Non http/https traffic to appengine

[Vishwanath T R]

We want to ensure no non-http/https incoming traffic is allowed to appengine. Is that something that appengine guarantees by default (for flex environment)? Also do the VPC firewall rules for egress apply to app engine also?

Thanks
Vish

[manu]

Hello,

just to be sure, do you mean you want to ensure that traffic that is non-http (thus, it is https) is not allowed, and that traffic that is https is not allowed? So you mean you only want to allow http, and not allow https? Anyway, there is no default mechanism to do that using App Engine's infrastructure, it has to be done on the code level. Related to this, there is the documentation about forcing https [1].

App Engine has its own firewall, so, no, VPC firewall rules don't apply to it. You can configure its firewall, the documentation is this [2].

Best regards

____

[1]:

https://cloud.google.com/appengine/docs/flexible/go/how-requests-are-handled#forcing_https_connections

[2]:

https://cloud.google.com/appengine/docs/flexible/go/creating-firewalls

El divendres, 3 abril de 2020 20:39:49 UTC+2, Vishwanath T R va escriure: