8 Securing east/west traffic over gRPC

This chapter covers

  • The role of gRPC in interservice communications in a microservices deployment
  • Securing interservice communications that happen over gRPC using mTLS
  • Securing interservice communications that happen over gRPC using JWTs

In chapters 6 and 7, we discussed how to secure communications among microservices with mTLS and JWT. All the examples in those chapters assumed that the communication between the calling microservice and the recipient microservice happens over HTTP in a RESTful manner with JSON messages. JSON over HTTP is a common way of communicating among microservices. But another school of thought believes that is not the optimal way.

The argument is that human-readable, well-structured ...

Get Microservices Security in Action now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.