Side-by-side comparison

Flexible, plugin-based DNS server and the default cluster DNS in Kubernetes; CNCF graduated.

eBPF-based CNI providing networking, load balancing, network policy and Hubble observability.

Most widely deployed service mesh: mTLS, traffic management and telemetry, with sidecar-less ambient mode.

Lightweight, security-focused service mesh with a Rust micro-proxy; stable releases come from Buoyant.