How do you secure microservices communication?
⚡
Quick Answer
Encrypt traffic with TLS/mutual TLS, authenticate and authorize every call (service identities, JWT/OAuth), segment the network with policies, and centralize edge concerns at an API gateway — assume the network is untrusted.
Detailed Answer
Zero-trust between services means no implicit trust from being on the same network: mTLS proves both ends identities (a service mesh automates this), authorization policies restrict who can call what, NetworkPolicies limit reachability, and secrets/tokens are short-lived. Defense in depth across identity, transport, and network layers.
💡
Interview Tip
Use the zero-trust framing and mention mTLS + authz policies + network segmentation as layers.
microservicesmtlszero-trust