Discover and read the best of Twitter Threads about #mTLS
Most recents (1)
(Thread-1) I’ve just turned on mTLS on a 18 year old PHP monolith and it JUST worked 🤯. Now the traffic originating from it can be validated by other services in our infrastructure using @EnvoyProxy RBAC mechanism. #servicemesh #mTLS #security #microservices @CloudNativeFdn 
(2) Service Mesh enables new features for legacy workloads that would take months to implement. Our system allows gradual and granular migration to mTLS using strict or permissive modes. As a developer you define a list of URLs and clients that are allowed to access them.
(3) In permissive mode requests from clients that are not listed are just logged. In strict mode the request is blocked (403) and also logged for audit purposes. Everything visible in logs is also summarised in grafana.
