How best to authenticate between tyk and your upstream API

My upstream API should only accept traffic from Tyk and no other service. What is the best and most performant way to authenticate Tyk with my upstream API?

Hello @Jonathan_Gurwitz and welcome to the Tyk Forums.

The industry standard is to use Mutual TLS. Here is a good article that describes what mTLS is. And here are the Tyk docs on how to setup mTLS between the gateway and your upstream.

1 Like

Thanks Zaid. Much appreciated. This is exactly what I needed.

1 Like