What is Service Mesh
Infrastructure layer for inter-service communication
Service Mesh
Service Mesh is a dedicated infrastructure layer for managing communication between microservices. It provides observability, security, and reliability without changing application code.
Architecture
| Component | Role | Examples | |-----------|------|----------| | Data Plane | Sidecar proxy next to each service | Envoy, Linkerd-proxy | | Control Plane | Configuration and policy management | Istiod, Linkerd control plane |
Key Features
- Traffic Management — load balancing, canary, circuit breaker
- Security — mTLS, authorization, encryption
- Observability — metrics, tracing, logs
- Policies — rate limiting, retry, timeout
Popular Solutions
| Solution | Features | |----------|----------| | Istio | Full-featured, complex | | Linkerd | Lightweight, easy to use | | Consul Connect | HashiCorp ecosystem integration | | Cilium | eBPF-based, high performance |
When You Need Service Mesh
- Many microservices (50+)
- mTLS required between services
- Need detailed observability
- Complex routing rules
- Compliance requirements (PCI DSS, SOC 2)
When NOT Needed
- Monolithic application
- Few services (< 10)
- Simple architecture
- No resources for maintenance