Looking for App Engine Expert

[Anatoli Trifonov]

I read a fair amount of documentation on App Engine but still not 100% sure that what we are doing for our system is correct from the best practices point of view. 

It would be good to find an engineer that "seen it all" and "done it all" with google app engine and can answer a few very detailed questions on application development for app engine.

Example: we use IAP to secure application access because there is no option to allow only local traffic to app engine services. Google examples are saying "get a token for every request to the app behind IAP". This is slow. There should be a better way to do this. Not able to find someone who knows what the alternatives are.

So far all attempts to find such expert failed miserably. 

Any advice on where to look is appreciated. Hope this post does not violates group rules.

Thanks.

A

[Vitaly Bogomolov]

Hi.

You can use 'X-Appengine-Inbound-Appid' http header for solving a problem "allow only local traffic to app engine services".

According documentation

"Requests coming from other App Engine applications will include a header identifying the app making the request, if the requesting app is using the URL Fetch Service:

X-Appengine-Inbound-Appid"

WBR, Vitaly.

[Luis Cristóbal López García]

What do you mean with "there is no option to allow only local traffic to app engine services"? You can set your App Engine service to only accept ingress traffic from your VPC. Check this doc.