Overview
Direct Answer
A service mesh is a dedicated infrastructure layer that manages inter-service communication in microservices architectures by intercepting and routing network traffic between application services. It abstracts networking concerns—such as load balancing, circuit breaking, and encryption—away from individual service code.
How It Works
A service mesh employs sidecar proxies (typically lightweight container agents) deployed alongside each service instance. These proxies intercept all inbound and outbound traffic, applying policies defined in a control plane. The control plane stores configuration for routing rules, security policies, and observability settings, which it distributes to all sidecars in near real-time.
Why It Matters
Organisations operating large microservices deployments require consistent traffic management and security enforcement across hundreds or thousands of services; a service mesh provides this without modifying application code. It reduces operational friction by centralising observability data, enabling rapid troubleshooting and compliance verification across distributed systems.
Common Applications
Financial institutions use service meshes to enforce encryption and mutual authentication between payment processing services. E-commerce platforms employ them to manage traffic during high-demand periods through intelligent load balancing and circuit breaking across checkout and inventory services.
Key Considerations
Introducing a service mesh adds operational complexity and resource overhead due to sidecar proxies and control plane management. Teams must develop expertise in mesh troubleshooting and carefully evaluate whether the benefits justify the deployment overhead for smaller microservices environments.
Cross-References(2)
More in Cloud Computing
OAuth
Strategy & EconomicsAn open standard for token-based authentication and authorisation on the internet.
Single Sign-On
Strategy & EconomicsAn authentication scheme allowing users to log in once and gain access to multiple related systems.
Multi-Cloud
Strategy & EconomicsA strategy using services from multiple cloud providers to avoid vendor lock-in and optimise capabilities.
Cloud Computing
Service ModelsThe delivery of computing services — servers, storage, databases, networking, software — over the internet on demand.
Disaster Recovery as a Service
Deployment & OperationsA cloud computing model that enables the replication and recovery of infrastructure and data in the cloud.
Multi-Tenancy
Strategy & EconomicsA software architecture where a single instance serves multiple customers, with each tenant's data isolated and invisible to others.
Function as a Service
Service ModelsA serverless cloud computing model where individual functions are executed in response to events.
Private Cloud
Service ModelsCloud computing resources used exclusively by a single organisation, either on-premises or hosted by a third party.