3 ms·
You should do it on the network _anyway_. You want multiple layers because you often find that any given layer was not as robust as you assumed.
by foobiekr 5y ago
You should do it on the network _anyway_. You want multiple layers because you often find that any given layer was not as robust as you assumed.
- deleted 5y ago[deleted]
- throwaway894345 5y agoThis doesn’t work. I often want my app to be able to talk over the network, but I want to restrict my logging library from making network calls. You can’t do this at layer 7 much less layer 3. But firewalls at those layers still obviously serve a purpose, just not this purpose.
- foobiekr 5y agoYour app shouldn’t be talking to randos injected from the outside. This is trivial.
- throwaway894345 5y ago"webhooks"
- foobiekr 5y agoSorry, that's not a good answer. That server needs to be locked down, absolutely, in terms of __what kinds of requests it can originate__ and what is reasonable for that request to carry. Otherwise you can end up participating in a relay attack.