Sidecar Mode: Envoy Proxy per Pod

Sidecar Mode: Envoy Proxy per Pod An architecture diagram generated by Archify. External Request · client / other service · Architecture component External Request client / other service Application Container · business logic · Pod Application Container business logic Envoy Proxy · sidecar container · Pod Envoy Proxy sidecar container Target Service · another pod in the mesh · Architecture component Target Service another pod in the mesh Traffic Local Outbound call Network Pod Legend Backend Security External

Advantages

  • • Mature and stable
  • • All Istio features supported
  • • Fine-grained control per pod

Disadvantages

  • • Resource overhead (Envoy per pod)
  • • Increased startup time (Init Container)
  • • Complex permission setup (iptables)