Or is the self hosted/Kestrel route adequate enough? I know IIS gets you a lot of extra stuff like security, caching, memory management, etc. But I'm wondering if in our case it's not necessary. Basically, we're building some micro services using Core Web API and don't necessarily need the security stuff in IIS because we will be fronting it through an API Gateway which will handle security and what not.