validating the Host HTTP header. This means passing a restrictive hostname pattern to either a HostMatches router or the first argument of Application.add_handlers: # BAD: uses a default host pattern of r'.*' app FooHandler)]), ]) In addition, the default_host argument to Application and the DefaultHostMatches router must not be used in applications that may be vulnerable to DNS rebinding, because it has a similar (r"/", MainPageHandler), (r"/feed", FeedHandler), ]), ]) In addition to this you can use nested Router instances, HTTPMessageDelegate subclasses and callables as routing targets (see routing module docs

validating the Host HTTP header. This means passing a restrictive hostname pattern to either a HostMatches router or the first argument of Application.add_handlers: # BAD: uses a default host pattern of r'.*' FooHandler)]), ]) In addition, the default_host argument to Application and the DefaultHostMatches router must not be used in applications that may be vulnerable to DNS rebinding, because it has a similar Loader DictLoader ParseError filter_whitespace() tornado.routing — Basic routing implementation Router Router.find_handler() ReversibleRouter ReversibleRouter.reverse_url() RuleRouter RuleRouter.add_rules()

layer a. Events, logs, & metrics b. Common service to centralize, rotate, and delete 2. Event router responsible for storing our events and metrics a. Enables visualization, trending, alerting, & other