gRPC on canton Admin-API

My client wishes to confirm that canton component (participant node, sequencer, etc) is not able to initiate any request to a canton console. It is due to some security policy in their infrastructure.

My understanding is that the remote console is the gRPC client, and is always the one initiating gPRC connection and sending requests to the admin-api of the canton component. The canton component only sees some requests hitting the admin-api and then starts responding them. The canton component will not keep the console details (ip/port) that later connection can be initiated back.

See if my understanding is correct.

Thanks in advance.

kc

1 Like

Hey @kctam,

Your understanding is correct.
Only the console initiates requests towards the participant/sequencer and any other kinds of nodes and not the other way around.

Hope this answers your question :smiley:

2 Likes