Outils de sécurité du trafic pour Service Mesh
For un service mesh pour le trafic des microservices, the strongest matches are linkerd/linkerd2 (Linkerd is a production-grade service mesh that automatically encrypts), istio/istio (Istio is a leading service mesh that delivers built-in) and linkerd/linkerd (Linkerd is a production-grade Kubernetes service mesh that transparently). cilium/cilium and apache/dubbo-go round out the shortlist. Each is ranked by relevance to your query, popularity and recent activity.
Ces implémentations de service mesh open source sécurisent, surveillent et gèrent la communication entre les composants d'une architecture de microservices distribués.
Outils de sécurité du trafic pour Service Mesh
Trouvez les meilleurs dépôts grâce à l'IA.Nous recherchons les dépôts les plus pertinents grâce à l'IA.
- linkerd/linkerd2
linkerd/linkerd2
11,424Voir sur GitHubThis project is a service mesh platform designed to manage, secure, and observe service-to-service communication within Kubernetes clusters. It functions as a control plane that orchestrates transparent sidecar proxies, which intercept and manage network traffic to provide reliable connectivity for microservices. By automating the injection of these proxies, the platform ensures that infrastructure-level policies are applied consistently across all workloads without requiring manual configuration changes. The platform distinguishes itself through its focus on zero-trust security and cross-clu
Linkerd is a production-grade service mesh that automatically encrypts service-to-service traffic with mutual TLS, enforces fine-grained access control policies, and manages service identities via its own certificate authority, which directly aligns with the secure inter-microservice communication pattern the visitor is looking for.
GoAuthorization PoliciesGranular Access ControlsMutual TLS Authentication - istio/istio
istio/istio
38,226Voir sur GitHubIstio is a service mesh infrastructure that provides a centralized control plane to manage, secure, and observe communication between distributed microservices. It functions as a policy-driven network traffic controller, enabling developers to route, balance, and secure service-to-service traffic without requiring modifications to application code. The system enforces zero-trust security by utilizing mutual transport layer authentication to verify cryptographic identities for every network request. The project distinguishes itself through a sidecar-less proxy architecture, which offloads netw
Istio is a leading service mesh that delivers built-in mutual TLS, policy-driven access control, certificate management, and security observability for microservices—exactly meeting the request for a secure service mesh with those features.
GoLayer 7 Authorization PoliciesMutual TLS Implementations - linkerd/linkerd
linkerd/linkerd
5,316Voir sur GitHubLinkerd is a Kubernetes service mesh that manages network traffic between microservices. It functions as a transparent networking proxy, layer 7 traffic manager, and mutual TLS security layer, providing observability and reliability for service-to-service communication without requiring changes to application code. The project distinguishes itself through a sidecar-proxy architecture that intercepts TCP and application-level traffic to provide automatic mutual TLS encryption and identity verification. It enables cross-cluster service networking to link multiple clusters and implements cloud-n
Linkerd is a production-grade Kubernetes service mesh that transparently secures microservice communications with automatic mutual TLS, identity-based policies, and built-in security observability, exactly matching the need for a secure service mesh.
ScalaFine-Grained Access ControlEgress ControlsMutual TLS Implementations - cilium/cilium
cilium/cilium
23,806Voir sur GitHubCilium is a networking, security, and observability platform for containerized environments that leverages kernel-level data paths to process traffic. By executing programs directly within the Linux kernel, it provides high-performance packet filtering, routing, and load balancing without the need for traditional user-space proxies or context switching. The platform distinguishes itself through identity-based security enforcement, which filters traffic based on service labels rather than volatile IP addresses. It integrates containerized workloads with external physical or virtual infrastruct
Cilium is a full-featured service mesh that uses eBPF for identity-based security, mutual TLS, and deep observability, exactly matching the need for encrypted inter-service communication with fine-grained access control and certificate management.
GoKubernetes Traffic ControllersIdentity-Based Access ControlKernel Networking Hooks - apache/dubbo-go
apache/dubbo-go
4,938Voir sur GitHubApache Dubbo Go is a Go language implementation of the Apache Dubbo framework designed for building high-performance microservices. It serves as a cross-language RPC framework and microservices communication layer that enables remote procedure calls between services written in different programming languages. The framework functions as a service governance toolset and a distributed service mesh proxy, allowing data planes to connect with external control planes in proxy or proxyless modes. It specifically provides a compatibility layer to facilitate communication between Go and Java-based ser
Dubbo-go is a microservices framework that functions as a distributed service mesh proxy, providing capabilities like mutual TLS, identity management, and access control to secure inter-service communication, directly matching the search for a secure service mesh.
GoCross-Language RPC FrameworksRemote Procedure Call FrameworksCompatibility Layers
