Stream: implementers
Topic: guidance on use of API Gateway
John Moehrke (Oct 18 2017 at 14:19):
Is there any specific guidance on FHIR use with an API Gateway? Is there anything special to be concerned about? Is there any specific advantage to the use of FHIR? --- I am not asking for general discussion of merits of API Gateway... just the impact on or because of FHIR.
Grahame Grieve (Oct 22 2017 at 20:07):
there's this:
Grahame Grieve (Oct 22 2017 at 20:07):
http://hl7.org/fhir/http.html#2.21.0.21
John Moehrke (Oct 23 2017 at 14:38):
Thanks Grahame. That seems more specific to proxies, not API-Gateways. Where an API-Gateway is a load-balancing/service-provisioning/re-locating architectural implementation for large-scale cloud deployments, especially Micro-Services... I think... I would hope there is no impact, but I just figured I would ask for experience so far. Would an API-Gateway lesson the need for CORS?
Jenni Syed (Oct 23 2017 at 15:51):
You would need CORS either way if you want SMART apps to be able to call your server - the only reason it would lessen that need would be exposing all "your" APIs out of 1 central server (so you yourself may not use CORS). I don't think this was the primary use for CORS though :)
John Moehrke (Oct 23 2017 at 16:01):
That is one of the uses of an API-Gateway... to be a single point of entry for many services, (and services provisioning in many places dynamically)... So it would be a single entrypoint... but of-course only for your services.. but CORS doesn't really address services that someone else is running anyway.
Kevin Mayfield (Nov 03 2017 at 16:37):
We're looking at using X-Request-ID (for correlation) and X-Forwarded-For (originating IP) headers. I presume that isn't contray to fhir specs? Couldn't see anything.
Kevin Mayfield (Nov 03 2017 at 16:38):
also X-Forwarded-Host for original host
Grahame Grieve (Nov 03 2017 at 20:34):
no. Note this section: http://build.fhir.org/http.html#2.21.0.21
Kevin Mayfield (Nov 03 2017 at 21:54):
Is that no to just the correlation Id?
Grahame Grieve (Nov 04 2017 at 03:35):
no, the things you have suggested are not contrary to the spec
Kevin Mayfield (Nov 05 2017 at 10:17):
Cheers.
So no other (FHIR) project has issued guidance on this?
Grahame Grieve (Nov 05 2017 at 19:37):
not that I know of
Brian Postlethwaite (Nov 10 2017 at 08:16):
If you're implementing one of these gateways, or redirects, you'd want to be careful to ensure all the relative/absolute references were handled correctly. (including where references are in extensions)
Last updated: Apr 12 2022 at 19:14 UTC
