Skip to content
SP StackPractices
intermediate

Implement a gRPC API with Protocol Buffers

How to implement a gRPC API using Protocol Buffers for high-performance service-to-service communication

Topics: api

Overview

gRPC is a high-performance RPC framework that uses Protocol Buffers for serialization and HTTP/2 for transport. It is significantly faster than REST for service-to-service communication, supports bidirectional streaming, and generates client/server stubs from a single schema definition. This recipe covers defining a .proto file, implementing unary and streaming services, and adding interceptors for cross-cutting concerns.

When to Use

Use this resource when:

  • You need low-latency, strongly typed service-to-service communication
  • Your architecture relies on streaming (server push, client push, or bidirectional)
  • You want automatic client library generation across multiple languages
  • You are building microservices where JSON parsing overhead is a bottleneck

Solution

Python

# service.proto
# syntax = "proto3";
# message HelloRequest { string name = 1; }
# message HelloResponse { string message = 1; }
# service Greeter {
#   rpc SayHello (HelloRequest) returns (HelloResponse);
# }

import grpc
from concurrent import futures
import service_pb2
import service_pb2_grpc

class GreeterServicer(service_pb2_grpc.GreeterServicer):
    def SayHello(self, request, context):
        return service_pb2.HelloResponse(
            message=f"Hello, {request.name}!"
        )

    def StreamGreetings(self, request_iterator, context):
        for req in request_iterator:
            yield service_pb2.HelloResponse(message=f"Streamed: {req.name}")

def serve():
    server = grpc.server(futures.ThreadPoolExecutor(max_workers=10))
    service_pb2_grpc.add_GreeterServicer_to_server(GreeterServicer(), server)
    server.add_insecure_port("[::]:50051")
    server.start()
    server.wait_for_termination()

# Client
channel = grpc.insecure_channel("localhost:50051")
stub = service_pb2_grpc.GreeterStub(channel)
response = stub.SayHello(service_pb2.HelloRequest(name="World"))
print(response.message)

JavaScript

// Server (Node.js with @grpc/grpc-js)
const grpc = require('@grpc/grpc-js');
const protoLoader = require('@grpc/proto-loader');

const packageDefinition = protoLoader.loadSync('service.proto');
const proto = grpc.loadPackageDefinition(packageDefinition).greeter;

function sayHello(call, callback) {
  callback(null, { message: `Hello, ${call.request.name}` });
}

function streamGreetings(call) {
  call.on('data', (req) => {
    call.write({ message: `Streamed: ${req.name}` });
  });
  call.on('end', () => call.end());
}

const server = new grpc.Server();
server.addService(proto.Greeter.service, { sayHello, streamGreetings });
server.bindAsync('0.0.0.0:50051', grpc.ServerCredentials.createInsecure(), () => {
  server.start();
});

// Client
const client = new proto.Greeter('localhost:50051', grpc.credentials.createInsecure());
client.sayHello({ name: 'World' }, (err, response) => {
  console.log(response.message);
});

Java

// Service definition + server
import io.grpc.Server;
import io.grpc.ServerBuilder;
import io.grpc.stub.StreamObserver;

public class GreeterServer {
    public static void main(String[] args) throws Exception {
        Server server = ServerBuilder.forPort(50051)
            .addService(new GreeterImpl())
            .build()
            .start();
        server.awaitTermination();
    }

    static class GreeterImpl extends GreeterGrpc.GreeterImplBase {
        @Override
        public void sayHello(HelloRequest req, StreamObserver<HelloResponse> responseObserver) {
            HelloResponse reply = HelloResponse.newBuilder()
                .setMessage("Hello, " + req.getName())
                .build();
            responseObserver.onNext(reply);
            responseObserver.onCompleted();
        }
    }
}

// Client
ManagedChannel channel = ManagedChannelBuilder.forAddress("localhost", 50051)
    .usePlaintext()
    .build();
GreeterGrpc.GreeterBlockingStub stub = GreeterGrpc.newBlockingStub(channel);
HelloResponse response = stub.sayHello(HelloRequest.newBuilder().setName("World").build());
System.out.println(response.getMessage());
channel.shutdown();

Explanation

gRPC workflows are contract-first: you define a .proto schema, then generate code for any supported language. The generated code handles serialization (Protocol Buffers binary format), wire transport (HTTP/2), and client/server stubs.

Unary RPC: one request, one response. Simplest mode; equivalent to a REST POST. Server streaming: one request, many responses. Useful for live feeds or paginated results. Client streaming: many requests, one response. Useful for batch uploads. Bidirectional streaming: both sides stream independently. Ideal for chat or real-time collaboration.

Trade-offs:

  • gRPC is faster than REST but requires HTTP/2 support and .proto tooling
  • Browser clients need a gRPC-Web proxy (Envoy, grpcwebproxy)
  • Debugging is harder than JSON because payloads are binary

Variants

TechnologyApproachNotes
Pythongrpcio + grpcio-toolsMature, threaded server; asyncio support via grpc.aio
Node.js@grpc/grpc-jsPure JS, no native deps; supports all streaming modes
Javaio.grpc (Netty transport)High performance; integrates with Spring Boot via grpc-spring-boot-starter
Gogoogle.golang.org/grpcFirst-class support; fastest performance in benchmarks
RusttonicAsync-first with Tokio; excellent performance

Best Practices

  1. Version your .proto files and never remove or renumber existing fields
  2. Use interceptors (middleware) for cross-cutting concerns: auth, logging, retries
  3. Set deadlines/timeouts on every RPC call to prevent cascading hangs
  4. Use grpc.health.v1 health checks for Kubernetes readiness probes
  5. Keep messages small (<1 MB); use streaming or separate object stores for large payloads

Common Mistakes

  1. Changing field numbers — this breaks binary compatibility; always add new fields with new numbers
  2. No timeouts — default gRPC calls wait forever; always set a deadline
  3. Blocking the event loop — in Node.js, gRPC callbacks must not block; use async patterns
  4. Ignoring HTTP/2 flow control — streaming too fast can stall; backpressure is your friend
  5. No load balancing — gRPC connections are persistent; use client-side LB or a service mesh

Frequently Asked Questions

Can I use gRPC from a browser?

Not directly. Browsers cannot speak raw HTTP/2 gRPC. Use gRPC-Web with a proxy (Envoy) or switch to Connect-RPC, which supports both gRPC and standard HTTP/1.1 JSON.

Should I replace all my REST APIs with gRPC?

No. gRPC excels at internal microservices. For public-facing APIs and browser clients, REST or GraphQL are usually better choices due to broader tooling and easier debugging.

How do I handle authentication?

gRPC metadata (headers) carry tokens. Attach an interceptor on the client to inject authorization metadata, and on the server to validate it. Standard JWT or API key patterns work unchanged.