Single entry point. Handles TLS termination, authentication, rate limiting, request routing, and load balancing