Hasura Community Edition (CE) limitations

[hongbo-miao]

Hasura GraphQL Engine is an awesome project. Definitely worth considering its Hasura Enterprise Edition (EE) and Hasura Cloud version to save months or even years developing time.

Here are some limitations of the Hasura Community Edition (CE) and workaround solutions:

• No rate limiting: https://github.com/hasura/graphql-engine/issues/2151
  • Solution: use Traefik with RateLimit middleware: https://doc.traefik.io/traefik/middlewares/http/ratelimit/
• Cannot disable GraphQL Introspection (if not use Hasura Allow Lists): https://github.com/hasura/graphql-engine/issues/8348
  • Solution: use Traefik with Disable GraphQL Introspection plugin: https://github.com/Hongbo-Miao/traefik-plugin-disable-graphql-introspection
• No depth limiting and query cost analysis: https://github.com/hasura/graphql-engine/issues/2151
  • Solution: Hasura Allow Lists (this is too strict though) https://hasura.io/docs/latest/graphql/core/deployment/allow-list/
• No Prometheus: https://github.com/hasura/graphql-engine/issues/6336
  • Solutions:
  • hasura-metric-adapter: https://github.com/afitzek/hasura-metric-adapter
    • Including hasura-exporter features: https://github.com/afitzek/hasura-metric-adapter/pull/4
  • hasura-exporter: https://github.com/zolamk/hasura-exporter

[hongbo-miao]

• Traefik as reverse proxy added by
  • https://github.com/Hongbo-Miao/hongbomiao.com/pull/4876
  • RateLimit middleware: https://github.com/Hongbo-Miao/hongbomiao.com/pull/4882
  • Disable GraphQL Introspection plugin: https://github.com/Hongbo-Miao/hongbomiao.com/pull/4929
• Hasura Allow Lists added by
  • https://github.com/Hongbo-Miao/hongbomiao.com/pull/4795
• hasura-metric-adapter added by
  • https://github.com/Hongbo-Miao/hongbomiao.com/pull/4802
  • https://github.com/Hongbo-Miao/hongbomiao.com/pull/4809

[edulix]

What about running multiple instances of Hasura for scaling and High Availability? According to the documentation:

"Also, with multiple instances of Hasura connected to the same database, you might run into issues such as the event triggers duplicating events or unreliable subscriptions. Hasura HA eliminates those issues."

The unreliable subscriptions probably can be fixed using Traefik sticky sessions.

For solving the duplication of events the only idea I have is maintaining a single node with the event configuration but that seems messy. Any ideas?

[hongbo-miao]

Hey @edulix, just noticed your message. I had muted this repo due to constant notifications from the bot about pull requests. However, I've now updated my GitHub CODEOWNERS file, so everything should be good. Repo is unmuted!

Regarding Hasura events, I'd personally steer clear and opt for Postgres CDC with Debezium instead. While Hasura does support things like events and SQL migrations, using specialized tools for these tasks seems more professional. Relying solely on Hasura for everything could be risky and challenging to scale. Hope that makes sense! ☺️