How we build microservices

Re:How we build microservices by cwt137 on Wednesday July 02, 2014 @05:10PM (#7979738)

I've been thinking a lot about SOA. Articles like this and Living Social's SOA blog posts series are a big help. But, I feel something is still missing. For example, no one talks about security of the various services. Are there any good books someone can recommend on SOA?

[ Parent | on HN ]

Re:How we build microservices by iain_hecker on Wednesday July 02, 2014 @05:53PM (#7980008)

We have all services running inside a VPN (see one of our older posts: https://blog.yourkarma.com/building-private-clouds-with-amaz...) and we also use HTTP Basic token auth that are configured upon deployment. Every app gets its own token, so we can trace which app does what.

[ Parent | on HN ]

Re:How we build microservices by cwt137 on Wednesday July 02, 2014 @06:16PM (#7980135)

I'd figured the services were on a private network (or at least the app is listening on an interface on a private network), but it is good someone confirmed it. Thanks for your insight on security.

[ Parent | on HN ]