How many levels do you need?

Question

We have a web application consisting of web tier (PHP), application tier (Java) and DB (mysql). the web layer contacts the application AND with the database to obtain some data. One of our clients insists on sharing each level with a firewall and blocking traffic from the web level to the database. They claim that this is unsafe, and the application must have a “retrieve data” function that will be used by the web tier instead of reading data directly from the database.

It seems like a real waste of tunneling data through the application, when it can be easily accessed through the web tier directly from the database. Read-only data can come from highly optimized views and can be presented as is. This greatly simplifies the design and eliminates additional problems such as paging. This technology is known as Fast-Lane-Reader and protects read-only tabular data directly from the database. For updates, the application is used when business rules are applied.

So my question is, is it possible to adjust this three-level topology with a firewall and allow direct traffic from the Internet to db levels?

Thanks in advance, Filopator.

Answer 1

, , , / (-) ( ), .

-, -, . , - ( , , ), .

-, . , PHP ASP.NET Mobile OS, , , .

, , , . . .

Answer 2

, "", , . , . , ( ). ? , , . , ( , ). , -. , .

, : , , PHP ( Java).

:

, Java-, facade. ( ) , PHP ( , PHP-). Java. Java ( PHP ).

, , Java PHP , BOTH-. ( ) , Java PHP.

Answer 3

, , , FrontEnd (PHP) DataLayer (MySql), - UI → .

, Java, java, UI .

, , , , , , , , java php.

Answer 4

, " " , . / , // .

Imagine you have a WidgetService.addWidget () service method in your Java code. You want all widgets to be the types the current user is allowed with, so addWidget () checks the permissions for this. Now, if your PHP code is trying to directly add a widget to the database, it bypasses these checks.