Service Mesh
A service mesh is a dedicated infrastructure layer, typically implemented as lightweight network proxies deployed alongside each service, that handles service-to-service communication concerns — traffic routing, retries, encryption, and observability — outside of application code.
24 resources across 2 libraries
Glossary Terms(6)
Load Balancer
A load balancer is a networking component that distributes incoming traffic across multiple backend servers or instances, improving availability, reliability,…
Canary Deployment
Canary deployment is a release strategy that rolls out a new version of an application to a small subset of users or traffic first, then gradually increases ex…
Container Orchestration
Container orchestration is the automated management of containerized applications at scale — scheduling containers onto machines, restarting failed ones, scali…
Service Mesh
A service mesh is a dedicated infrastructure layer, typically implemented as lightweight network proxies deployed alongside each service, that handles service-…
Sidecar Pattern
The sidecar pattern is a design where a helper container or process is deployed alongside a main application container, extending its capabilities — such as ne…
Distributed Tracing
Distributed tracing is a method for tracking a single request as it flows through multiple services in a distributed system, recording the timing and outcome o…
Interview Questions(18)
What is a Service Mesh (from a Networking Perspective)?
A service mesh is a dedicated infrastructure layer that manages service-to-service communication inside a microservices system by attaching a lightweight netwo…
How Would You Design a Service Mesh for Microservices?
A service mesh design places a lightweight network proxy (a sidecar) next to every service instance to intercept all traffic, so cross-cutting concerns like mu…
What is the Sidecar Pattern in Microservices?
The sidecar pattern deploys a helper process alongside a main application container, sharing its lifecycle and network namespace, so that cross-cutting infrast…
What is a Service Mesh?
A service mesh is an infrastructure layer that handles service-to-service communication for you by injecting a lightweight proxy alongside every service instan…
What is the Kubernetes Sidecar Pattern?
The sidecar pattern is a design where a helper container runs alongside a main application container in the same Pod, sharing its network namespace and volumes…
What are Multi-Container Pod Design Patterns?
The three main multi-container Pod patterns are sidecar, ambassador, and adapter — each places a helper container alongside a main application container inside…
What Does "Cloud Native" Actually Mean?
Cloud native means designing and running applications as loosely coupled, containerized microservices that are deployed via automated, declarative infrastructu…
What is mTLS and Why Use It Between Services?
Mutual TLS (mTLS) is an extension of standard TLS where both the client and the server present X.509 certificates and verify each other’s identity during the h…
What Is a Canary Release Strategy?
A canary release is a deployment strategy that gradually shifts a small percentage of real production traffic to a new application version, monitors key health…
What Is Shadow Deployment?
Shadow deployment, also called traffic mirroring or dark launching, is a release strategy where real production traffic is duplicated and sent to a new version…
What Is Argo Rollouts?
Argo Rollouts is a Kubernetes controller and CRD (`Rollout`) that replaces the native `Deployment` object to enable advanced progressive delivery strategies —…
What Is Progressive Delivery?
Progressive delivery is the practice of releasing a new version to a controlled, gradually increasing subset of real users or traffic, with automated health ch…
Service Mesh: Istio vs Linkerd
A service mesh adds a dedicated infrastructure layer of sidecar proxies that handles service-to-service traffic, security, and observability without changing a…
What is Envoy Proxy?
Envoy is a high-performance, L4/L7 open-source proxy written in C++ that handles service discovery, load balancing, TLS termination, retries, and observability…
What is an API Gateway?
An API Gateway is a single, managed entry point that sits in front of a set of backend services, handling cross-cutting concerns like authentication, rate limi…
Sidecar vs Ambassador Pattern: What is the Difference?
The sidecar pattern deploys a helper container alongside a main application container in the same Pod to extend it with cross-cutting capabilities like logging…
What is SSL/TLS Termination and Where Should It Happen?
SSL/TLS termination is the point in an infrastructure where encrypted HTTPS traffic is decrypted back into plain HTTP, typically at a load balancer, reverse pr…
What is Consul and How is it Used in DevOps?
Consul is a distributed service networking tool from HashiCorp that provides service discovery, health checking, a distributed key-value store, and service mes…