Linkerd uses a simple and ultralight “micro-proxy” called Linkerd2-proxy that is built specifically for the service mesh sidecar use case. Why doesn't Linkerd use Envoy?Įnvoy is a complex general-purpose proxy. While Envoy can be used as a component of a service mesh, Linkerd uses an ultralight “micro-proxy” called Linkerd2-proxy, which is built in Rust for safety and performance. Linkerd has a control plane and a data plane, and uses a proxy is a component of the data plane. What's the difference between Linkerd and Envoy?Įnvoy is a proxy Linkerd is a service mesh. Finally, Linkerd has publicly committed to open governance and is hosted by the CNCF. Linkerd is built for security from the ground up, ranging from features like on-by-default mTLS, a data plane that is built in a Rust, memory-safe language, and regular security audits. Linkerd is significantly lighter and simpler than Istio. What's the difference between Linkerd and Istio? For example, Linkerd can monitor and report per-service success rates and latencies, can automatically retry failed requests, and can encrypt and validate connections between services, all without requiring any modification of the application itself.
It adds observability, reliability, and security to Kubernetes applications without code changes. What CPU architectures can Linkerd run on?.What happens to Linkerd's proxies if the control plane is down?.How do I use Linkerd to route traffic between services?.