github/awesome-kubernetes
1
0
Fork 0
mirror of https://github.com/nubenetes/awesome-kubernetes.git synced 2026-07-16 03:41:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
bee2b2fdbb669b71893de33b6f5eaecfdb6058ff
awesome-kubernetes/v2-docs/servicemesh.md

28 KiB
Raw Blame History

Service Mesh

!!! info "Architectural Context" Detailed reference for Service Mesh in the context of Networking & Service Mesh.

Standard Reference

Cloud Infrastructure

Kubernetes

Service Mesh (1)

  • (2021) Service meshes to the rescue: Load balancing and scaling long-lived connections in Kubernetes 🌟 [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A deep dive into the engineering challenge of load balancing long-lived connections (gRPC, HTTP/2, WebSockets) within Kubernetes. It explains how standard L4 kube-proxy load balancing fails to distribute traffic evenly and presents L7 proxies and service meshes (like Linkerd or Istio) as the definitive architectural solution.

Cloud Native

Cloud Networking

Google Cloud Load Balancing

  • (2026) L7 Internal HTTP(S) Load Balancing overview [N/A CONTENT] [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — A high-density reference guide explaining Google Cloud's L7 Internal HTTP(S) Load Balancing architecture. It details how the Envoy-based proxy subsystem handles complex traffic routing, security configurations, and backend scaling within secure VPC boundaries.

Kubernetes Security

Zero Trust Networking

Networking Architecture

Comparative Analysis

  • (2022) medianova.com: Service Mesh vs. API Gateway [N/A CONTENT] [COMMUNITY-TOOL] — An architectural comparison between API Gateways and Service Meshes. It clearly defines the roles of north-south traffic routing (handled at the cluster edge by gateways) and east-west service connectivity (orchestrated within clusters by meshes), showing how they complement each other.

Service Mesh (2)

Consul Design Patterns

  • (2021) learn.hashicorp.com: Consul Service Mesh on Kubernetes Design Patterns [GO CONTENT] [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — This architectural guide details design patterns for running HashiCorp Consul Service Mesh inside Kubernetes. Key topics include configuring sidecar injection, managing ingress and egress gateways, and setting up cross-cluster routing across hybrid environments.

Consul Service Mesh

  • (2026) consul.io [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — HashiCorp Consul is a mature, multi-platform service networking solution providing registry-based service discovery, secure service mesh capabilities, and dynamic key-value configuration. It secures application-to-application traffic via automated mTLS, across both Kubernetes and bare-metal servers.

Evaluation Strategy

  • (2021) containerjournal.com: When Is Service Mesh Worth It? [N/A CONTENT] [COMMUNITY-TOOL] — A technical evaluation discussing when to deploy a service mesh within microservice clusters. It weighs the benefits of built-in mTLS and telemetry against resource overhead, network latency, and the operational complexity introduced by sidecar architectures.

Google Cloud Traffic Director

  • (2026) Traffic Director overview [N/A CONTENT] [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — Google Cloud's Traffic Director is a fully managed, enterprise-grade traffic control plane designed for service meshes. Supporting open xDS APIs, it acts as the centralized controller that configures service discovery, global load balancing, and secure routing rules across Envoy proxies.

High Availability

  • (2022) linkerd.io: Announcing automated multi-cluster failover for Kubernetes [RUST CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — This release notes details Linkerd's automated multi-cluster failover mechanisms. It shows how the service mesh detects path latency anomalies or endpoint failures and automatically redirects critical traffic to redundant environments without requiring manual operator steps.

Istio and OpenShift

  • (2020) openshift.com: Introducing OpenShift Service Mesh 2.0 🌟 [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — This release guide details OpenShift Service Mesh 2.0, which integrates Istio, Envoy, Kiali, and Jaeger into a cohesive control plane. It enables enterprise operators to manage mTLS traffic encryption, distributed tracing, and complex routing behaviors natively within OpenShift.

Linkerd Ecosystem

  • (2021) linkerd.io: Announcing Linkerd's Graduation [N/A CONTENT] [COMMUNITY-TOOL] — This documentation marks Linkerd's graduation from the Cloud Native Computing Foundation (CNCF), validating its status as an enterprise-grade service mesh. It reviews how Linkerd's minimalist, Rust-based proxy architecture (linkerd2-proxy) delivers security and speed with minimal overhead.
  • (2021) containerjournal.com: Linkerd’s CNCF Graduation Due to its Simplicity [N/A CONTENT] [COMMUNITY-TOOL] — An analysis of Linkerd's graduation in the CNCF, attributing its success to its design simplicity. By prioritizing a lightweight, sidecar proxy written in Rust and avoiding complex dynamic APIs, Linkerd offers platform teams zero-trust networks without high management costs.

Linkerd Releases

Multi-Cluster Architectures

  • (2022) buoyant.io: Multi-Cluster, Multi-Region Setup using Linkerd Service Mesh [N/A CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — An engineering guide showing how to design and build multi-cluster and multi-region network topologies using Linkerd. It focuses on configuring DNS resolution, matching security certificates, and building robust, low-latency inter-cluster communication links.

Proxyless gRPC

  • (2021) Traffic Director and gRPC—proxyless services for your service mesh [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — An architectural guide detailing Google Cloud Traffic Director's support for proxyless gRPC. This method lets gRPC applications communicate directly with the control plane via xDS, reducing latency and resource consumption by eliminating the need for sidecar proxies.

Traefik Mesh

  • (2023) Maesh [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Traefik Mesh (formerly Maesh) was a lightweight, SMI-compliant service mesh that simplified container communications without complex sidecar architectures. Traefik Labs retired the project in late 2023, but its dynamic endpoint routing designs remain historically significant.

Cloud Native Infrastructure

Data Plane

Envoy Proxy

Official Docs
  • Envoy [ADVANCED LEVEL] [DOCUMENTATION] [DE FACTO STANDARD] [ENTERPRISE-STABLE] — The home portal of Envoy, the industry-standard L7 proxy designed specifically for cloud-native services. Acts as the data plane engine for most modern service meshes (including Istio), delivering outstanding network performance, advanced routing, and rich observability.

Networking

Service Mesh (3)

Istio

Implementation
  • Implementing Istio From Start To Finish [COMMUNITY-TOOL] [GUIDE] — An implementation guide mapping out the lifecycle steps required to deploy, secure, and operate an Istio service mesh in enterprise environments. It provides structured insights on handling namespace injection, ambient mesh considerations, and mutual TLS enforcement.

Observability

Telemetry Standards

OpenTelemetry vs Prometheus

  • Prometheus and OpenTelemetry Compatibility Issues [ADVANCED LEVEL] [COMMUNITY-TOOL] — An informative look at the historical data model incompatibilities between Prometheus and OpenTelemetry (OTel). It details the industry efforts to reconcile standard Prometheus structures with the broader OTel landscape.

💡 Explore Related: Cloudflare | Kubernetes Networking | Networking

Reference in New Issue View Git Blame Copy Permalink