A reference architecture for exposing microservices securely and consistently on Alibaba Cloud, using API Gateway, Service Mesh, and Container Service for Kubernetes (ACK).
Edge layer
Alibaba Cloud API Gateway handles authentication, rate limiting, and request transformation at the edge, decoupling external API contracts from internal service implementation details.
Service mesh for internal traffic
ASM (Alibaba Cloud Service Mesh) provides mTLS, traffic splitting for canary releases, and consistent observability across services running on ACK, without requiring each service team to implement these concerns independently.
Deployment pattern
Canary releases route a small percentage of production traffic to new service versions based on service mesh traffic policies, with automated rollback triggered by error-rate or latency SLO breaches during the canary window.
Leave a Reply