Live data from Hacker News

Maesh, a Lightweight and Simpler Service Mesh

blog.containo.us

21–23 of 23 posts

Re: Maesh, a Lightweight and Simpler Service Mesh

#21
post #17

I'd love to see a comparison between Maesh and Linkerd v1 -- sidecar-based meshes like Istio (AKA coordinated envoy) and API gateways like Kong are not direct competitors with Maesh, Linkerd v1 is. Is Maesh a newer imagining of what Linkerd v1 sought to do? Is it a better k8s-integrated solution?

At first glance the difference is proxy on the node and not per pod. It is also K8s centric where L5d is easier compatible and has way more more powerful configuration options and runs on vms as well. I would say that L5d 2.0 would be the direct competitor. They are both: small, simple, opt-in, K8s centric, and support SMI.

I think you compared it to linkerd v2 (formerly known as Conduit) -- Linkerd v1 was used primarily per-node though it was also capable of per-pod...

l5d v1 is the direct competitor, but is just theoretically lacking k8s integration, though it actually is usable with k8s, I've written about it on my tiny tiny k8s cluster.

Basically what I'm wondering is how much better the integration is for Maesh

[0]: https://vadosware.io/post/up-and-running-with-linkerd-v1/

Re: Maesh, a Lightweight and Simpler Service Mesh

#22

This looks interesting, but it's not clear to me if this supports TLS traffic to the daemon-set nodes running on each individual node. A key thing that I am looking at meshes for are last mile TLS encryption, with a appropriate sidecar.

We think that it is interesting to have an alternative with a simpler design bringing almost all features. So yes, mTLS between pods is not supported. But it's a decent tradeoff for many users. Finally, mTLS could be supported in the future between nodes :)
Post reply on HN