Status codes and their use in gRPC

gRPC uses a set of well defined status codes as part of the RPC API. These statuses are defined as such:

CodeNumberDescriptionClosest HTTP Mapping
OK0Not an error; returned on success.200 OK
CANCELLED1The operation was cancelled, typically by the caller.499 Client Closed Request
UNKNOWN2Unknown error. For example, this error may be returned when a Status value received from another address space belongs to an error space that is not known in this address space. Also errors raised by APIs that do not return enough error information may be converted to this error.500 Internal Server Error
INVALID_ARGUMENT3The client specified an invalid argument. Note that this differs from FAILED_PRECONDITION. INVALID_ARGUMENT indicates arguments that are problematic regardless of the state of the system (e.g., a malformed file name).400 Bad Request
DEADLINE_EXCEEDED4The deadline expired before the operation could complete. For operations that change the state of the system, this error may be returned even if the operation has completed successfully. For example, a successful response from a server could have been delayed long504 Gateway Timeout
NOT_FOUND5Some requested entity (e.g., file or directory) was not found. Note to server developers: if a request is denied for an entire class of users, such as gradual feature rollout or undocumented whitelist, NOT_FOUND may be used. If a request is denied for some users within a class of users, such as user-based access control, PERMISSION_DENIED must be used.404 Not Found
ALREADY_EXISTS6The entity that a client attempted to create (e.g., file or directory) already exists.409 Conflict
PERMISSION_DENIED7The caller does not have permission to execute the specified operation. PERMISSION_DENIED must not be used for rejections caused by exhausting some resource (use RESOURCE_EXHAUSTED instead for those errors). PERMISSION_DENIED must not be used if the caller can not be identified (use UNAUTHENTICATED instead for those errors). This error code does not imply the request is valid or the requested entity exists or satisfies other pre-conditions.403 Forbidden
UNAUTHENTICATED16The request does not have valid authentication credentials for the operation.401 Unauthorized
RESOURCE_EXHAUSTED8Some resource has been exhausted, perhaps a per-user quota, or perhaps the entire file system is out of space.429 Too Many Requests
FAILED_PRECONDITION9The operation was rejected because the system is not in a state required for the operation's execution. For example, the directory to be deleted is non-empty, an rmdir operation is applied to a non-directory, etc. Service implementors can use the following guidelines to decide between FAILED_PRECONDITION, ABORTED, and UNAVAILABLE: (a) Use UNAVAILABLE if the client can retry just the failing call. (b) Use ABORTED if the client should retry at a higher level (e.g., when a client-specified test-and-set fails, indicating the client should restart a read-modify-write sequence). (c) Use FAILED_PRECONDITION if the client should not retry until the system state has been explicitly fixed. E.g., if an “rmdir” fails because the directory is non-empty, FAILED_PRECONDITION should be returned since the client should not retry unless the files are deleted from the directory.400 Bad Request
ABORTED10The operation was aborted, typically due to a concurrency issue such as a sequencer check failure or transaction abort. See the guidelines above for deciding between FAILED_PRECONDITION, ABORTED, and UNAVAILABLE.409 Conflict
OUT_OF_RANGE11The operation was attempted past the valid range. E.g., seeking or reading past end-of-file. Unlike INVALID_ARGUMENT, this error indicates a problem that may be fixed if the system state changes. For example, a 32-bit file system will generate INVALID_ARGUMENT if asked to read at an offset that is not in the range [0,2^32-1], but it will generate OUT_OF_RANGE if asked to read from an offset past the current file size. There is a fair bit of overlap between FAILED_PRECONDITION and OUT_OF_RANGE. We recommend using OUT_OF_RANGE (the more specific error) when it applies so that callers who are iterating through a space can easily look for an OUT_OF_RANGE error to detect when they are done.400 Bad Request
UNIMPLEMENTED12The operation is not implemented or is not supported/enabled in this service.501 Not Implemented
INTERNAL13Internal errors. This means that some invariants expected by the underlying system have been broken. This error code is reserved for serious errors.500 Internal Server Error
UNAVAILABLE14The service is currently unavailable. This is most likely a transient condition, which can be corrected by retrying with a backoff. Note that it is not always safe to retry non-idempotent operations.503 Service Unavailable
DATA_LOSS15Unrecoverable data loss or corruption.500 Internal Server Error

All RPCs started at a client return a status object composed of an integer code and a string message. The server-side can choose the status it returns for a given RPC.

The gRPC client and server-side implementations may also generate and return status on their own when errors happen. Only a subset of the pre-defined status codes are generated by the gRPC libraries. This allows applications to be sure that any other code it sees was actually returned by the application (although it is also possible for the server-side to return one of the codes generated by the gRPC libraries).

The following table lists the codes that may be returned by the gRPC libraries (on either the client-side or server-side) and summarizes the situations in which they are generated.

CaseCodeGenerated at Client or Server
Client Application cancelled the requestCANCELLEDBoth
Deadline expires before server returns statusDEADLINE_EXCEEDEDBoth
Method not found at serverUNIMPLEMENTEDServer
Server shutting downUNAVAILABLEServer
Server side application throws an exception (or does something other than returning a Status code to terminate an RPC)UNKNOWNServer
No response received before Deadline expires. This may occur either when the client is unable to send the request to the server or when the server fails to respond in time.DEADLINE_EXCEEDEDBoth
Some data transmitted (e.g., request metadata written to TCP connection) before connection breaksUNAVAILABLEClient
Could not decompress, but compression algorithm supported (Client -> Server)INTERNALServer
Could not decompress, but compression algorithm supported (Server -> Client)INTERNALClient
Compression mechanism used by client not supported at serverUNIMPLEMENTEDServer
Server temporarily out of resources (e.g., Flow-control resource limits reached)RESOURCE_EXHAUSTEDServer
Client does not have enough memory to hold the server responseRESOURCE_EXHAUSTEDClient
Flow-control protocol violationINTERNALBoth
Error parsing returned statusUNKNOWNClient
Incorrect Auth metadata ( Credentials failed to get metadata, Incompatible credentials set on channel and call, Invalid host set in :authority metadata, etc.)UNAUTHENTICATEDBoth
Request cardinality violation (method requires exactly one request but client sent some other number of requests)UNIMPLEMENTEDServer
Response cardinality violation (method requires exactly one response but server sent some other number of responses)UNIMPLEMENTEDClient
Error parsing response protoINTERNALClient
Error parsing request protoINTERNALServer
Sent or received message was larger than configured limitRESOURCE_EXHAUSTEDBoth
Keepalive watchdog times outUNAVAILABLEBoth

The following status codes are never generated by the library:

  • INVALID_ARGUMENT
  • NOT_FOUND
  • ALREADY_EXISTS
  • FAILED_PRECONDITION
  • ABORTED
  • OUT_OF_RANGE
  • DATA_LOSS

Applications that may wish to retry failed RPCs must decide which status codes on which to retry. As shown in the table above, the gRPC library can generate the same status code for different cases. Server applications can also return those same status codes. Therefore, there is no fixed list of status codes on which it is appropriate to retry in all applications. As a result, individual applications must make their own determination as to which status codes should cause an RPC to be retried.