Securing Microservices: mTLS in Kubernetes

Zero Trust mandates that internal traffic be encrypted and authenticated. **mTLS (mutual TLS)** achieves this by requiring both client and server to present certificates. In Kubernetes, Service Meshes like Istio automate this entirely. How Istio Handles mTLS Enabling Strict Mode Key Takeaways Certificate rotation is automatic (usually 24 hours). Use AuthorizationPolicies to control which services […]

Read more β†’

.NET 6 RC1: Final Features

.NET 6 RC1 (Release Candidate) is “Go Live,” meaning Microsoft supports it in production. This is the feature-complete preview. Final release is November 2021. Key Highlights **Hot Reload** for all project types (Console, WPF, Web). **Minimal APIs** reach maturity with OpenAPI/Swagger integration. **MAUI** reaches RC alongside (separate release). **DateOnly / TimeOnly** types for database scenarios. […]

Read more β†’

Azure AD B2C: Custom Policies

User Flows are easy but limited. Custom Policies (Identity Experience Framework) are XML-based beasts that unlock full control. REST API Integration We use a Custom Policy to call a REST API during sign-up to validate a loyalty number. This runs before the user accounts is created in the directory.

Read more β†’
Posted in Uncategorized

Clean Architecture with .NET 6

Updating our Clean Architecture template for .NET 6 involves enforcing stricter boundaries using `ImplicitUsings`. Project References The Core layer (`Domain`) should have ZERO dependencies. In .NET 6, we can enforce this by stripping out accidental imports. This compiler-level enforcement prevents junior developers from injecting HTTP clients into Domain Entities.

Read more β†’
Posted in Uncategorized

Azure Logic Apps: Standard vs Consumption

Choosing between Logic Apps Consumption (Serverless) and Standard (Single Tenant) is a critical architectural decision. Feature Consumption Standard Billing Per Execution Hosting Plan (Fixed) Throughput Throttled limits Your reserved hardware Networking ISE required for VNET VNET Integration built-in State Always Stateful Stateless option available If you need >100 req/sec, use Standard. If you run once […]

Read more β†’
Posted in Uncategorized