Application-level HTTP/HTTPS filtering: blocking one path without breaking the rest

Blocking an entire port solves the problem with an axe: the whole service disappears, legitimate traffic included. The mission here is finer: make a single path of a dmz-web service unreachable, without touching the rest of that same service. Application-layer…