Meshery Integrations

Kubernetes (K8s), an open-source software that automates deployment, scaling and management of containerized apps, is available as an open-source project. It organizes containers that make up an app into logical units, which makes it easy to manage and discover. Kubernetes is based on 15 years of Google's experience in running production workloads. It also incorporates best-of-breed practices and ideas from the community. Kubernetes is built on the same principles that allow Google to run billions upon billions of containers per week. It can scale without increasing your operations team. Kubernetes flexibility allows you to deliver applications consistently and efficiently, no matter how complex they are, whether you're testing locally or working in a global enterprise. Kubernetes is an open-source project that allows you to use hybrid, on-premises, and public cloud infrastructures. This allows you to move workloads where they are most important.

Advanced apps can be run on a managed Kubernetes service that is secured and managed. GKE is an enterprise-grade platform that allows containerized applications to run, including stateful and non-stateful, Linux and Windows, AI and ML and complex web apps. It also supports APIs and backend services. You can leverage industry-first features such as four-way auto scaling and no stress management. Optimize GPU/TPU provisioning, make use of integrated developer tools, and get multicluster support from SREs. Single-click clusters allow you to quickly get started. You can leverage a high-availability control plan that includes multi-zonal clusters and regional clusters. Reduce operational overhead by using auto-repair, automatic-upgrade, or release channels. Secure by default, with vulnerability scanning of container images as well as data encryption. Integrated Cloud Monitoring with infrastructure, application and Kubernetes specific views. You can speed up app development without compromising security.

Connect, secure, manage, and monitor services. Traffic routing rules in Istio allow you to control traffic flow and API calls between services. Istio makes it easier to configure service-level properties such as circuit breakers, timeouts and retries. It also makes it simple to set up important tasks such as A/B testing, canary rollsouts and staged rollouts that are percentage-based. It also offers out-of-box disaster recovery features that make your application more resilient against network or dependent services failures. Istio Security offers a comprehensive security solution that addresses these issues. This page outlines how Istio Security features can be used to protect your services, no matter where they are hosted. Istio security protects your data, communications, and platform from both insider threats and outsider attacks. Istio provides detailed telemetry for all service communications within the mesh.

Docker eliminates repetitive, tedious configuration tasks and is used throughout development lifecycle for easy, portable, desktop, and cloud application development. Docker's complete end-to-end platform, which includes UIs CLIs, APIs, and security, is designed to work together throughout the entire application delivery cycle. Docker images can be used to quickly create your own applications on Windows or Mac. Create your multi-container application using Docker Compose. Docker can be integrated with your favorite tools in your development pipeline. Docker is compatible with all development tools, including GitHub, CircleCI, and VS Code. To run applications in any environment, package them as portable containers images. Use Docker Trusted Content to get Docker Official Images, images from Docker Verified Publishings, and more.

NGINX Open Source: The open source web server that powers more than 400 million websites. NGINX Plus is an open-source software load balancer, webserver, and content cache. It was built on top NGINX. NGINX Plus offers enterprise-grade features that are not available in the open-source offering. These include session persistence, configuration via API and active health checks. NGINX Plus can be used instead of your hardware loadbalancer to allow you to innovate without being restricted by infrastructure. You can save more than 80% over hardware ADCs without sacrificing functionality or performance. You can deploy anywhere: public cloud or private cloud, baremetal, virtual machines, containers, or virtual machines. You can save time with the NGINX Plus API, which automates common tasks. Modern app teams require an API-driven platform that integrates seamlessly into CI/CD workflows. It can be used to automate app deployment, whether you have a hybrid or microservices architecture. It also makes app lifecycle management simpler.

Helm is a tool that helps you manage Kubernetes apps. Helm charts can help you create, modify, and upgrade any Kubernetes app. Charts are simple to create, modify, share, publish, and update. Charts can be used to describe complex apps, make it easy to install the application again and act as a single point for authority. With custom hooks and in-place upgrades, you can take the hassle out of updating. Charts can be easily authored, shared, and hosted on public or private servers. You can use helm rollback to easily roll back to an older release. Helm uses a packaging format called charts. A chart is a collection or files that describes a set of Kubernetes resource. One chart can be used to deploy a simple thing like a memcached container or a complex web app stack that includes HTTP servers, databases, caches and more.

NGINX Service Mesh is always free and can scale from open-source projects to a fully supported enterprise-grade solution. NGINX Service Mesh gives you control over Kubernetes. It features a single configuration that provides a unified data plan for ingress and exit management. NGINX Service Mesh's real star is its fully integrated, high-performance Data Plan. Our data plane leverages the power of NGINX Plus in order to operate highly available, scalable containerized environments. It offers enterprise traffic management, performance and scalability that no other sidecars could offer. It offers seamless and transparent load balancing and reverse proxy, traffic routing and identity as well as encryption features that are required for high-quality service mesh deployments. It can be paired with NGINX Plus-based NGINX Ingress Controller to create a unified data plan that can be managed from one configuration.

A common flat vL3 domain allowing DBs running in multiple clusters/clouds/hybrid to communicate just with each other for DB replication. Multiple companies can connect to a single 'collaborative 'Service Mesh for cross-company interactions. Each workload has one option for which connectivity domain it should be connected to. Only workloads within a particular runtime domain can be part of its connectivity area. Connectivity Domains are strongly coupled to Runtime Domains. Cloud Native's central tenant is Loose Coupling. Loosely Coupled systems allow each workload to continue receiving service from other providers. It doesn't matter in what Runtime Domain a workload runs in. It is irrelevant to its communications requirements. Workloads that are part the same App require Connectivity between them, regardless of where they are located.

Multi-cloud service networking platform that connects and secures services across any runtime platform or public or private cloud. All services are available in real-time location and health information. With less overhead, progressive delivery and zero trust security. You can rest assured that all HCP connections have been secured right out of the box.

Amazon Elastic Kubernetes Service is a fully managed Kubernetes services. EKS is trusted by customers such as Intel, Snap and Intuit. It also supports GoDaddy and Autodesk's mission-critical applications. EKS is reliable, secure, and scaleable. EKS is the best place for Kubernetes because of several reasons. AWS Fargate is serverless compute for containers that you can use to run your EKS clusters. Fargate eliminates the need for provisioning and managing servers. It allows you to specify and pay per application for resources and improves security by application isolation by design. EKS is also integrated with AWS Identity and Access Management, AWS CloudWatch, Auto Scaling Groups and AWS Identity and Access Management, IAM, and Amazon Virtual Private Cloud (VPC), allowing you to seamlessly monitor, scale, and load balance your applications.

Traefik Mesh allows visibility and management to all traffic flows within any Kubernetes cluster. It is simple to set up and easy-to-use. This allows for better monitoring, logging, visibility, and access control. Administrators can quickly and easily increase security in their clusters. Administrators can monitor and trace the communication between applications in Kubernetes clusters. This allows them to optimize internal communications and improve application performance. It is easier to implement and provides value for the time spent actually implementing by reducing the time required to install, configure, and learn. Administrators can concentrate on their business applications. Open source means there is no vendor lock-in. Traefik Mesh can be opted-in by design.

Azure Kubernetes Services (AKS), a fully managed service that manages containerized applications, makes it easy to deploy and manage them. It provides serverless Kubernetes and integrated continuous integration/continuous delivery (CI/CD), as well as enterprise-grade security, governance, and governance. You can quickly build, deliver, scale and scale applications using confidence by bringing together your operations and development teams. You can easily provision additional capacity by using elastic provisioning without having to manage the infrastructure. KEDA allows for event-driven autoscaling. Azure Dev Spaces allows for faster end-to-end development, including integration with Visual Studio Code Kubernetes tools and Azure DevOps. Azure Policy allows for advanced identity and access management, as well as dynamic rules enforcement across multiple clusters. More regions are available than any other cloud provider.

Cilium is an open-source software that provides, secures and monitors network connectivity between container workloads. It is powered by the revolutionary Kernel technology eBPF. Kubernetes does not include Load Balancing. This is typically left to your cloud provider, or in private cloud environments, an exercise for you and your networking team. Cilium can draw this traffic using BGP and accelerate leveraging XDP or eBPF. These technologies combine to provide load balancing that is robust and secure. Cilium and eBPF work at the kernel layer. This level of context allows us to make intelligent decisions about how to connect different workloads, whether they are on the same node or between clusters. eBPF and XDP Cilium enable significant improvements in performance and latency, and eliminate the need for Kube proxy entirely.

Open-source control plane for service mesh. It provides security, observability and routing. Kuma, built on top of Envoy is a modern control plan for Microservices & Service Mesh, both for VMs and K8s. It supports multiple meshes within a cluster. The L4 + L7 policy architecture is out of the box to enable zero trust security and traffic reliability. Kuma is easy to set up and use. Kuma is natively embedded with Envoy proxy. It provides easy-to-use policies that can secure and observe, connect, route, and improve service connectivity for all applications and services, including databases. Modern service and application connectivity can be built across any platform, cloud, and architecture. Kuma supports Kubernetes environments, Virtual Machine workloads, and modern Kubernetes environments in the same cluster. Kuma also provides native multi-cloud connectivity and multi-cluster connectivity that can support the entire organization.

Linkerd adds critical security and observability features to your Kubernetes cluster. No code changes are required. Linkerd is 100% Apache licensed, with a growing, active, and friendly community. Linkerd's Rust-based data plane proxy servers are extremely small (10MB) and lightning fast (p991ms). No complicated APIs or configuration. Linkerd "just works" for most applications. Linkerd's control plan installs in a single namespace and services can safely be added to the mesh one at a while. A comprehensive suite of diagnostic tools is available, including live traffic samples and automatic service dependency maps. You can monitor golden metrics such as success rate, request volume and latency for every service with best-in-class observation.