Mutual TLS (mTLS)

Both client and server services verify each other with certificates.

security

Detailed Description

mTLS prevents service impersonation inside the cluster.

Service meshes often automate certificate issuance, rotation, and policy.

Visual Diagram

mTLS Handshake
  ServiceA → presents cert to ServiceB
  ServiceB → presents cert to ServiceA
  Both verify against trusted CA
  Encrypted + mutually authenticated channel
  Service Mesh handles this automatically

Tradeoffs

Pros

Strong service identity and encryption

Cons

Certificate lifecycle complexity

Examples: Istio mTLS, Linkerd, SPIFFE/SPIRE