gRPC を使用して Golang でデータ暗号化を実装するためのベスト プラクティス

syntax = "proto3";

package encrypt;

message Request {
  string plaintext = 1;
}

message Response {
  string ciphertext = 1;
}

service EncryptService {
  rpc Encrypt(Request) returns (Response) {}
}

protoc -I . encrypt.proto --go_out=plugins=grpc:.

import (
    "context"
    "google.golang.org/grpc"
    "google.golang.org/grpc/credentials"
    pb "your_package_path"
    "net"
)

type server struct{}

func (s *server) Encrypt(ctx context.Context, req *pb.Request) (*pb.Response, error) {
    // 数据加密逻辑
    ciphertext := encrypt(req.Plaintext)
    return &pb.Response{Ciphertext: ciphertext}, nil
}

func main() {
    // 加载证书
    creds, err := credentials.NewServerTLSFromFile("server.crt", "server.key")
    if err != nil {
        log.Fatalf("Failed to generate credentials: %v", err)
    }

    // 创建gRPC服务器
    lis, err := net.Listen("tcp", ":50051")
    if err != nil {
        log.Fatalf("Failed to listen: %v", err)
    }

    // 使用TLS/SSL加密
    grpcServer := grpc.NewServer(grpc.Creds(creds))
    pb.RegisterEncryptServiceServer(grpcServer, &server{})
    grpcServer.Serve(lis)
}

import (
    "context"
    "google.golang.org/grpc"
    "google.golang.org/grpc/credentials"
    pb "your_package_path"
)

func main() {
    // 加载证书
    creds, err := credentials.NewClientTLSFromFile("server.crt", "")
    if err != nil {
        log.Fatalf("Failed to generate credentials: %v", err)
    }

    // 建立连接
    conn, err := grpc.Dial("localhost:50051", grpc.WithTransportCredentials(creds))
    if err != nil {
        log.Fatalf("Failed to connect: %v", err)
    }
    defer conn.Close()

    // 创建gRPC客户端
    client := pb.NewEncryptServiceClient(conn)

    // 发送请求
    resp, err := client.Encrypt(context.Background(), &pb.Request{Plaintext: "Hello gRPC"})
    if err != nil {
        log.Fatalf("Failed to encrypt: %v", err)
    }

    // 处理响应
    fmt.Println("Ciphertext:", resp.Ciphertext)
}