Api Gateway easy
What is the primary operational benefit of performing 'SSL Termination' at the API Gateway?
- A It ensures that data is stored in a permanent, read-only encrypted format in the database.
- B It completely removes the need for security certificates in the entire infrastructure.
- C It decrypts incoming HTTPS traffic at the edge, relieving the backend microservices of the CPU-intensive task of managing SSL/TLS logic.
- D It allows the Gateway to automatically bypass all firewalls on the internal network.
Answer: C. It decrypts incoming HTTPS traffic at the edge, relieving the backend microservices of the CPU-intensive task of managing SSL/TLS logic.
Managing SSL/TLS (handshakes and encryption/decryption) is computationally expensive. By 'terminating' the SSL connection at the Gateway, the internal microservices can communicate over plain HTTP (or mTLS), which simplifies development and saves significant CPU cycles on the backend servers.
One system design question a day, with spaced repetition so the ones you miss come back.
Get the appRelated questions
- Your Gateway communicates with backends via HTTP/1.1 connections. A slow backend service causes 'Head-of-Line Blocking'. How does switching to HTTP/2 as the Gateway-to-Backend transport mitigate this?
- What is the primary architectural role of an API Gateway in a microservices environment?
- Why is 'Stateless Token Validation' (e.g., using JWTs) significantly more scalable at the Gateway level than 'Stateful Validation' (e.g., using Opaque/Reference Tokens)?
- Your Gateway is configured to cache any URL ending in `.css` or `.jpg`. An attacker tricks a victim into visiting `https://api.com/v1/profile/info/style.css`. How can this lead to an 'Account Takeover'?
- An API is receiving a sudden surge of 10,000 requests per second from a single IP address. How does an API Gateway preserve the stability of the backend services?
- How can an API Gateway help prevent 'Double Charging' in a payment system when a mobile client retries a failed request due to a poor connection?