{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T08:48:01Z","timestamp":1782809281653,"version":"3.54.5"},"reference-count":0,"publisher":"ECMS","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,6,23]]},"abstract":"<jats:p>Securing API ingress in microservices requires validating user tokens at the service boundary. This study compares OAuth2-Proxy and Istio Service Mesh for JWT validation on Azure Kubernetes Service. While OAuth2-Proxy achieves lower median latency (25.0ms compared to the 42.5ms baseline), it exhibits significantly higher tail latency with overhead exceeding 150% at the 99th percentile due to inter-pod delegation. In contrast, the Service Mesh architecture maintains a stable 12.1% latency overhead. This predictable performance is achieved at the cost of a 378% memory footprint increase relative to the baseline, significantly higher than the 117% required by OAuth2-Proxy. The findings demonstrate that resource-efficient patterns may sacrifice tail latency predictability, whereas resource-intensive sidecar architectures provide the consistency required for strict SLO compliance. These results offer empirical guidance for selecting API security patterns in production environments.<\/jats:p>","DOI":"10.7148\/2026-0303","type":"proceedings-article","created":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T08:36:46Z","timestamp":1782808606000},"page":"303-310","source":"Crossref","is-referenced-by-count":0,"title":["Resource footprint vs system stability: trade-offs in kubernetes api security"],"prefix":"10.7148","author":[{"given":"Klaudia","family":"Popow","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrzej","family":"Mycek","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"4144","published-online":{"date-parts":[[2026,6,23]]},"event":{"name":"40th ECMS International Conference on Modelling and Simulation"},"container-title":["ECMS 2026 Proceedings edited by Filippo Sanfilippo, Florenc Demrozi, Fabio Sgarbossa, Mohammad Poursina"],"original-title":[],"deposited":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T08:36:56Z","timestamp":1782808616000},"score":1,"resource":{"primary":{"URL":"http:\/\/www.scs-europe.net\/dlib\/2026\/ecms2026acceptedpapers\/0303_secmos_ecms2026_0022.pdf"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,23]]},"references-count":0,"URL":"https:\/\/doi.org\/10.7148\/2026-0303","relation":{},"subject":[],"published":{"date-parts":[[2026,6,23]]}}}