Technology · Ebook

Network Service Mesh: On-Demand Connectivity Across Clouds

by Shriira Press

Network Service Mesh, a CNCF sandbox project, takes a different angle on cloud-native networking than the tools most engineers know. A CNI gives every pod one network at the cluster level; a service mesh like Istio governs L7 on top. NSM works underneath both, at L2 and L3, letting an individual workload request a named Network Service and receive a private point-to-point virtual wire to an endpoint that may live in another cluster, cloud, or data center. This book builds that picture from the ground up: the per-workload connectivity problem, the network service abstraction, the components (NSMgr, registry, forwarder, client, endpoint), the request and healing flows, the composable SDK chain model, the dataplanes that carry packets, SPIFFE/SPIRE security, vL3 and scale-from-zero, interdomain federation, and how to run NSM in practice.

Contents

1. 1Preface
2. 2Chapter 1 — The Per-Workload Connectivity Problem
3. 3Chapter 2 — The Network Service Abstraction
4. 4Chapter 3 — Components of the Mesh
5. 5Chapter 4 — The Request and the Virtual Wire
6. 6Chapter 5 — The SDK and the Chain Model
7. 7Chapter 6 — Dataplanes and Forwarders
8. 8Chapter 7 — Identity and Security
9. 9Chapter 8 — vL3, Scale-from-Zero, and Healing
10. 10Chapter 9 — Interdomain and Federation
11. 11Chapter 10 — Network Service Mesh in Practice