my go-to for microservices security is prob a multi-layered approach.

hey all, ive been thinking about microservices security a lot lately. more than just basic auth tho, what are the common patterns or technologies you guys use to secure communication between services? like mTLS, or API gateways for central security, or is it somethin else entirely. prob curious to hear what actually works for people.