How to terminate TLS to subgraphs

[sathishece170]

Hello,

Is there a way to terminate the TLS at router to all subgraphs? I see a documentation about enabling/configuring them but nothing about termination.

Can we configure something like this?

tls:    
   subgraph:    
       all:    
          enabled: false

[SimonSapin]

Could you say more about what you mean by TLS termination? It usually refers to the server side of a given connection, which needs to be configured with a certificate. The Router is only a server to supergraph clients, where you can either configure a certificate for Router to do TLS termination itself, or have some other intermediate proxy that acts an HTTPS server, takes care of TLS termination, and the forwards requests to Router in unencrypted HTTP.

When the Router talks to subgraphs it is an HTTP(S) client so it’s not aware of what remote subgraph servers are doing for TLS termination.

If instead of termination you mean to disable TLS so that the Router connects to subgraphs with unencrypted HTTP (which may be fine on a local trusted network), configure your supergraph schema to use http:// URLs for subgraphs instead of https://. There is no YAML configuration to force the use of unencrypted HTTP for https:// URLs.