API Gateway Authentication: Methods, Best Practices & Implementation
Learn how API Gateway authentication works in Apache APISIX with Key Auth, JWT, OpenID Connect, Keycloak, mTLS, HMAC, and access control.
API Gateway Security: Threats, Best Practices & Implementation
Learn API Gateway security best practices with Apache APISIX, including authentication, authorization, rate limiting, WAF, mTLS, and zero-trust controls.
Mutual TLS (mTLS): Authentication and Certificates
Learn how mutual TLS (mTLS) authentication uses client and server certificates, how TLS vs mTLS differs, and how Apache APISIX enforces mTLS.