隐藏我的WCF服务? [英] Hiding my WCF service?

问题描述

我在IIS6上托管了WCF服务，并且正在使用.net Framework 3.5.我拥有的网站位于公共领域，我的意思是任何人都可以从任何地方访问.

I have a WCF service hosted on IIS6 and I am using .net framework 3.5. The site I have is on public domain I mean anybody can access from anywhere.

我的问题是，有没有办法隐藏我的WCF服务?我可以轻松查看页面的源代码，或者确切知道页面后面的服务路径...

My question is, is there a way to hide my WCF service? I can easily view source my page or know exactly the the path of my service behind the page...

http://hostname.MyServiceName.svc?wsdl，如何隐藏它?

推荐答案

与David达成共识，即模糊"您的服务还不到解决方案的一半，您当然可以关闭

Agreeing with David that just "obscuring" your service is less than half the solution, you can of course turn off

• 服务元数据
• WSDL文件的http可用性

要做的事，请确保您的<service>标签未引用包含<serviceMetadata>标签的<serviceBehavior>.

Do to do, make sure your <service> tag isn't referencing a <serviceBehavior> that includes the <serviceMetadata> tag.

因此，该将公开服务元数据(包括基于HTTP的WSDL):

So this will expose service metadata (including WSDL over HTTP):

<behaviors>
   <serviceBehaviors>
      <behavior name="default">
         <serviceMetadata httpGetEnabled="True" />
         <serviceDebug includeExceptionDetailInFaults="True" />
      </behavior>
</serviceBehaviors>
<behaviors>
<services>
   <service name="IYourService" behaviorConfiguration="default">
      ...
   </service>
</services>

虽然这将不公开任何服务元数据(请注意删除<serviceMetadata>标签):

while this will not expose any service metadata (observe the removal of the <serviceMetadata> tag):

<behaviors>
   <serviceBehaviors>
      <behavior name="nometadata">
         <serviceDebug includeExceptionDetailInFaults="True" />
      </behavior>
</serviceBehaviors>
<behaviors>
<services>
   <service name="IYourService" behaviorConfiguration="nometadata">
      ...
   </service>
</services>

在删除任何服务元数据时，您将无法再在Visual Studio(或任何其他开发系统中的等效项)中执行Add Service Reference-该服务只会告诉您可用的内容-您必须知道其他方式.

When removing any service metadata, you won't be able to do Add Service Reference from within Visual Studio (or the equivalent thereof for any of the other development systems) anymore - the service just won't tell you what is available - you have to know some other way.

这篇关于隐藏我的WCF服务?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！