Package middleware provides HTTP middleware functionality for Go services. Includes authentication (API Key, HMAC, mTLS), rate limiting, compression, request body limiting, security headers, and logging middleware. Package middleware provides IP allowlist middleware for net/http. Only requests whose client IP is in the allowlist are permitted; others receive 403 Forbidden.