November 2021
Beginner to intermediate
239 pages
4h 15m
Chinese
Content preview from Dapr学习手册
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
146
｜
第
4
章
一些高级速率限制策略，如仅限制未经授权的请求（例如通过检查是否存在
授权头），可以更好地抵御
DDoS
攻击。如果社区中的安全专家能够帮助我
们进一步改进速率限制中间件，我们将非常高兴。
在安全问题上，我们希望开诚布公，坦诚相待。在前面的讨论中，我们已经
谈到了
Dapr
在解决某些方面的安全问题上现在是如何提供帮助的，未来可能
如何提供帮助，以及一些需要社区帮助才能进一步改进的领域。本章的其他
部分将更详细地介绍
Dapr
目前所提供的功能。由于
Dapr
处于快速发展阶段，
请查阅在线文档（
https://oreil.ly/bF23s
）获取最新的安全功能更新。
4.2 Dapr
安全功能
在撰写本书时，
Dapr
提供了一些安全特性，包括密钥存储、密钥
API
和相互
TLS
。
4.2.1
密钥存储
密钥存储旨在存储敏感信息，如证书和密码。数据库和密钥存储的区别在于，
密钥存储采用了额外的机制和约束来进一步保护所保存的信息，例如：
受限制的
API
表层和访问控制
密钥存储通常需要特定的凭证和服务器角色。
静态加密
一些密钥存储会使用存储控制的密钥或用户提供的密钥自动加密静态密钥
数据。请注意，
Kubernetes
秘密存储将加密文件的
base-64
编码数据，保
存在底层的
etcd
存储中。数据默认不加密，但你可以选择静态加密。更
多细节请参阅
Kubernetes
文档
(
https://oreil.ly/KmVD-
)
。
硬件保护
像
Azure Key Vault
这样的安全存储使用硬件安全模块（
hardware security ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.