Approaches to the formation of security in microservice architecture

Irbitskiy Ilya Sergeevich, Romanenkov Alexander Mikhailovich, Stulnikov Kirill Timurovich, Udalov Nikita N.

The rapid development and spread of network cloud services by the early 2010s led to disappointment in the classic, so-called monolithic version of the application architecture. Due to the complexity of individual modules, often representing entire software systems, as well as due to the need to ensure compatibility between them through standard protocols, making any changes and additions has become a non-trivial task that takes too much time. As an answer to this challenge, the architecture of microservices was proposed as a distributed system of the simplest and easily replaceable modules that perform, if possible, a single elementary function. At the same time, the microservice system has a symmetrical, peer-to-peer, rather than hierarchical organization, which eliminates the need for a complex organization of relationships. Services communicate with each other and with clients using lightweight protocols, for example, via HTTP or text messages. As a result, a system is created that is easy to deploy and upgrade with automatic development and update functions. By 2021, microservice architecture is in the center of attention of specialists and not only: it is written about in blogs, in social networks, discussed in the press and at various conferences. The successful implementation of microservices is announced by representatives of Amazon, Google, Netflix and Twitter. In Russia, the experience of switching to microservices was reported by large banks, as well as, for example, M.Video-Eldorado and MegaFon.

Keywords:microservice, architecture, development, server, high-load software, attack, DDoS.