection command.
Configure the router instance using the router-instance command.
Optionally, configure a local source address using the local-source-address command.
Optionally, configure the TCP keepalive interval using the tcp-keepalive command.

Configure the gRPC tunnel.

Assign a destination group using the destination-group command.
Enable the tunnel.
Define the target name using the target-name command.
Configure one or more handlers using the handler command.

Configure the internal application server.

Example MD-CLI

*(ex)[/configure system]
    grpc-tunnel {
        destination-group "ba-server" {
            allow-unsecure-connection
            destination 1.1.1.1 port 33333 {
                   router-instance "management"
               }
            }
        tunnel “test” {
            admin-state enable
            destination-group “ba-server”
            target-name { node-name} 
            handler “my-grpc” {
                admin-state enable
                target-type { grpc-server } 
                port 57400
            }
            handler “ssh” {             
                admin-state enable
                target-type { ssh-server } 
                port 22
            }
        }
    }   
    grpc {
        admin-state enable
        allow-unsecure-connection
        gnmi {
            admin-state enable
        }
    }

Example Classic CLI

*A:cses-V23>config>system#
    grpc-tunnel {
        destination-group "ba-server" create {
            allow-unsecure-connection
            destination 1.1.1.1 port 33333 create {
                   router-instance "management"
               }
            }
        tunnel “test” create{
            destination-group “ba-server”
            target-name { node-name} 
            no shutdown
            handler “my-grpc” create{
                target-type { grpc-server } 
                port 57400
                no shutdown
            }
            handler “ssh” create{             
                target-type { ssh-server } 
                port 22
                no shutdown
            }
        }
    }   
    grpc {
        allow-unsecure-connection
        no shutdown
        gnmi {
            no shutdown
        }
    }

Configuring a gRPC tunnel in SR OS

About this task

Procedure