微服务架构，Spring Cloud Config Server、Zuul Gateway Server、Eureka Server是否应该作为资源进行保护？

Question

I have a micro service architecture like below:

1. Spring Cloud Config Server has all the configuration for all the services.
2. Eureka Server that registered each services and holds the information about all client-service applications.
3. Zuul GateWay Server provides a single point for accessing all the services.
4. OAuth2 Server that authenticates and generating the token for accessing the protected services.
5. Services A,B and C are the expose rest endpoint that are called by client app. All these service are protected as resource server and should be accessed with token generated by authenticating in Oauth2 Server.

My question is regarding the Spring Cloud Config Server, Eureka Server and Zuul Gateway server. Should these service of be protected as Service A,B and C. If not, how do we secure them?

I am having a hard time to understand how it will work if i secure the Configuration server as protected resource. Because if i made it as protected resource the eureka server, gateway server and all other service depends on the configuration of the configuration server.

I will appreciate any help by you guys.

Regards.

Answer 1

Whether or not you protect these resources depends on your deployment architecture and security requirements.

Generally, the Zuul Gateway Server service is available on an external network, while the Spring Cloud Config Server and Eureka Server services are only available on a secure network.

Each microservice in the microservice architecture must be responsible for its own security, ie each service must have security enabled.

Access to each microservice must be obtained through the authorization and authentication service.

Thus, there is no need to enable the protection of the Zuul Gateway Server and it becomes a dumb proxy.

But if necessary each of these services can have protection enabled::

• Spring Cloud Config Server and example
• Eureka Server and example
• Zuul Gateway Server