Portfolio ↗

Service Mesh Networking

Sidecar proxies supplying mTLS, retries and traffic policy.

4Questions
11Flashcards
3Terms
Drill this topic All of Networking
Questions

4 to work through

  1. intermediate

    A multi-product SaaS company with about forty services in three languages is evaluating a service mesh. Is it justified, and what would you check first?

    2 min answer
  2. advanced

    A platform team proposes adopting a service mesh for 40 services. Make the case for and against, then decide.

    2 min answer
  3. advanced

    A service mesh is introduced. p99 latency rises 15% and error rates fall by half. How do you decide whether that is a good trade?

    3 min answer
  4. advanced

    A team adopts a service mesh and sees a 10 ms latency tax on every hop across deep call chains. When is the mesh worth it, and what are the alternatives?

    3 min answer
Terminology

3 terms in this topic

concept

Data Plane Proxy

The per-workload proxy that actually carries mesh traffic, applying mTLS, retries, timeouts, routing and telemetry outside the application.

 concept

Service Mesh Networking

What a mesh actually does at the network level, the cost per hop, and the shift from sidecar to shared-proxy models.

 pattern

Traffic Splitting

Directing a defined percentage or subset of requests to a different version of a service, configured at the routing layer rather than in application code.
Networking

Neighbouring topics

Networking

General material on the network path underneath an architecture.

4 quiz 13 cards 14 terms

TCP/IP

Handshakes, congestion control, head-of-line blocking and connection reuse.

3 quiz 9 cards 2 terms

HTTP/1.1, HTTP/2 & HTTP/3

Multiplexing, prioritisation and the transport each is built on.

4 quiz 11 cards 5 terms

DNS

Resolution, TTL behaviour, traffic steering and failover latency.

5 quiz 7 cards 3 terms

TLS & Certificates

Encryption, integrity, authentication, termination points and expiry.

6 quiz 7 cards 5 terms

Layer 4 vs Layer 7

Connection-level versus request-level balancing, and what each unlocks.

4 quiz 10 cards 3 terms

Reverse Proxies

One place for TLS, routing, caching, compression and rate limiting.

3 quiz 9 cards 5 terms

Content Delivery Networks

Edge caching, origin offload, spike absorption and dynamic content.

8 quiz 11 cards 6 terms

Firewalls & Security Groups

Default-deny, stateful rules, and restricting egress as well as ingress.

5 quiz 8 cards 3 terms

NAT & Egress

Outbound-only connectivity, its per-gigabyte cost and its zone binding.

4 quiz 11 cards 4 terms

VPC Design

Address planning, peering and the ranges you can never resize.

3 quiz 9 cards 3 terms

Subnetting

Tiering, zone binding, and sizing for an address-hungry platform.

3 quiz 9 cards 3 terms

Routing & BGP

How traffic finds you, anycast, and route withdrawal as a failure mode.

2 quiz 8 cards 5 terms

WebSockets & Realtime

Persistent bidirectional connections and the capacity model they impose.

6 quiz 13 cards 6 terms

gRPC Transport

HTTP/2 multiplexing, binary encoding and streaming semantics.

4 quiz 12 cards 3 terms

API Gateways

The single entry point, and the business logic that must stay out of it.

3 quiz 10 cards 4 terms

Network Performance

Latency floors, bandwidth-delay product, and what no code change fixes.

5 quiz 13 cards 5 terms

Private Connectivity

Private endpoints, peering and dedicated links to managed services.

4 quiz 7 cards 3 terms

Network Troubleshooting

Flow logs, packet paths, and localising a problem to a hop.

6 quiz 8 cards 3 terms