A PERFORMANCE-OPTIMIZED ZERO TRUST ARCHITECTURE FOR SECURING MICROSERVICES APIS

Microservices-based architectures have become increasingly prevalent due to their inherent scalability, modularity, and agility.However, their distributed nature introduces significant security challenges, as traditional API security mechanismssuch as OAuth 2.0, JWT, and API gatewayslargely rely on static authentication methods.These conventional approaches, while effective to an extent, contribute to performance overhead and often fail to keep pace with evolving cyber threats.Zero Trust Architecture (ZTA) offers a promising alternative by enforcing strict authentication and authorization for every API request.Yet, existing implementations of ZTA can degrade API performance due to the frequent execution of authentication procedures and complex policy validations.In this paper, we propose a performanceoptimized Zero Trust API security model specifically tailored for microservices environments.Our approach integrates a lightweight, token-less authentication mechanism, an optimized mutual TLS (mTLS) protocol, and dynamic policy enforcement embedded within Kubernetes-based service meshes.This model aims to