Service Mesh
Istio
A service mesh that adds traffic management, telemetry, and security controls to service-to-service communication.
Problem it solves
Why it exists.
It centralizes cross-cutting network behavior that would otherwise be repeated in every service.
Optimized for
Where it shines.
Kubernetes platforms with many services and advanced traffic or identity requirements.
Use with care
Where not to use it.
Do not add a mesh before the team can operate its control plane and understand the added complexity.
Components
What it is made of.
- Control plane
- Data plane
- Envoy proxies
- Policies
- Telemetry
Process
How it works.
- A proxy intercepts service traffic
- Policies and routes are applied
- Identity secures the connection
- Telemetry reports behavior