Challenge
Segment services without an unmanageable PKI.
Infra · 2023
ZeroTrust API
API gateway with mTLS + short JWTs + immutable audit
1 min read · Updated 18 Aug 2026
mTLS + JWT
Auth
Overview
API gateway for internal microservices: mutual TLS (mTLS) between services, short-lived JWTs, and a hash-chain audit log (each entry seals the previous one). Per-service policy, rate limit and replay protection.\n\nRust (data plane) + Laravel (control plane), Postgres, Prometheus.
Solution
mTLS by default, short JWTs, chained sealed audit.
Outcome
Service-to-service perimeter that is verifiable and auditable.
