This article provides a detailed source‑code walkthrough of Envoy's outbound request processing, explaining how the proxy receives client data, parses HTTP requests, selects routes and clusters, forwards traffic upstream, handles retries and shadowing, and finally returns responses to downstream clients.
This article provides an in‑depth analysis of Envoy's outbound request processing, covering listener initialization, the use of SO_REUSEPORT for load distribution, original destination handling, and the detailed steps of connection creation and filter chaining within the Envoy proxy architecture.
This article provides a detailed technical analysis of Envoy's traffic hijacking mechanisms, covering sidecar and gateway modes, REDIRECT and TPROXY interception, iptables rule generation, port handling, conntrack limitations, and eBPF acceleration within Kubernetes service meshes.
Merbridge, an open‑source project, replaces Istio’s iptables‑based traffic handling with eBPF sockops and redir, dramatically reducing kernel processing steps, improving latency and QPS, and providing seamless integration without modifying existing Istio configurations.
Roblox’s detailed post‑mortem reveals that a three‑day outage was caused by a Consul streaming bug and a design flaw in BoltDB’s freelist, which together created CPU contention and latency spikes on its massive on‑premises infrastructure, leading the team to disable streaming, add a second data‑center, and redesign their architecture.
The article explains how Intuit manages hundreds of Kubernetes clusters across multiple business units using Istio‑based service mesh and the Admiral multi‑control‑plane solution to achieve isolation, compliance, automated configuration, and fault‑tolerant cross‑cluster communication.
This article details China Unicom Software Research Institute's multi‑year journey of adopting Kubernetes‑based service mesh, outlining the evolution from SDK‑driven microservices to sidecar‑based architectures, migration strategies with Baidu, performance optimizations, observability enhancements, and future product roadmaps.
This article introduces NGINX Service Mesh (NSM), a lightweight, highly integrated service‑mesh solution for Kubernetes that leverages NGINX Plus as a data plane, explains its security, traffic‑management, visualization, and hybrid‑deployment capabilities, outlines its architecture and components, and provides step‑by‑step commands for installation, verification, and sidecar injection.
During 2021, the service‑mesh ecosystem—centered on Istio—matured with performance optimizations, protocol extensions, diverse deployment models, eBPF integration, and a growing community of tutorials, conferences, and open‑source projects, solidifying its role as essential cloud‑native networking infrastructure.
This article examines the motivations for rewriting the Java‑centric Dubbo RPC framework in Go, discussing language efficiency, company‑level technology choices, the advantages of Go’s lightweight concurrency for gateways, and how Dubbo‑Go bridges Java and Go in modern microservice and service‑mesh architectures.
This tutorial explains the fundamentals of service mesh, explores Istio’s architecture and core components, and provides step‑by‑step instructions for installing Istio on Kubernetes, deploying a sample microservice application, and leveraging traffic management, mutual TLS, observability, and advanced use cases such as routing, circuit breaking, and JWT‑based access control.
This article examines the distinct responsibilities of Service Mesh and API Gateway, explores the philosophical debate over internal traffic classification, and details emerging integration patterns such as sidecar‑based gateways and BFF‑driven architectures, illustrated with real‑world examples from Ant Financial.
Facing large‑scale production demands, Ctrip’s Cloud Container team designed a multi‑data‑center Service Mesh architecture that isolates failures, employs dual‑active IDC, multi‑cluster deployments, and optimized xDS push mechanisms, ensuring high availability, rapid fault recovery, and efficient rollout across hundreds of services.
The article introduces Alibaba's open‑source Sentinel, a cloud‑native high‑availability protection component for distributed microservices that offers flow control, circuit breaking, concurrency limiting and adaptive overload protection, and highlights the new Sentinel Go v1.0.4 features such as Prometheus metrics, enhanced circuit‑breaker recovery, Apollo data source, and updated Kubernetes CRD support for version 1.22+.
This tutorial explains the fundamentals of service mesh, details Istio's architecture and core components, and provides step‑by‑step instructions for installing Istio on Kubernetes, deploying a sample microservice application, and leveraging traffic management, security, and observability features.
This tutorial explains the fundamentals of service mesh, outlines Istio’s architecture and core components, demonstrates how to install and configure Istio on Kubernetes, and showcases common use cases such as traffic management, security, observability, and alternatives, providing a comprehensive guide for modern micro‑service deployments.
This article describes Ctrip's cloud‑native Service Mesh deployment, detailing its multi‑IDC high‑availability design, fault‑scenario analysis, xDS push metrics, event‑handling optimizations, cold‑start improvements, and progressive canary release strategies to ensure reliable, scalable service traffic management.
This article explains the concept of gray release, outlines a simple architecture with essential components, describes common traffic-splitting strategies, shows how to implement control in Nginx and service layers, and discusses complex scenarios such as multi‑service and data‑centric deployments.
This article details the challenges Ctrip faced with Istio control‑plane performance at massive scale and explains the systematic methodology, concrete optimizations—including O(n²) to O(n) patching, Merkle‑tree based success‑rate metrics, and startup improvements—that reduced xDS push latency from minutes to seconds while enhancing reliability.
This article examines the motivations behind rewriting the popular Java RPC framework Dubbo in Go, discussing language efficiency, micro‑service architecture, RPC competition, thread‑pool challenges, and the emerging role of Dubbo‑Go in service‑mesh environments.
This guide explains how Tencent's open‑source PolarisMesh service mesh can be combined with the Go implementation of gRPC to add service discovery, health checking, dynamic routing, circuit breaking, graceful shutdown, and traffic limiting, providing step‑by‑step code examples and integration architecture.
The article examines the definition, pain points, and industry approaches to managing ultra‑complex microservice call networks, highlighting ByteDance's layered architecture, traffic identity marking, and practical recommendations for scaling and governing massive service ecosystems.
This guide explains how to use Dubbo's cloud‑native features—service listings, dynamic routing (conditional, tag, and mesh), runtime configuration, testing, and mock support—providing step‑by‑step examples, YAML definitions, and Maven snippets for effective service governance.
This article presents a comprehensive case study of how Industrial and Commercial Bank of China (ICBC) adopted Service Mesh technology to modernize its micro‑service architecture, detailing the platform’s design, deployment strategies, performance optimizations, enterprise‑level governance capabilities, and future development plans.
Baidu’s Aifanfan product migrated its entire suite to Kubernetes through a two‑phase, 11‑step process that standardized CI/CD, containerization, and traffic routing, enabling deployment of 200 + modules in under an hour, 99.99 % stability, cost‑effective operations, and laying groundwork for multi‑cluster, service‑mesh expansion.
This tutorial introduces the fundamentals of service mesh, explains how Istio implements a mesh architecture, and walks through practical steps for installing Istio on Kubernetes, configuring traffic management, security, observability, and common use cases such as routing, circuit breaking, and mutual TLS.
Join Xiaohongshu’s cloud‑native engineer Wang Chengcheng on November 23 for a 45‑minute talk and Q&A about the company’s Service Mesh evolution, Istio adaptation, Aeraki production optimizations, large‑scale deployment experiences, and practical strategies for deploying community Istio in production.
This article traces the evolution of software architecture from early monolithic Web 1.0 applications through SOA and the rise of microservices, explaining how cloud‑native technologies like containers, Kubernetes, and service mesh reshape development, deployment, and traffic management while highlighting associated challenges and best practices.
This article explains the concept of canary (gray) releases, demonstrates how to perform rolling updates and precise traffic splitting in Kubernetes, and shows how to achieve fine‑grained canary deployments using Istio’s VirtualService and DestinationRule resources with practical YAML and kubectl examples.
This article explores the evolution of modern distributed applications, outlining the core primitives required for lifecycle, networking, resource binding, and state management, and examines how Kubernetes, microservices, service meshes, Knative, Dapr, and emerging trends reshape cloud‑native architectures.
Alibaba’s AServer access gateway, handling billions of users and millions of QPS, transitioned from a monolithic tengine‑based system to a cloud‑native, containerized architecture with Kubernetes, Pilot, and Envoy, improving operational complexity, dynamic routing, traffic isolation, and scalability for massive e‑commerce traffic.
The DeWu community runs all Go services in Kubernetes, using CoreDNS/Etcd for native discovery, Istio’s Envoy sidecar for L4/L7 load-balancing and gRPC support, and a Dubbo-go refactor that switches to Nacos-based IP publish-subscribe, all unified under a dual-gateway (Java JWT gateway and Istio Ingress) architecture.
This article provides a step-by-step guide to installing Istio on a Kubernetes cluster, including verifying node status, creating the istio-system namespace, copying the istioctl binary, selecting a profile, generating manifests, and checking deployed pods and services.
This article compares nine widely used open‑source service‑mesh frameworks, explains their core features and typical use cases, and provides practical criteria to help DevOps teams select the most suitable mesh for their micro‑service deployments on Kubernetes or other platforms.
This article provides an in‑depth overview of microservice concepts, motivations, architectural principles, design patterns, service splitting strategies, essential infrastructure, popular frameworks such as Spring Boot, Spring Cloud, Dubbo, and Service Mesh, and practical recommendations for adopting microservices in real‑world projects.
This article explains DataVisor's risk‑control system architecture, outlines the business challenges such as complex logic, massive data, high QPS and low latency, and demonstrates how OpenResty (Nginx + Lua) is used for high‑performance gateways, micro‑service style calls, hot‑loaded scripts, automatic circuit‑breakers, and progressive architectural evolution toward service‑mesh designs.
The article explains how Alibaba merged its proprietary HSF framework with the open‑source Dubbo, outlines the technical challenges of cloud‑native migration, describes Dubbo 3.0’s new features such as the Triple protocol and Service Mesh integration, and shares a large‑scale production case from DingTalk.
Tencent Cloud announced the open‑source release of Polaris Mesh, a high‑performance service‑mesh platform that unifies service discovery, traffic routing, fault tolerance, access control, and mesh capabilities, offering a scalable solution for enterprises transitioning to micro‑service architectures.
Over the past year, the author chronicles a hands‑on journey from a fresh graduate to a cloud‑native specialist, detailing the design and implementation of an enterprise‑grade Kubernetes architecture—including multi‑cluster logging, CI/CD pipelines, Istio service mesh, monitoring, and private‑deployment strategies—while sharing practical lessons learned.
The article summarizes key insights from the 2021 GIAC Cloud Native conference, covering strategies to limit service explosion radius, SkyWalking-based Kubernetes event monitoring, Kuaishou's Service Mesh implementation, and Dubbogo 3.0's innovations such as proxyless mesh and adaptive throttling.
This article details Baidu's internal adoption of a service mesh built on Istio and Envoy, covering the motivations, architectural design, low‑invasion integration methods, extreme performance tuning, stability and traffic governance capabilities, surrounding ecosystem tools, and the resulting operational benefits.
This article reviews the evolution of software delivery, explains cloud‑native concepts, architecture principles, and key technologies such as containers, Kubernetes, micro‑services, serverless and service mesh, and then examines how JD.com’s iPaaS platform aligns with and advances cloud‑native practices.
This article introduces Apache APISIX, examines the challenges of using it as a data‑plane in a service‑mesh architecture, presents the apisix‑mesh‑agent as an intermediary solution, and outlines the advantages, design, and future roadmap of a APISIX‑based cloud‑native service mesh.
This article chronicles Qunar's multi‑year journey to adopt cloud‑native containerization, detailing the timeline, architectural redesign, CI/CD overhaul, middleware adaptations, migration strategies, encountered issues, and future plans for stability, resource efficiency, and service‑mesh implementation.
This article explains the origins, definitions from Pivotal and CNCF, core cloud‑native technologies such as containers, microservices, service mesh, immutable infrastructure and declarative APIs, the significance of cloud native, the current ecosystem, and a step‑by‑step implementation path for enterprises.
This article traces the evolution of software architecture from monolithic applications through vertical, distributed, and microservice stages to service mesh, compares SOA with microservices, contrasts Spring Cloud and Dubbo, examines their overlap with Kubernetes, and outlines the benefits and challenges of adopting a service mesh like Istio.
This article explains the concept of microservices, compares them with traditional monolithic web applications, outlines their advantages and challenges, and introduces first‑generation frameworks like Spring Cloud and Dubbo as well as next‑generation service‑mesh solutions such as Linkerd, Envoy, Istio, and Conduit, especially in Kubernetes environments.
The article describes a virtual environment solution that uses traffic coloring and routing to enable independent branch testing for micro‑services, improving development efficiency, reducing test costs, and supporting HTTP, RPC, and MQ protocols within a cloud‑native infrastructure.
Youzan’s service registration and discovery architecture progressed from fine‑grained interface‑level registration on Etcd, through an intermediate application‑level discovery layer using Istio Pilot and the Tether sidecar, to a fully application‑level, sidecar‑driven model with CRD metadata, enabling scalable, cloud‑native multi‑region service mesh.
This article traces the historical development of microservice architecture from monolithic to distributed services, outlines its advantages and drawbacks, and presents a comprehensive technology stack—including service communication, API gateways, authentication, fault tolerance, logging, configuration, containerization, orchestration, and CI/CD—to guide practitioners in building robust, scalable backend systems.
This article traces the evolution of software architecture from monolithic applications through vertical splitting and distributed services to modern microservice architectures, examines their advantages and drawbacks, and outlines a comprehensive technology stack—including service discovery, API gateways, authentication, logging, containerization, orchestration, and CI/CD tools—essential for building scalable, resilient systems.
This article explains that cloud native is not a fixed definition but an evolving vision and set of best‑practice methods—such as immutable infrastructure, automation, sidecar architecture, and Kubernetes—that enable software to be born, grow, and operate efficiently in the cloud while reducing cost and complexity.
Effective serverless governance requires comprehensive observability, traffic management, and service registration built on Kubernetes, using either a mesh sidecar with Istio or an embedded SDK, to simplify complex operational tasks such as discovery, fault tolerance, gray releases, and metric correlation for large‑scale function deployments.
This article traces the evolution of software architecture from monolithic applications through vertical splitting, distributed services, and SOA to modern microservices, and then details the essential technology stack—including service communication, API gateways, authentication, fault tolerance, logging, configuration, containers, orchestration, and CI/CD—required to build scalable, resilient cloud‑native systems.
This article explains the origins and evolution of Service Mesh and Data Mesh, outlines the three stages of big‑data platform development, describes Data Mesh principles and components, and discusses its practical challenges and future prospects for business teams.
This article explains the evolving role of API gateways by defining APIs, describing API management, cluster ingress gateways, and the API gateway pattern, and finally discussing how these concepts intersect with service mesh technologies to help architects choose the right solution for their cloud‑native environments.
This article explains the evolution from monolithic to microservice architectures, the challenges of service governance, the concept and benefits of service mesh, and details the practical adoption of Istio‑based service mesh—including traffic ingress, smooth migration, downgrade strategies, and future enhancements—within the platform.
This article compiles Baidu experts' presentations at QCon 2021, covering unified quality‑efficiency delivery for feed recommendation, software engineering capabilities, AIOps fault‑management practices, Apache Doris real‑time analytics, large‑scale Service Mesh deployment, massive service‑governance techniques, and deep‑learning platform innovations, with speaker details and audience benefits.
This article details Baidu’s internal service‑mesh deployment, explaining why traditional RPC‑based governance fell short, how a sidecar‑based mesh decouples governance from frameworks, and the technical challenges and solutions for low‑intrusion, high‑performance, fault‑tolerant traffic management across tens of thousands of microservices.
Baidu created an internally‑built, Istio‑based service mesh that decouples governance from language‑specific RPCs, offering low‑intrusion integration, ultra‑low latency via a brpc coroutine data plane, advanced fault‑tolerance and fine‑grained traffic scheduling, and now powers over 80 % of its core microservices handling more than a trillion daily requests.
This article provides an in‑depth overview of microservices, covering its origins, core principles, advantages and drawbacks, adoption criteria, architectural stages, prerequisite infrastructure, design patterns, service decomposition strategies, and a comparison of popular frameworks such as Spring Cloud, Dubbo, Service Mesh, and related tooling.
This article explains the three main roles of API gateways—API management, cluster ingress, and gateway patterns—defines what an API is, compares gateways with service meshes, and provides examples of implementations to help architects choose the right solution for cloud‑native environments.
Baidu iFanFan migrated all its Java‑based services to a native Kubernetes + Istio service mesh within three months, replacing fragmented, manual governance with automated rate‑limiting, canary releases, chaos testing and observability, which cut governance cycles from months to minutes, reduced CI time by ~20 % and dramatically improved system stability and multi‑cloud readiness.
This article, based on a Volcano Engine developer community meetup, explains how a self‑developed Service Mesh provides unified traffic management for TikTok’s massive Spring Festival Red Packet event, covering architecture, stability, security, and efficiency strategies across multi‑language microservices in complex environments.
Didi evolved testing environments from an All‑in‑One monolith to Fastdev traffic replay, Test‑in‑Production (TiP) with side‑car proxies, and offline simulation (OSim), each addressing scaling, fidelity, and safety, and all remain necessary for reliable testing as the platform grows.
This article explains the evolution of cloud native practices—from Docker containerization and Kubernetes orchestration to service mesh technologies—highlights Alibaba Cloud's strategic commitment, and introduces a comprehensive 14‑chapter handbook that guides readers through core Kubernetes concepts, configuration management, and networking strategies.
This interview details Baidu's practical approach to microservice governance, covering its definition, the evolution from ad‑hoc scaling to automated capacity, traffic, and stability engineering, and the challenges of data collection, standardized interfaces, and decision‑making policies for large‑scale systems.
This article details Ant Group's evolution from monolithic applications to microservices and its large‑scale adoption of Service Mesh, describing the motivations, challenges, architecture, multi‑mesh capabilities, and the design of a cloud‑native application runtime built on MOSN to decouple applications from infrastructure.
The CNCF 2020 China Cloud Native Survey of 439 participants reveals rapid growth in serverless adoption, a surge in container and Kubernetes usage, expanding service mesh deployment, and increasing reliance on open‑source automation tools, highlighting China’s emerging role as a major CNCF contributor.
The Volcano Engine Developer Community’s May 15 online Meetup showcased four technical sessions—Service Mesh traffic management, distributed databases, mobile file distribution, and IaaS virtualization—detailing how Douyin’s Spring Festival red‑packet event handled massive traffic and ensured high performance.
This article explains how TSF Mesh adapts Istio‑based service‑mesh capabilities to support both container and virtual‑machine workloads by redesigning application deployment, sidecar injection, traffic hijacking, and service registration/discovery, providing detailed architectural changes and code examples for enterprise‑grade service governance.
This guide introduces Traefik Mesh, a lightweight, non‑intrusive service mesh built on Traefik and SMI‑compatible Kubernetes, explains its sidecar‑free architecture, details installation via Helm, outlines static and dynamic configuration options, and provides step‑by‑step examples for deploying and testing services with traffic routing, retries, ACLs, and traffic splitting.
This article describes Tencent Games' end‑to‑end real‑time data platform, covering its construction background, the unified OneData development framework, the OneFun data‑service API layer, micro‑service and ServiceMesh management, and the operational benefits achieved through automation, standardization, and scalability.
API gateways serve as unified entry points for Open API platforms, microservice architectures, and internal applications, enabling access control, traffic management, and service governance; the article examines their roles, deployment scenarios, competitive alternatives, and criteria for selecting suitable open‑source, cloud, or self‑built solutions.
Meituan’s OCTO 2.0 upgrades the company’s distributed service‑governance platform by reusing OCTO 1.0 infrastructure, adding a self‑developed control plane and a customized Envoy data‑plane that employ UDS traffic hijacking, on‑demand service discovery, loss‑less hot‑restart, and automated lifecycle management, while planning cloud‑native extensions and full‑link mTLS.
Ant Group’s Service Mesh experience reveals that while MOSN’s extensive feature integration boosts capabilities, it also introduces significant R&D efficiency challenges such as large change volumes, centralized releases, and quality assurance, prompting the development of Test Mesh, health metrics, low‑impact high‑frequency deployments, and advanced diagnostic tools.
The article details Ant Group's large‑scale Service Mesh rollout, explaining the design, implementation, and operational impact of four core capabilities—link encryption, adaptive rate limiting, fine‑grained traffic steering, and service self‑healing—while highlighting performance considerations, deployment challenges, and the overall value of decoupling business logic from infrastructure.
This article walks through the journey of transforming a simple online supermarket from a monolithic web application to a fully fledged microservice architecture, covering the motivations, common pitfalls, service decomposition, monitoring, tracing, logging, gateway, service discovery, circuit breaking, testing strategies, and the role of service mesh.
Baidu Testing Middleware is an Envoy‑based sidecar proxy that combines a data‑plane and control‑plane to intercept, inspect, modify, and route traffic, providing recording, replay, fault injection and rate‑limiting capabilities that support functional, system, integration, sandbox and chaos testing at massive scale.
Istio is a fully open‑source service‑mesh platform that adds a transparent control plane to existing distributed applications, enabling traffic routing, access policies, telemetry, security, and observability without code changes, and it offers features such as virtual services, destination rules, gateways, sidecar configuration, fault injection, retries, timeouts, metrics, logging and distributed tracing.
This article introduces microservice architecture, outlines its challenges, explains the concept and evolution of Service Mesh—including sidecar patterns, Linkerd, and Istio—and details ByteDance's internal MS platform features such as call‑chain tracing, keyword search, monitoring, and inbound traffic control.
The article introduces Baidu's self‑developed test middleware, explains its data‑plane and control‑plane architecture inspired by Istio, describes the challenges of building test environments, and details the system’s components, working modes, and diverse testing use cases such as functional, system, integration, sandbox, and chaos engineering.
The article explains cloud‑native architecture as a set of principles and design patterns that offload non‑functional concerns to cloud services, and it details major patterns such as service‑oriented, mesh, serverless, storage‑compute separation, distributed transactions, observability, and event‑driven architectures.
This article traces the evolution of network architectures from the early ARPANET days through the rise of TCP/IP, monolithic and microservice eras, and finally to modern service mesh and sidecar patterns, highlighting key technological shifts and their impact on system design.
This article details Ant Group's two‑year journey of adopting Service Mesh at massive scale, explaining why Service Mesh is needed for microservice governance, heterogeneous system unification, and financial‑grade security, and describing the architecture, migration strategies, stability mechanisms, operational results, and future directions toward a full mesh and serverless era.
This article recaps a technical conference where experts explained how traditional centralized banking systems transition to microservice architectures, compared rigid and flexible distributed transaction models, examined IBM mainframe designs, and highlighted practical considerations for service mesh and cloud‑native deployments.
This article provides a comprehensive overview of microservice architecture evolution—from monolithic to distributed services—detailing its advantages, challenges, and the essential technology stack including service communication, API gateways, authentication, fault handling, logging, containerization, orchestration, and CI/CD practices.
This article examines Service Mesh security by outlining core requirements, detailing Istio’s built‑in zero‑trust mechanisms—including mutual TLS, AAA, and automatic certificate rotation—and comparing the security features of Linkerd and Alauda Service Mesh, offering practical insights for designing robust microservice protection.
Vivo extends Dubbo with a custom NearestRouter that reads each provider’s app_loc label to preferentially route RPC calls to services in the same data‑center or city, falling back based on configurable thresholds, and plans to enhance routing with richer topology metadata, composite policies, and cloud‑native service‑mesh integration.
This article chronicles the evolution of software architecture from monolithic applications to microservices, detailing each stage's advantages and drawbacks, and enumerates the essential technology stack—including service communication, API gateways, authentication, fault handling, tracing, logging, configuration, containers, orchestration, and CI/CD—that enables building scalable, resilient backend systems.
iQIYI’s middleware team introduced a unified microservice standard architecture—combining a single SDK, centralized infrastructure (Nacos registry, Kong gateway, Apollo config, Prometheus‑SkyWalking monitoring, ChaosBlade), the QDAS platform, and extensible open‑source practices—to eliminate redundant builds, ensure high availability, streamline governance, and pave the way for cloud‑native service‑mesh evolution.
This guide explains what Argo Rollouts is, how to install it, and demonstrates step‑by‑step canary, blue‑green, and traffic‑shifting deployments on Kubernetes using NGINX Ingress, including commands for updating, promoting, aborting, and rolling back releases.
This guide walks through preparing a Kubernetes cluster, configuring Istio with Helm, defining JHipster microservices via JDL, generating code and deployment manifests, building Docker images, and exposing monitoring tools such as Grafana, Prometheus, Jaeger, and Kiali for a complete cloud‑native service‑mesh deployment.
Facing rapid growth in 2019, Yanxuan partnered with NetEase Qingzhou to co‑build a cloud‑native platform, detailing a multi‑stage migration that standardized services, reduced code changes, enhanced high‑availability, optimized performance, and improved observability, ultimately supporting over 300 cloud‑migrated services and boosting development efficiency by more than 200%.
Beginning in 2019, NetEase Yanxuan launched a joint cloud‑native platform with NetEase Qingzhou, standardizing immutable infrastructure, containerizing services, and adopting DevOps; the migration unfolded across four phases—foundation, framework, pipeline, and rooms—while emphasizing high‑availability, performance tuning, observability, and team empowerment, with ongoing regression‑environment expansion and hiring to support future high‑traffic demands.
This article explains microkernel design, compares it with monolithic kernels, shows how plug‑in architecture maps to microservices, and explores service‑mesh communication patterns, performance trade‑offs, and hybrid solutions for building flexible, scalable cloud‑native applications.
Meituan’s rollout of a private‑cloud service mesh—built on an Envoy data plane, custom control plane, and language‑agnostic SDKs—overcame compatibility, scaling, and heterogeneity hurdles through isolation, standardized governance runtime, data sharding, and centralized health checks, now supporting hundreds of services with sub‑millisecond latency and unified multi‑language management.
Managing hundreds or thousands of tightly coupled services inevitably creates diverse operational challenges, so effective service governance—covering definition, lifecycle, versioning, registration, monitoring, ownership, testing, and security—is essential, and can be realized through a unified DevOps‑driven platform.
API gateways serve three core roles—API management, cluster ingress control, and gateway pattern—each with distinct responsibilities, and their relationship with service meshes is explored, helping readers understand how to choose and combine these components for optimal API infrastructure across various layers.
This article walks through the evolution of an online supermarket from a simple monolithic website to a fully split microservice architecture, highlighting the pitfalls of ad‑hoc growth, the need for service abstraction, monitoring, tracing, fault tolerance, testing, and the trade‑offs of frameworks versus service mesh.
