Comment on page
Proxy capabilities
When working in a federated architecture the need to propagate / orchestrate client data is common. We provide several ways to simplify the work with it.
Forwarding specific client headers to your subgraphs is a straightforward process. By default, no headers are forwarded for security reasons. To enable header forwarding, insert the following snippet into your config.yaml file and adjust it according to your needs.
# config.yaml
# See https://cosmo-docs.wundergraph.com/router/configuration#config-file
# for the full list of configuration options.
headers:
all: # Header rules for all subgraph requests.
request:
- op: "propagate" # Forward a client header
named: X-Test-Header # Exact match (Use the canonicalized version)
- op: "propagate"
matching: (?i)^X-Custom-.* # Regex match (Case insensitive)
- op: "propagate"
named: "X-User-Id"
default: "123" # Set the value when the header was not set
subgraphs:
specific-subgraph: # Will only affect this subgraph
request:
- op: "propagate"
named: Subgraph-Secret
default: "some-secret"
With
all
we address all subgraph requests. Next, we can define several rules on the client's request. The operation propagate
forwards all matching client request headers to the subgraphs. The
subgraphs
section allows to propagate headers for specific subgraphs. The name must match with the subgraph name in the Studio.Currently, we support the following header rules:
- propagate - Forwards all matching client request headers to the subgraphs. You can choose between one of the following matchers:
- named - It exactly matches on the header name.
- matching - Regex matches on the header name. You can use regex101.com to test your regexes. Go to the website and select
Golang
on the left panel. Note: The Router never propagates hop-by-hop headers (such asConnection
) when propagating by regex.
Go canonicalize headers by default e.g.
x-my-header
to X-My-Header.
Write your rule accordingly or use (?i)
^X-Test-.*
flags to make your regex case insensitive.You can also define a value when the client header is not set by the client. Can only be used with the named matcher.
all:
request:
- op: "propagate"
named: "X-User-Id"
default: "123"
All rules are evaluated in the order they are defined.
Please inform us if you have more advanced use cases that cannot be accommodated with the current feature set. You can still use Custom Modules to implement any logic yourself. You can aggregate, remove, or add headers as you like.
By default, we read the routing URL for each of your subgraphs from the router config. In most cases, no additional configuration is required.
However, if you do need to override a particular subgraph's routing URL (for example, to handle changing network topography), you can do so with the
override_subgraph_url
option:override_routing_url:
subgraphs:
some-subgraph: http://router:3002/graphql
A more practical example is for routers inside a Kubernetes cluster so they can use the cluster-local DNS name while keeping the public DNS name config in the control plane.
Keep in mind, that this will also modify the URLs in your router config.
Last modified 1mo ago