|
|
Master SOA Design
Pattern Catalog
|
|
|
|
Service Perimeter Guard
(Hogg, Smith, Chong, Hollander, Kozaczynski, Brader, Delgado, Taylor,
Wall, Slater, Imran, Cibraro, Cunningham)
|
Home > Service Security Patterns > Service Perimeter Guard
|
How can services that run in a private network be made available
to
external consumers without exposing internal resources?
|
|
|
|
|
Problem
External consumers that require access to one or more services
in a private
network can attack the service or use it to gain access
to internal resources.
|
|
|
Solution
An intermediate service is established at the perimeter of the
private network as a secure contact point for any external
consumers that need to interact with internal services.
|
|
|
Application
The service is deployed in a perimeter network and is designed
to work with existing firewall technologies so as to establish a
secure bridging mechanism between external and internal
networks.
|
|
|
|
Impacts
A perimeter service adds complexity
and performance overhead
as it
establishes an intermediary processing
layer for all external to internal
communication.
|
|
|
|
|
|
|
|
|
The perimeter service processes the attacker's message and upon determining its malicious intent, rejects it. This
spares the underlying internal service from exposure and unnecessary security-related processing.
|
|
|
Related Patterns in This Catalog
Brokered Authentication (Hogg, Smith, Chong, Hollander, Kozaczynski, Brader, Delgado, Taylor, Wall, Slater, Imran, Cibraro, Cunningham),
Direct Authentication (Hogg, Smith, Chong, Hollander, Kozaczynski, Brader, Delgado, Taylor, Wall, Slater, Imran, Cibraro, Cunningham),
Exception Shielding (Hogg, Smith, Chong, Hollander, Kozaczynski, Brader, Delgado, Taylor, Wall, Slater, Imran, Cibraro, Cunningham),
Inventory Endpoint (Erl),
Message Screening (Hogg, Smith, Chong, Hollander, Kozaczynski, Brader, Delgado, Taylor, Wall, Slater, Imran, Cibraro, Cunningham),
Utility Abstraction (Erl)
|
|
|
|
This page contains excerpts from:
SOA Design Patterns by Thomas Erl
Foreword by Grady Booch
With contributions from David Chappell, Jason Hogg, Anish Karmarkar, Mark Little, David Orchard, Satadru Roy,
Thomas Rischbeck, Arnaud Simon, Clemens Utschig, Dennis Wisnosky, and others.
(ISBN: 0136135161, Hardcover, Full-Color, 400+ Illustrations, 865 pages)
For more information about this book, visit www.soabooks.com.
|
|
