Ask HN: How do you handle security for your website(s)?

Re:Ask HN: How do you handle security for your website(s)? by no1youknowz on Thursday August 03, 2017 @07:56AM (#14918751)

> - reverse proxy to backend webserver

Can you give more clarification? Do you mean LB -> Firewall -> Web Server?

> - run checks on each request on the reverse proxy

Can you give more information on how to do this please.

Thanks

[ Parent | on HN ]

Re:Ask HN: How do you handle security for your website(s)? by jonssons on Friday August 04, 2017 @06:42AM (#14927686)

> - reverse proxy to backend webserver

Using a reverse proxy allows you to cache static content, decreasing load. I'm not talking about load balancers. These days you need them when your website pulls _a lot_ of requests (1000/s) Your reverse proxy will also stop unwanted requests and indeed will have a firewall incorperated.

> - run checks on each request on the reverse proxy

post => clamav

post => sqlinjection

get => blacklisted address?

any => iptables (let any connection go through your firewall. It's a check)

don't terminate SSL on reverse proxy though. It's a bad idea, unless you are a bad person and like to read your visitors data they think is secure.

There are plenty of other ways of using security on a reverse proxy. Have a look around on google.

[ Parent | on HN ]