如何阻止节点js用于第三方的服务器地址和端口

Question

I have phpmyadmin, PHP , nodeJS run on the same server and i use below code to get data from nodejs to my php website. So anyone can copy that code and add to some HTML page and chek what my nodejs server sending on this port. Is there any way to block this nodejs server address use outside from my server??.

This is client side code

var socket  = io.connect('http://xxx.xxx.xx.xx:8000');
socket.on('device', function (data) {
var   commentData = JSON.parse(data);
console.log(commentData);
   var  cID  =  commentData.data.cID;
   var  dID  =  commentData.data.dID;
   var  status  =  commentData.data.status;
if(status =='online'){
    $("#"+cID+dID).attr('class','online-icon');
}
 if(status =='offline'){
        $("#"+cID+dID).attr('class','offline-icon');
    }

});

This is server side code

var express = require('express');
var socket  = require('socket.io');
var http    = require('http').Server(app);
var request = require('request');
var app     = express();
app.use(express.static('views'));
app.set('views', 'views/product'); 
app.use(express.static('./public'));
var bodyParser = require('body-parser')
var server     = app.listen(8000, function () {
});
var io         = socket(server);
io.on('connection', function (socket) {
 io.sockets.emit('device', 'test');
});

Answer 1

Is there any way to block this nodejs server address use outside from my server?

Networked computers typically have at least two network interfaces: The "local" one and the network-facing one. If you have services that only need to talk to each other on the server, bind the service to the local one (localhost aka 127.0.0.1).

You're using express, so you'd do this in your listen call, which is identical to Node.js's own Server.listen. E.g.:

var server     = app.listen(8000, '127.0.0.1', function () {
// -------------------------------^^^^^^^^^^^^^
});

or for IPv6:

var server     = app.listen(8000, '::1', function () {
// -------------------------------^^^^^^^
});

Then no other host on the network will be able to connect to that service.