Hi All,
Problem statement:
-
we are hosting a website on cloud storage
-
when website is loaded on browser in response we are getting Server:UploadServer as header
-
As show below
From security perspective we don’t want to reveal Server info.
Can we can remove this header from response
Hi @san-synthix ,
Welcome to Google Cloud Community!
You can’t directly remove headers from Google Cloud Storage responses.
Here are some alternative solutions:
- Use a Content Delivery Network (CDN) like Cloud CDN in front of Cloud Storage.
- Migrate your website to Cloud Run, a serverless platform that allows header configuration.
- Rewrite headers using Cloud Load Balancing (if applicable).
Revealing the “Server: UploadServer” header isn’t a major security risk, but focus on securing your website application itself.
3 Likes
Hi @christianpaula
Do you have any examples or documentation demonstrating how to configure headers via cloud run or rewrite headers via GCP load balancer?