TechPrufer
Get started
PlanetScale
PlanetScale logoPlanetScale · Feature trail

Webhook Security

3 posts · Oct 2023 – Nov 2023

What this trail covers

PlanetScale offers webhooks for event notifications, with security measures implemented to protect the webhook service from abuse, including Server-Side Request Forgery (SSRF) and Distributed Denial-of-Service (DDoS) attacks. Security measures include strict URL validation (HTTPS, blocking private IPs and own domains, DNS resolution), HTTP egress rules via Envoy Proxy, API-based rate limiting, webhook uniqueness checks with Sidekiq, isolated infrastructure for the webhook queue, and a beta progr

All PlanetScale trails
  1. Webhook security: a hands-on guideThis post details the security engineering practices for PlanetScale's webhook service. It covers SSRF mitigation through strict URL validation (HTTPS, IP/domain blocking, DNS resolution) and HTTP egress rules using Envoy Proxy. DDoS mitigation strategies include API rate limiting, webhook uniqueness checks with Sidekiq, isolated infrastructure, strict timeouts, and limiting the number of webhooks per database.
  2. Introducing webhooksThis post introduces PlanetScale webhooks, an outbound HTTP POST callback mechanism for event notifications. It details the events available (branch status, deploy request lifecycle) and provides examples of integrations with Slack and Zapier. The post also outlines getting started instructions for Base and Enterprise plans and announces the beta phase, encouraging user feedback for future event additions. Security considerations for the webhook service are also briefly mentioned.
  3. Sync user data between Clerk and a PlanetScale MySQL databaseThis post details how to integrate Clerk webhooks with a PlanetScale MySQL database using Netlify Functions. It covers setting up the PlanetScale database, configuring Clerk for user data synchronization, and deploying a Netlify Function to handle user creation, updates, and deletions. The Netlify Function uses Drizzle ORM to interact with the PlanetScale database, demonstrating a practical application of webhooks for data synchronization between an identity provider and a managed database.