AWS Application Load Balancer introduces header modification to enhance traffic control and security.
Application Load Balancer (ALB) now supports HTTP request and response header modification giving you greater controls to manage your application’s traffic and security posture without having to alter your application code.
Published Nov 23, 2024
This feature offers three key capabilities:
1. Header renaming: For example, similar to renaming a package labeled "Confidential" to "Regular Package" to avoid attention, AWS ALB can rename complex technical header information to more understandable names.
2. Header insertion: Just as you might add a note to a package instructing the recipient on how to open it, AWS ALB can add new headers to requests or responses to provide additional information to applications. For instance, insert a CORS header to allow applications from different domains to access your application.
3. Header disabling: Similar to removing an unnecessary note from a package, AWS ALB can remove unnecessary headers to minimize security risks. For example, disabling the "Server" header to conceal information about your operating system and web server version.