Microservices Security in Action

Appendix K. Service mesh and Istio fundamentals

One key aspect of microservices architecture is the single responsibility principle, or SRP (https://en.wikipedia.org/wiki/Single_responsibility_principle), which indicates that a microservice should perform only one particular function. In chapter 3, we discussed how to use the API Gateway pattern to take most of the burden from microservices and to delegate security processing at the edge to an API gateway. The API gateway works mostly with north/south traffic--the traffic between applications (or consumers) and APIs. But still, in the examples we discussed in chapter 6 and chapter 7, most of the processing while securing inter-microservice communications (or east/west traffic) with mTLS and ...