RESTful PUT和DELETE以及防火墙 [英] RESTful PUT and DELETE and firewalls

问题描述

在经典的"RESTful Web服务"书(O'Reilly，ISBN 978-0-596-52926-0)中，它在第251页上说:某些防火墙阻止HTTP PUT和DELETE，但不阻止POST."

In the classic "RESTful Web Services" book (O'Reilly, ISBN 978-0-596-52926-0) it says on page 251 "Some firewalls block HTTP PUT and DELETE but not POST."

这仍然是真的吗?

如果是真的，我必须允许超载的POST代替DELETE.

If it's true I have to allow overloaded POST to substitute for DELETE.

推荐答案

防火墙阻止HTTP PUT/DELETE通常会阻止传入连接(到防火墙后面的服务器).假设您可以控制保护应用程序的防火墙，则不必担心.

Firewalls blocking HTTP PUT/DELETE are typically blocking incoming connections (to servers behind the firewall). Assuming you have controls over the firewall protecting your application, you shouldn't need to worry about it.

此外，如果防火墙正在对网络流量进行深度检查，则防火墙只能阻止PUT/DELETE.加密将阻止防火墙分析URL，因此，如果您使用的是HTTPS(使用SSL保护数据，对吗?)，访问Web服务的客户端将能够使用标准的四个HTTP动词中的任何一个.

Also, firewalls can only block PUT/DELETE if they are performing deep inspection on the network traffic. Encryption will prevent firewalls from analyzing the URL, so if you're using HTTPS (you are protecting your data with SSL, right?) clients accessing your web service will be able to use any of the standard four HTTP verbs.

这篇关于RESTful PUT和DELETE以及防火墙的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！