如何只允许从 Docker 中的前端访问后端

Question

I have an application, React for frontend, Node.js for backend. The application will be uploaded to Digital Ocean, how can I hide the backend so that users have access only to the frontend.

Answer 1

The reason why you cannot hide your backend is that React uses Client-side rendering by default. This means that the client uses the browser to make calls to the backend. There are ways to make your backend secure such as using an access token or putting a Web Application Firewall in front of the server. I believe there are ways to make your frontend in react to work as a Server-Side rendering, but as default and as a Single Page Application will do Client-Side rendering.

This article may help you to understand: https://www.toptal.com/front-end/client-side-vs-server-side-pre-rendering

Answer 2

If docker use: You can split the frontend and backend into different containers, for the frontend to make access from outside, and the backend to hide behind the network inside the Docker. Your frontend will call backend over Docker's internal network by application name.

You can also hide the frontend and backend using nginx. Use nginx to access the frontend inside your docker network. It turns out that access from the outside will only be to nginx.

read more https://docs.docker.com/compose/networking/