How is external and internal traffic usually organized in a microservice architecture: do they open each service's API directly?