It’s flexible and modular service mesh made by Google, IBM and Lyft. It is a platform for managing your kubernetes system. It’s responsible traffic management, observability, policy enforcement, service identity and security.
It provides features like service discovery, load balancing, A/B experiments, canary deployments, circuit breaking and health checks.
It’s a proxy written is C++ that is injected into every pod near your service instance. It’s responsible for implementing everything that managing units will tell like service discovery, load balancing, circuit breaking and health checks.
Collects telemetry from envoys and limits access to instances according to rules.
Provides service discovery, traffic management (A/B experiments, canary deployments). Responsible for timeouts, retries and circuit breakers. It also sends rule updates in real-time to envoys.
Responsible for authentication (TLS) and credential management.