Shahbaz Nazir 0ddfc62e3b
Problem: No authorization mode without threescale (#2088)
Problem
The current production deployment template uses 3scale to ensure that POST requests to the network (from anyone) only get through if they come from a client with an account (app_id and app_key).

A private network wants to launch so that all HTTP requests (POST and GET) sent to the nodes in the network get be dropped unless they come from a small set of known (and unchanging) clients/sources. They don't need 3scale. They will want a modified version of the production deployment template.

Solution
Generate a special HTTP header and share it with all the known clients/sources.
Have a single NGINX in each node which checks for that HTTP header value. If it's present, let the request pass through to the network. (HTTP headers are encrypted if HTTPS is used.)
Are there other simpler or better options?
2018-02-23 16:00:36 +01:00
2018-02-14 10:19:04 +01:00
2018-02-21 10:50:12 +01:00
2018-02-21 12:13:45 +01:00
2017-11-23 16:22:16 +01:00
2018-02-21 10:50:12 +01:00
2018-02-14 10:19:04 +01:00
2017-11-07 18:44:51 +05:30
2018-02-01 13:02:39 +01:00
2017-09-25 16:20:47 +02:00
2018-02-08 15:41:44 +01:00
2017-01-11 05:13:27 -05:00
2017-11-23 16:22:16 +01:00
2017-06-22 14:56:22 +02:00

PyPI PyPI Travis branch Codecov branch Documentation Status Join the chat at https://gitter.im/bigchaindb/bigchaindb

BigchainDB Server

BigchainDB is a blockchain database.

Get Started with BigchainDB Server

Quickstart

Set Up & Run a Dev/Test Node

Run BigchainDB Server with Docker

Run BigchainDB Server with Vagrant

Run BigchainDB Server with Ansible

Description
Languages
Python 83.6%
Shell 12.5%
Lua 1.6%
Dockerfile 0.8%
Jinja 0.7%
Other 0.8%