Technology · Ebook

Kuma: The Universal Service Mesh

by Shriira Press

Kuma is a modern, Envoy-based service mesh built to give security, observability, routing, and reliable connectivity to services wherever they run — Kubernetes pods, virtual machines, bare metal, one cluster or fifty across multiple clouds. Created by Kong and donated to the CNCF, it pairs a lightweight control plane with bundled Envoy sidecars so you get Envoy's power without mastering it. This book starts with the problem a mesh solves and the control-plane/data-plane split, then builds up Kuma's architecture, the Mesh resource and universal model, automatic mTLS and zero-trust security, the targetRef policy model, traffic management and resilience, observability, and the multi-zone design that lets one mesh span the globe. It closes with installation, day-two operations, and where Kuma fits in the cloud-native landscape.

Contents

1. 1Preface
2. 2Chapter 1 — Why a Service Mesh
3. 3Chapter 2 — Meet Kuma
4. 4Chapter 3 — Architecture: Control Plane and Data Plane
5. 5Chapter 4 — The Mesh and the Universal Model
6. 6Chapter 5 — Security and mTLS
7. 7Chapter 6 — The Policy Model
8. 8Chapter 7 — Traffic Management and Resilience
9. 9Chapter 8 — Observability
10. 10Chapter 9 — Going Multi-Zone
11. 11Chapter 10 — Kuma in Practice