Oracle Cloud Infrastructure (OCI) Service Mesh is a free, Oracle-managed service that simplifies the development and operation of cloud native applications. It enables security, observability, and network traffic management—without requiring application changes. OCI Service Mesh automatically encrypts all communications between microservices and collects telemetry, metrics, and logs for application performance and health monitoring.
OCI Service Mesh uses identities and encryption for all communication between mutually authenticated microservices, together with permission checks imposed by policies. It assists in the automated and declarative implementation of a zero trust security architecture.
OCI Service Mesh decouples network and security configurations from the Kubernetes configuration, application code, and microservices framework or tooling. This enables developers to actively secure and connect microservices and debug them as necessary.
OCI Service Mesh automatically captures a variety of network and microservice metrics and logs. These metrics and logs provide information about failures, latency, and traffic volume, which the application team can use to monitor the application’s overall health.
OCI Service Mesh captures all traffic between microservices and provides centralized application traffic control. Using mesh virtual resources, developers can abstract communication between microservices to easily support canary deployments and A/B tests.
For security, OCI Service Mesh encrypts and mutually authenticates all microservice-to-microservice communication by default. Clients outside the mesh cannot call microservices directly; they must use the ingress gateway.
Access policies define how microservices can communicate with one another declaratively, without affecting the underlying programming logic. By default, all communication is off, and the application team must allow any microservice-to-microservice communication that the application requires to function properly.
OCI Service Mesh's default setting is to emit telemetry data, such as latency, HTTP errors, and requests, from all microservices in the mesh. Using Prometheus, the de facto standard tool for cloud native monitoring, the application team may gather metrics that track the health of the microservices in the mesh and use them to improve the performance of those microservices.
By default, the proxy writes logs to the standard output of sidecar containers. Through integration with OCI Logging, the OCI Service Mesh automatically collects and centralizes access logs generated by requests across all microservices for further issue analysis.
Traffic routing rules govern all intermicroservice network traffic and calls between microservices within the mesh. Setting rules in the virtual service routing table divides traffic among different microservice versions. This allows for A/B testing, applying a different load balancing policy to traffic for a specific subset of microservice instances, and performing canary deployments to accelerate deployments with minimal microservice interruption.
The ingress gateway routes traffic from external clients to the cluster's microservices using a set of rules. For exposing multiple hostnames, the ingress gateway allows wildcard hostnames in the prefix form, which is useful when exposing several domains. Service Mesh automatically captures insights from metrics and logs for all incoming traffic—as it does for intermicroservice communication.
Easily secure, monitor, connect, and expose cloud native applications.
Comply with regulatory requirements by encrypting data in transit within a mesh network.
Use traffic splitting or A/B testing for faster and more reliable deployment of microservices.
Control how microservices communicate with each other, and implement a zero trust model.
There are no charges for using OCI Service Mesh. Customers only pay for the infrastructure required to run the proxy component that runs alongside the application.
Oracle offers a Free Tier with no time limits on more than 20 services such as Compute, Storage, and Autonomous Database, as well as US$300 in free credits to try additional cloud services. Get the details and sign up for your free account today.
The best way to learn is to try it yourself. Use our tutorials and hands-on labs with the Oracle Cloud Free Tier, your own Oracle Cloud tenancy, or for selected solutions in an Oracle-provided free lab environment.
In this lab you will deploy web servers on two compute instances in Oracle Cloud Infrastructure (OCI), configured in High Availability mode by using a Load Balancer.Start this lab now
Explore basic OCI services, including Compute, Networking, and Storage.Start this lab now
In this lab you will deploy a Container Engine for Kubernetes cluster, connect to it, and run a sample application using OCI CLI.Start this lab now
Explore how to migrate Tomcat to Oracle Cloud Infrastructure and connect to an Autonomous Database.Start this lab now
See how our architects and other customers deploy a wide range of workloads, from enterprise apps to HPC, from microservices to data lakes. Understand the best practices, hear from other customer architects in our Built & Deployed series, and even deploy many workloads with our "click to deploy" capability—or do it yourself from our GitHub repo.
Oracle Cloud pricing is simple, with consistent low pricing worldwide, supporting a wide range of use cases. To estimate your low rate, check out the cost estimator and configure the services to suit your needs.
Interested in learning more about Oracle Cloud Infrastructure? Let one of our experts help.