Mutual TLS (mTLS)

Both client and server services verify each other with certificates.

security

Detailed Description

mTLS prevents service impersonation inside the cluster.

Service meshes often automate certificate issuance, rotation, and policy.

Service A cert <-> Service B cert
Both verify identity
Encrypted channel

Pros

Strong service identity and encryption

Cons

Certificate lifecycle complexity

Examples: Istio mTLS, Linkerd, SPIFFE/SPIRE