Istio
Apache-2.0 CNCF service mesh for Kubernetes: mTLS, traffic routing and telemetry, with or without sidecars
DevOps / Infrastructure · Apache-2.0 · 38.5k
Reviewed 2026-10-21 · last push 2026-10-21 · repo checked 2026-10-21
What's Good
Apache-2.0 (istio/istio), release 1.31.2 (2026-10-16), commit on 2026-10-20. ★~38k (~74 a week), a CNCF graduated project. Ambient mode runs the mesh without a sidecar in every pod. Useful when many services need zero-trust networking, canary rollouts and uniform telemetry.
The Catch
It is a big control plane with many CRDs and a steep learning curve, and the proxies cost CPU and memory on every node or pod. Debugging a misbehaving mesh is its own skill. With a handful of services, plain Kubernetes networking plus a gateway is usually enough.
Verdict
The most complete open-source mesh, for when you really have mesh-sized problems.
See also: Kubernetes
Embed
Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.
Markdown
[](https://stackgems.com/gems/istio)
HTML
<a href="https://stackgems.com/gems/istio"><img src="https://stackgems.com/badge/istio.svg" alt="Istio reviewed on Stack Gems" height="20"></a>