I am using Tileserver-GL for rendering vector tiles to web and mobile. For web, I am using Mapbox JS API GL and for Mobile, I am using Mapbox android SDK. Currently, I am using flat URL given by Tileserver-GL like{z}/{x}/{y}.pbf

or for mobile use


but as you can see this URL is open and anyone can access it.

Since we are not using Mapbox Access Token, how can we protect our Url from public to abuse?


From the docs


Typically - you should use nginx/lighttpd/apache on the frontend - and the tileserver-gl server is hidden behind it in production deployment.


Nginx can be used to add protection via https, password, referrer, IP address restriction, access keys, etc.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.