Increase gRPC max message size from 4MB to 10MB (#370)

tudor-timcu · web-flow · commit 515c5f50aac6 · 2025-12-05T13:26:02.000+02:00
diff --git a/README.md b/README.md
@@ -39,25 +39,25 @@ Prerequisites:
 
 ##### x86_64
 ```
-rpm -Uvh --oldpackage https://github.com/AikidoSec/firewall-php/releases/download/v1.4.9/aikido-php-firewall.x86_64.rpm
+rpm -Uvh --oldpackage https://github.com/AikidoSec/firewall-php/releases/download/v1.4.10/aikido-php-firewall.x86_64.rpm
 ```
 
 ##### arm64 / aarch64
 ```
-rpm -Uvh --oldpackage https://github.com/AikidoSec/firewall-php/releases/download/v1.4.9/aikido-php-firewall.aarch64.rpm
+rpm -Uvh --oldpackage https://github.com/AikidoSec/firewall-php/releases/download/v1.4.10/aikido-php-firewall.aarch64.rpm
 ```
 
 #### For Debian-based Systems (Debian, Ubuntu)
 
 ##### x86_64
 ```
-curl -L -O https://github.com/AikidoSec/firewall-php/releases/download/v1.4.9/aikido-php-firewall.x86_64.deb
+curl -L -O https://github.com/AikidoSec/firewall-php/releases/download/v1.4.10/aikido-php-firewall.x86_64.deb
 dpkg -i -E ./aikido-php-firewall.x86_64.deb
 ```
 
 ##### arm64 / aarch64
 ```
-curl -L -O https://github.com/AikidoSec/firewall-php/releases/download/v1.4.9/aikido-php-firewall.aarch64.deb
+curl -L -O https://github.com/AikidoSec/firewall-php/releases/download/v1.4.10/aikido-php-firewall.aarch64.deb
 dpkg -i -E ./aikido-php-firewall.aarch64.deb
 ```
 
diff --git a/docs/aws-elastic-beanstalk.md b/docs/aws-elastic-beanstalk.md
@@ -4,7 +4,7 @@
 ```
 commands:
   aikido-php-firewall:
-    command: "rpm -Uvh --oldpackage https://github.com/AikidoSec/firewall-php/releases/download/v1.4.9/aikido-php-firewall.x86_64.rpm"
+    command: "rpm -Uvh --oldpackage https://github.com/AikidoSec/firewall-php/releases/download/v1.4.10/aikido-php-firewall.x86_64.rpm"
     ignoreErrors: true
 
 files:
diff --git a/docs/fly-io.md b/docs/fly-io.md
@@ -32,7 +32,7 @@ Create a script to install the Aikido PHP Firewall during deployment:
 #!/usr/bin/env bash
 cd /tmp
 
-curl -L -O https://github.com/AikidoSec/firewall-php/releases/download/v1.4.9/aikido-php-firewall.x86_64.deb
+curl -L -O https://github.com/AikidoSec/firewall-php/releases/download/v1.4.10/aikido-php-firewall.x86_64.deb
 dpkg -i -E ./aikido-php-firewall.x86_64.deb
 ```
 
diff --git a/docs/laravel-forge.md b/docs/laravel-forge.md
@@ -8,7 +8,7 @@ You can get your token from the [Aikido Security Dashboard](https://help.aikido.
 
 Go to "Commands" and run the following by replacing the sudo password with the one that Forge displays when the server is created:
 ```
-curl -L -O https://github.com/AikidoSec/firewall-php/releases/download/v1.4.9/aikido-php-firewall.x86_64.deb && echo "YOUR_SUDO_PASSWORD_HERE" | sudo -S dpkg -i -E ./aikido-php-firewall.x86_64.deb && echo "YOUR_SUDO_PASSWORD_HERE" | sudo -S service php8.4-fpm restart
+curl -L -O https://github.com/AikidoSec/firewall-php/releases/download/v1.4.10/aikido-php-firewall.x86_64.deb && echo "YOUR_SUDO_PASSWORD_HERE" | sudo -S dpkg -i -E ./aikido-php-firewall.x86_64.deb && echo "YOUR_SUDO_PASSWORD_HERE" | sudo -S service php8.4-fpm restart
 ```
 
 ![Forge Commands](./forge-commands.png)
diff --git a/lib/agent/constants/constants.go b/lib/agent/constants/constants.go
@@ -1,7 +1,7 @@
 package constants
 
 const (
-	Version                             = "1.4.9"
+	Version                             = "1.4.10"
 	SocketPath                          = "/run/aikido-" + Version + "/aikido-agent.sock"
 	PidPath                             = "/run/aikido-" + Version + "/aikido-agent.pid"
 	ConfigUpdatedAtMethod               = "GET"
diff --git a/lib/agent/grpc/server.go b/lib/agent/grpc/server.go
@@ -174,7 +174,10 @@ func (s *GrpcServer) OnMonitoredUserAgentMatch(ctx context.Context, req *protos.
 var grpcServer *grpc.Server
 
 func StartServer(lis net.Listener) {
-	grpcServer = grpc.NewServer() //grpc.MaxConcurrentStreams(100)
+	grpcServer = grpc.NewServer(
+		grpc.MaxRecvMsgSize(10*1024*1024), // 10MB max receive message size
+		grpc.MaxSendMsgSize(10*1024*1024), // 10MB max send message size
+	)
 	protos.RegisterAikidoServer(grpcServer, &GrpcServer{})
 
 	log.Infof(log.MainLogger, "gRPC server is running on Unix socket %s", constants.SocketPath)
diff --git a/lib/php-extension/include/php_aikido.h b/lib/php-extension/include/php_aikido.h
@@ -3,7 +3,7 @@
 extern zend_module_entry aikido_module_entry;
 #define phpext_aikido_ptr &aikido_module_entry
 
-#define PHP_AIKIDO_VERSION "1.4.9"
+#define PHP_AIKIDO_VERSION "1.4.10"
 
 #if defined(ZTS) && defined(COMPILE_DL_AIKIDO)
 ZEND_TSRMLS_CACHE_EXTERN()
diff --git a/lib/request-processor/globals/globals.go b/lib/request-processor/globals/globals.go
@@ -62,6 +62,6 @@ func CreateServer(token string) *ServerData {
 }
 
 const (
-	Version    = "1.4.9"
+	Version    = "1.4.10"
 	SocketPath = "/run/aikido-" + Version + "/aikido-agent.sock"
 )
diff --git a/lib/request-processor/grpc/client.go b/lib/request-processor/grpc/client.go
@@ -23,6 +23,9 @@ func Init() {
 	conn, err := grpc.Dial(
 		"unix://"+globals.SocketPath,
 		grpc.WithTransportCredentials(insecure.NewCredentials()),
+		grpc.WithDefaultCallOptions(
+			grpc.MaxCallRecvMsgSize(10*1024*1024),  // 10MB max receive message size
+			grpc.MaxCallSendMsgSize(10*1024*1024)), // 10MB max receive message size
 	)
 
 	if err != nil {
diff --git a/package/rpm/aikido.spec b/package/rpm/aikido.spec
@@ -1,5 +1,5 @@
 Name:           aikido-php-firewall
-Version:        1.4.9
+Version:        1.4.10
 Release:        1
 Summary:        Aikido PHP Extension
 License:        GPL
diff --git a/tests/server/test_blocked_ip_from_dummy_config/env.json b/tests/server/test_blocked_ip_from_dummy_config/env.json
@@ -0,0 +1,5 @@
+{
+    "AIKIDO_BLOCK": "1",
+    "AIKIDO_LOCALHOST_ALLOWED_BY_DEFAULT": "0",
+    "AIKIDO_FEATURE_COLLECT_API_SCHEMA": "1"
+}
diff --git a/tests/server/test_blocked_ip_from_dummy_config/index.php b/tests/server/test_blocked_ip_from_dummy_config/index.php
@@ -0,0 +1,5 @@
+<?php
+
+echo "Something";
+
+?>
diff --git a/tests/server/test_blocked_ip_from_dummy_config/start_config.json b/tests/server/test_blocked_ip_from_dummy_config/start_config.json
diff --git a/tests/server/test_blocked_ip_from_dummy_config/test.py b/tests/server/test_blocked_ip_from_dummy_config/test.py

Original file line number	Diff line number	Diff line change
`@@ -62,6 +62,6 @@ func CreateServer(token string) *ServerData {`
`62`	`62`	`}`
`63`	`63`
`64`	`64`	`const (`
`65`		`- Version = "1.4.9"`
	`65`	`+ Version = "1.4.10"`
`66`	`66`	`SocketPath = "/run/aikido-" + Version + "/aikido-agent.sock"`
`67`	`67`	`)`
Original file line number	Diff line number	Diff line change
`@@ -23,6 +23,9 @@ func Init() {`
`23`	`23`	`conn, err := grpc.Dial(`
`24`	`24`	`"unix://"+globals.SocketPath,`
`25`	`25`	`grpc.WithTransportCredentials(insecure.NewCredentials()),`
	`26`	`+ grpc.WithDefaultCallOptions(`
	`27`	`+ grpc.MaxCallRecvMsgSize(1010241024), // 10MB max receive message size`
	`28`	`+ grpc.MaxCallSendMsgSize(1010241024)), // 10MB max receive message size`
`26`	`29`	`)`
`27`	`30`
`28`	`31`	`if err != nil {`