Cap'n Proto

Cap’n Proto is a data serialization format and Remote Procedure Call (RPC) framework for exchanging data between computer programs. The high-level design focuses on speed and security, making it suitable for network as well as inter-process communication. Cap'n Proto was created by the former maintainer of Google's popular Protocol Buffers framework (Kenton Varda) and was designed to avoid some of its perceived shortcomings.

Technical overview[]

IDL Schema[]

Like most RPC frameworks dating as far back as Sun RPC and OSF DCE RPC (and their object-based descendants CORBA and DCOM), Cap'n Proto uses an Interface Description Language (IDL) to generate RPC libraries in a variety of programming languages - automating many low level details such as handling network requests, converting between data types, etc. The Cap'n Proto interface schema uses a C-like syntax and supports common primitives data types (booleans, integers, floats, etc.), compound types (structs, lists, enums), as well as generics and dynamic types.^[1] Cap'n Proto also supports Object Oriented features such as multiple inheritance, which has been criticized for its complexity.^[2]

@0xa558ef006c0c123; #Unique identifiers are manually or automatically assigned to files and compound types

struct Date @0x5c5a558ef006c0c1 {
  year @0 :Int16; #@n marks order values were added to the schema
  month @1 :UInt8;
  day @2 :UInt8;
}

struct Contact @0xf032a54bcb3667e0 {
  name @0 :Text;
  birthday @2 :Date; #fields can be added anywhere in the definition, but their numbering must reflect the order in which they were added

  phones @1 :List(PhoneNumber);

  struct PhoneNumber { #Compound types without an static ID cannot be renamed, as automatic IDs are determinstically generated
    number @0 :Text;
    type @1 :PhoneType = mobile; #Default value

    enum PhoneType {
      mobile @0;
      landline @1;
    }
  }
}

Values in Cap'n Proto messages are represented in binary, as opposed text encoding used by "human-readable" formats such as JSON or XML. Cap'n Proto tries to make the storage/network protocol appropriate as an in-memory format, so that no translation step is needed when reading data into memory or writing data out of memory.^{[note 1]} For example, the representation of numbers (endianness) was chosen to match the representation the most popular CPU architectures.^[3] When the in-memory and wire-protocol representations match, Cap'n Proto can avoid copying and encoding data when creating or reading a message and instead point to the location of the value in memory. Cap'n Proto also supports random access to data, meaning that any field can be read without having to read the entire message.^[4]

Unlike other binary serialization protocols such as XMI, Cap'n Proto considers fine-grained data validation at the RPC level an anti-feature that limits a protocols ability to evolve. This was informed by experiences at Google where simply changing a field from mandatory to optional would cause complex operational failures.^{[5][note 2]} Cap'n Proto schemas are designed to be flexible as possible and pushes data validation to the application level, allowing arbitrary renaming of fields, adding new fields, and making concrete types generic^[6] Cap'n Proto does, however, validate pointer bounds and type check individual values when they are first accessed.^[4]

Enforcing complex schema constraints would also incur significant overhead,^{[note 3]} negating the benefits of reusing in-memory data structures and preventing random access to data.^[7] Cap'n Proto protocol is theoretically suitable^[8] for very fast inter-process communication (IPC) via immutable shared memory, but as of October 2020 none of the implementations support data passing via shared memory.^[9] However, Cap'n Proto is still generally considered faster than Protocol Buffers and similar RPC libraries.^[10][11]

Networking[]

Cap'n Proto RPC is network aware: supporting both handling of disconnects and promise pipelining, wherein a server pipes the output of one function into another function. This saves a client a round trip per successive call to the server without having to provide a dedicated API for every possible call graph. Cap'n Proto can be layered on top of TLS^[12] and support for the is on the roadmap.^[13] Cap'n Proto RPC is transport agnostic, with the mainline implementation supporting WebSockets, HTTP, TCP, and UDP.^[14]

Capability security[]

The Cap'n Proto RPC standard has a rich capability security model based on the CapTP protocol used by the E programming language.^[15]

This section needs expansion. You can help by . (March 2021)

As of October 2020, the reference implementation only supports level 2.^[13]

Adoption[]

Cap'n Proto was originally created for Sandstorm.io, a startup offering a web application hosting platform with capability-based security. After Sandstorm.io failed commercially, the development team was acqui-hired by Cloudflare;^[16] which uses Cap'n Proto internally.^[17]

While Cap'n Proto has code generators in a variety of languages, the immaturity of the implementations and relatively smaller number (compared to Protocol Buffers or FlatBuffers) is frequently cited as a barrier to adoption.^[18][19]

Notes[]

References[]