U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

This is an archive
(replace .gov by .rip)

SP 800-204A (Draft)

Building Secure Microservices-based Applications Using Service-Mesh Architecture

Date Published: January 2020
Comments Due: February 14, 2020 (public comment period is CLOSED)
Email Questions to: sp800-204A-comments@nist.gov

Author(s)

Ramaswamy Chandramouli (NIST), Zack Butcher (Tetrate)

Announcement

As microservices-based applications are increasingly adopted within large enterprises and cloud-based environments, there is a need for a dedicated, scalable-supporting infrastructure that will allow for provisioning a comprehensive set of security services. Called Service Mesh, these security services include—but are not limited to—authentication, authorization, secure service discovery, secure communication, and security monitoring. The deployment of Service Mesh components to enable these services involves multiple configurations.

The purpose of Draft SP 800-204A is to provide deployment recommendations for Service Mesh components that span several runtime aspects of microservices-based applications to meet the security requirements for this class of application for various scenarios.

NOTE: A call for patent claims is included on page iv of this draft.  For additional information, see the Information Technology Laboratory (ITL) Patent Policy--Inclusion of Patents in ITL Publications.

Abstract

Keywords

API gateway; Application Programming Interface (API); circuit breaker; load balancing; microservices; Service Mesh; service proxy
Control Families

None selected

Documentation

Publication:
SP 800-204A (Draft) (DOI)
Local Download

Supplemental Material:
None available

Document History:
01/17/20: SP 800-204A (Draft)
05/27/20: SP 800-204A (Final)

Topics

Security and Privacy
access control; authentication

Technologies
cloud & virtualization; networks