TECHNICAL FIELD

Aspects of the present disclosure relate generally to security, and more specifically, relate to securing service meshes.

BACKGROUND

A service mesh may provide infrastructure services, such as load balancing and failure recovery, to an application that is structured as a set of components that interact with network services. The network services may be microservices that provide application features in a loosely-coupled networked architecture. The service mesh may include a set of network proxies that intercept communication to and from the network services and add the infrastructure services. For example, there may be a network proxy instance for each microservice. The network proxies are ordinarily located near one side of their corresponding microservices in the network topology, and are thus referred to as “sidecars.” The service mesh architecture enables separation of infrastructure services from the application, thereby simplifying the application.

