Google App Engine和GCP负载平衡器请求检查
我在Google App Engine中运行API，我想在Introspect HTTP Post Body中拒绝形成不佳的呼叫，然后它击中APPI在App Engine中运行的API。有没有一种方法可以在应用程序引擎应用程序上进行启发，我可以在App Engine中运行的代码实际上处理了URI，邮局并返回400件？请让我知道，谢谢。
I have an API running in Google App Engine and I want to introspect HTTP POST body to reject poorly formed calls before it hits my API running in app engine. Is there a way to front an App Engine application whereby I can introspect the URI, the POST body and return a 400 without it actually being processed by my code running in App Engine? Please let me know, thanks.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
如果要检查HTTP，则需要编写代理应用程序才能这样做。 Google Cloud Load Balancer和App Engine支持HTTP请求都没有。
代理具有MITM（中间的人）问题，因为HTTP流量通常是加密的。除非您的代理是端点，否则您将无法检查该流量。如果您使用apache或nginx实现代理，则可以使用 modsecurity 项目。
基本上，您想实现WAF。 Google提供 Cloud Armor 支持通过云装甲规则检查流量。
If you want to inspect HTTP, then you will need to write a proxy application to do so. Neither the Google Cloud Load Balancer nor App Engine support hooking HTTP requests.
Proxies have the MITM (Man In The Middle) problem in that HTTP traffic is often encrypted. You will not be able to inspect that traffic unless your proxy is the endpoint. If you implement your proxy with Apache or Nginx then you can use the ModSecurity project.
Basically, you want to implement a WAF. Google offers Cloud Armor which supports inspecting traffic via Cloud Armor rules.