Re:Ask HN: How do you handle security for your website(s)?
by jonssons on Friday August 04, 2017 @06:42AM
(#14927686)
> - reverse proxy to backend webserver
Using a reverse proxy allows you to cache static content, decreasing load. I'm not talking about load balancers. These days you need them when your website pulls _a lot_ of requests (1000/s) Your reverse proxy will also stop unwanted requests and indeed will have a firewall incorperated.
> - run checks on each request on the reverse proxy
post => clamav
post => sqlinjection
get => blacklisted address?
any => iptables (let any connection go through your firewall. It's a check)
don't terminate SSL on reverse proxy though. It's a bad idea, unless you are a bad person and like to read your visitors data they think is secure.
There are plenty of other ways of using security on a reverse proxy. Have a look around on google.
Using a reverse proxy allows you to cache static content, decreasing load. I'm not talking about load balancers. These days you need them when your website pulls _a lot_ of requests (1000/s) Your reverse proxy will also stop unwanted requests and indeed will have a firewall incorperated.
> - run checks on each request on the reverse proxy
post => clamav
post => sqlinjection
get => blacklisted address?
any => iptables (let any connection go through your firewall. It's a check)
don't terminate SSL on reverse proxy though. It's a bad idea, unless you are a bad person and like to read your visitors data they think is secure.
There are plenty of other ways of using security on a reverse proxy. Have a look around on google.