← Back to Portfolio

MSChain: Blockchain based Decentralized Certificate Transparency for Microservices

TechnologiesHyperledger Fabric, Apache Kafka, Go, NodeJS, Spring Boot, AWS EC2
Live ProjectVisit Website

Architecture at a Glance

%%{init: {'theme': 'default', 'themeVariables': { 'background': '#ffffff', 'canvasBackground': '#ffffff', 'primaryColor': '#fff' }}}%%
flowchart TD
    subgraph MicroserviceLayer [Microservice Layer]
        msA[Spring Boot Microservices]
        sidecar[Sidecar Wrapper]
    end

    subgraph MiddlewareLayer [Integration Layer]
        luther[Luther NodeJS Service]
        ca[Spring Boot CA]
    end

    subgraph BlockchainLayer [Hyperledger Fabric Network]
        fabric[Fabric Peer Nodes]
        chaincode[MSChainCC Go Chaincode]
        kafka[Apache Kafka Orderer]
    end

    subgraph Infra [Cloud Infrastructure]
        aws[AWS EC2 Nodes]
    end

    msA <--> sidecar
    sidecar -- REST API Query --> luther
    ca -- Issue/Revoke --> luther
    luther -- Transaction SDK --> fabric
    fabric -- Execute Logic --> chaincode
    fabric -- Fault Tolerance --> kafka
    
    MicroserviceLayer --- aws
    MiddlewareLayer --- aws
    BlockchainLayer --- aws

    style MicroserviceLayer fill:#f5f5f5,stroke:#333,stroke-dasharray: 5 5
    style MiddlewareLayer fill:#f5f5f5,stroke:#333,stroke-dasharray: 5 5
    style BlockchainLayer fill:#f5f5f5,stroke:#333,stroke-dasharray: 5 5
    style aws fill:#fff,stroke:#ff9900,stroke-width:2px

The Problem

Modern microservices rely on centralized authorities, creating single points of failure that leave service-to-service communication vulnerable to fraudulent certificates and man-in-the-middle attacks.

The Solution

We engineered a decentralized verification system using Hyperledger Fabric to record certificate lifecycles on an immutable ledger. By integrating a sidecar pattern, services independently validate certificate status in real time without external reliance.

The Impact

This architecture eliminates trust-based vulnerabilities, providing an auditable and resilient security layer that scales seamlessly across complex, distributed enterprise cloud environments.

Next Project