[google-appengine] Re: microservices with the edge server pattern on App Engine

[Tamas Kiss]

Thank you for the help guys!
@Nick: I'm not using the URLFetch API so the *X-Appengine-Inbound-Appid *header 
is not available. But it is good to know about this option too. Thanks.

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/a71d428e-4e02-4d11-9fbb-3576b26bed84%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [google-appengine] Re: microservices with the edge server pattern on App Engine

[Nickolas Daskalou]

Tamas,

You can implement application-level logic to only allow requests to your
service-name.project-id.appspot.com microservices from your own App Engine
projects by inspecting the *X-Appengine-Inbound-Appid* header.

More information can be found here for Python

 and here for Java

.

Let me know how you go.

Nick


On 27 February 2018 at 02:02, Tamas Kiss  wrote:

> Hello George,
>
> Thank you for your answer.
> I still don't understand something. If I had my app engine application
> running with a custom domain, wouldn't be my services still accessible via
> the out-of-the-box provided service-name.project-id.appspot.com like
> addresses?
>
> --
> You received this message because you are subscribed to the Google Groups
> "Google App Engine" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to google-appengine+unsubscr...@googlegroups.com.
> To post to this group, send email to google-appengine@googlegroups.com.
> Visit this group at https://groups.google.com/group/google-appengine.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/google-appengine/8e0975d5-ef4b-4e81-b5ef-
> 8999d9ff21e3%40googlegroups.com
> 
> .
>
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/CAOj3zuDCh5GNT0Wu958a07dzs7rj_e8FHSm7s7yq9GPpGz59vg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[google-appengine] Re: microservices with the edge server pattern on App Engine

['George (Cloud Platform Support)' via Google App Engine]

Excellent question! Indeed, the service-name.project-id.appspot.com like 
addresses should continue being accessible. You asked whether it's possible 
to hide the back-end microservices from the public. A custom domain would 
do just that, as the public is not normally aware of your project ID and 
similar details. In any case, the "extra layer" for the back-end services 
is normally considered safe enough. You should not have to worry and hide 
addresses. It may be worthwhile mentioning that hidden addresses can be 
guessed or inferred somehow. Hiding is not considered safe enough. 

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/3c7d58d5-f068-4f72-8535-1a5cd08681a0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[google-appengine] Re: microservices with the edge server pattern on App Engine

[Tamas Kiss]

Hello George,

Thank you for your answer. 
I still don't understand something. If I had my app engine application 
running with a custom domain, wouldn't be my services still accessible via 
the out-of-the-box provided service-name.project-id.appspot.com like 
addresses?

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/8e0975d5-ef4b-4e81-b5ef-8999d9ff21e3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[google-appengine] Re: microservices with the edge server pattern on App Engine

['George (Cloud Platform Support)' via Google App Engine]

Hello Tamas, 

You may develop a front-end app that implements the micro-services 
architecture and implement back-end functionality through endpoints. To 
avoid exposing your endpoints directly, you may use your own domain, as 
documented on the "Serving Multiple APIs from a Domain" page 
. 
It might prove quite helpful to follow a relevant, comprehensive tutorial, 
such as "Getting Started with Endpoints Frameworks on App Engine 
".
 
This way, you can get more insight than by simply reading documentation, 
and grasp easier some architectural details of consequence in the initial 
stage of your project. 

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-appengine+unsubscr...@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/84c37173-19a3-49b5-b235-8ce1287d69d3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.