Istio
The leading service mesh for Kubernetes, adding traffic management, security, and observability to microservices without changing application code.
- Actively maintained
- Foundation-backed
- Well documented
- Permissive license
Overview
Istio injects a proxy sidecar next to each service in a Kubernetes cluster, giving a platform team fine-grained control over traffic routing, retries, timeouts, mutual TLS encryption between services, and detailed telemetry - all without any code changes in the services themselves. It's one of the most widely adopted and feature-rich service meshes available.
Istio is a fit for platform teams running many interdependent microservices on Kubernetes who need traffic control, security, and observability at the network layer, complementing Envoy (also in this catalog), the proxy that actually powers Istio's data plane.
Why it's in this catalog
Catalog rating: ★★★★☆ (4/5)
The most widely adopted full-featured service mesh; essential representative project.
- Foundational
- Foundation-governed
- Categories
- DevOps
- Languages
- Go
- License
- Apache-2.0
Related Projects
Linkerd
Apache-2.0Lightweight service mesh for Kubernetes focused on simplicity and low resource overhead, a genuine alternative to Istio.
Actively maintained
- DevOps
Envoy
Apache-2.0High-performance proxy built for cloud-native applications, serving as the foundational data plane for many modern service meshes and API gateways.
Actively maintained
- DevOps
Cilium
Apache-2.0eBPF-based networking, security, and observability platform for Kubernetes that replaces traditional networking components with kernel-level performance.
Actively maintained
- DevOps
etcd
Apache-2.0Distributed, consistent key-value store that Kubernetes itself uses to store all cluster state, and a reliable building block for other distributed systems.
Actively maintained
- DevOps
Spotted an error? Suggest an edit on GitHub.