Inquiry About Missing --http-host Option in trace_processor_shell

6 views
Skip to first unread message

yohai gevim

unread,
Mar 11, 2025, 5:13:32 AMMar 11
to perfet...@googlegroups.com, Gevim, Yohai

Hello,

I’ve been using perfetto trace_processor_shell and noticed that it does not provide an option like --http-host to allow connections from remote machines. This seems like a straightforward change, yet it's not available.
I’d like to understand the reasoning behind this—was it intentionally left out for security reasons, or are there other technical considerations?

Currently, I’m using SSH tunneling as a workaround, but I’m curious if there are any plans to officially support remote connections in a more direct way.

Thanks,
Yohai

Lalit Maganti

unread,
Mar 11, 2025, 5:19:57 AMMar 11
to yohai gevim, Perfetto Development - www.perfetto.dev, Gevim, Yohai
Yes it was intentionally left out for security reasons. We don't want to take the burden of people opening themselves up public ports because we don't try in any way to be secure over our http protocol. 

SSH tunneling is our suggested mechanism for doing this and one we use extensively. 

--
You received this message because you are subscribed to the Google Groups "Perfetto Development - www.perfetto.dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to perfetto-dev...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/perfetto-dev/CALJX3GCm-UyQTBXo%2BBz5MUZ%3D8zR1nZTrcJ2a06%2BFMBzyphEcug%40mail.gmail.com.

Lalit Maganti

unread,
Mar 11, 2025, 5:31:43 AMMar 11
to yohai gevim, Perfetto Development - www.perfetto.dev, Gevim, Yohai
Fwiw you can always put a reverse proxy in front of us and expose TP. I think that should work even with the current implementation. 

yohai gevim

unread,
Mar 11, 2025, 6:35:56 AMMar 11
to Lalit Maganti, Perfetto Development - www.perfetto.dev, Gevim, Yohai
Ok, thanks for the clarification. 
Reply all
Reply to author
Forward
0 new messages