Millipede Academy

Book 5 · Lesson 5.3

mTLS between gateway and services

  • Enable MILLIPEDE_MTLS=1 across stack
  • Understand gateway rustls client to :8083/:8084
  • Generate dev certs if missing

Prerequisites: 5.2 · 3.3

1
ClientHelloGateway proposes TLS 1.3 + cipher suites
2
ServerHello + certGateway presents dev cert (infra/certs/dev/gateway.crt)
3
Client verifies chainTrust local CA or skip verify in dev (-k)
4
Client cert (mTLS)Optional: gateway requires client.pem for backend hop
5
FinishedEncrypted tunnel — JWT + HTTP inside TLS to :8443
6
mTLS to backendGateway opens rustls client to ingestion/analyzer :8083/:8084

Gateway build_http_client() presents gateway.pem to ingestion/analyzer mTLS listeners.

Teach-back prompt

Why keep plain :8081/:8082 in dev alongside mTLS ports?

Stage 2 mTLS stack

Lesson 5.3 check

1. Gateway to backends uses…