Posts
Securing communication between webserver and app
2024-04-19
Webapps usually listen on a random tcp port and a web server forwards the requests to it. Webserver handles tls, static asset serving and sometimes authentication, bruteforce check etc., However any local user in the system can directly connect to the app’s listen port bypassing the web server and thus loose the protections offered by the webserver. Unix sockets Unix sockets are special files in filesystem that processes can use to communicate instead of tcp ports.