a6-recipe-mtls

Overview

Mutual TLS (mTLS) ensures both the client and server verify each other's identity via TLS certificates. Standard TLS only verifies the server; mTLS adds client certificate verification.

With APISIX and the a6 CLI, you can configure:

1. Client → APISIX mTLS: Require clients to present valid certificates
2. APISIX → Upstream mTLS: Present client certificates when connecting to backends
3. End-to-end mTLS: Both directions simultaneously

When to Use