Topics / #service-mesh

Service-mesh projects on GitHub

Infrastructure layer handling service-to-service traffic, routing, and observability.

As of , the most-starred Service-mesh projects on GitHub are dubbo (41.6K stars), istio (38.4K stars) and consul (30.1K stars). GitHub.Locker tracks 10 Service-mesh repositories with 238.2K stars combined. The fastest-growing on October 16 was envoy, with +11 stars in a day.

10Projects
238.2KStars in total
+28Stars in a day
Browse in the catalog →github.com/topics/service-mesh ↗

Hot right now

Most stars gained in a day · Oct 16

+11

envoy

envoyproxy/envoy · ★ 29.1K

Envoy is a cloud-native, high-performance proxy for edge, middle, and service-to-service traffic. It is an open-source project hosted by the CNCF.

+10

cilium

cilium/cilium · ★ 25.7K

Cilium is open-source networking, security, and observability software built on an eBPF dataplane, used mainly as the networking layer of Kubernetes clusters.

+3

consul

hashicorp/consul · ★ 30.1K

Consul is a distributed, highly available, data center aware solution for connecting and configuring applications across dynamic, distributed infrastructure. It is built to be datacenter aware and can support any number of regions without complex configuration.

+2

linkerd2

linkerd/linkerd2 · ★ 11.5K

Linkerd is an ultralight, security-first service mesh for Kubernetes that adds encryption, observability, and reliability features to your cluster's traffic without requiring any code changes to your apps.

The all-time top

10 projects · by stars

  1. #1 · apache/dubbo

    dubbo

    Apache Dubbo is an RPC and microservices framework — this repository is its Java implementation. It covers communication, service discovery, traffic management, observability, security, and tooling for building enterprise-grade microservices.

    41.6K
  2. #2 · istio/istio

    istio

    Istio is an open-source service mesh that layers transparently onto existing distributed applications, giving you a uniform way to secure, connect, and monitor microservices with few or no code changes.

    38.4K
  3. #3 · hashicorp/consul

    consul

    Consul is a distributed, highly available, data center aware solution for connecting and configuring applications across dynamic, distributed infrastructure. It is built to be datacenter aware and can support any number of regions without complex configuration.

    30.1K
  1. 4

    envoy

    29.1Kenvoyproxy/envoy · C++

    Envoy is a cloud-native, high-performance proxy for edge, middle, and service-to-service traffic. It is an open-source project hosted by the CNCF.

  2. 5

    cilium

    25.7Kcilium/cilium · Go

    Cilium is open-source networking, security, and observability software built on an eBPF dataplane, used mainly as the networking layer of Kubernetes clusters.

  3. 6

    skywalking

    25Kapache/skywalking · Java

    Apache SkyWalking is an open-source APM (Application Performance Monitoring) system for monitoring, tracing and diagnosing distributed systems. It is built for microservices, cloud native and container-based architectures.

  4. 7

    Hystrix

    24.5KNetflix/Hystrix · Java

    Hystrix is a Java library that isolates calls to remote services and third-party libraries, stopping cascading failures and enabling resilience in complex distributed systems.

  5. 8

    kubernetes-handbook

    11.6Krootsongjc/kubernetes-handbook · Mermaid

    This is a free Chinese-language ebook/handbook that teaches Kubernetes architecture and the cloud-native ecosystem, from container orchestration basics up through service mesh, serverless, and AI-native infrastructure.

  6. 9

    linkerd2

    11.5Klinkerd/linkerd2 · Go

    Linkerd is an ultralight, security-first service mesh for Kubernetes that adds encryption, observability, and reliability features to your cluster's traffic without requiring any code changes to your apps.

  7. 10

    agent-safe-pipeline

    688decionis/agent-safe-pipeline · TypeScript

    Agent-Safe Pipeline is a reference implementation of an 'Execution Authority' architecture that sits between AI agents or APIs and consequential HTTP actions: it intercepts the action, asks Decionis whether it is authorized, and only forwards it if a single-use grant is issued, otherwise holding it for a human or refusing it, with every decision leaving tamper-evident evidence.

Often tagged together