The fully managed service mesh based on Envoy and Istio.
Take a services-first approach
Unify your service mesh across your app platforms: from VMs to containers to serverless
Unburden your operations and development teams with a fully managed service
Leverage leading open source projects like Istio and Envoy
Benefits
Fully managed, full stop
As a fully managed offering, Cloud Service Mesh takes all the guesswork and effort out of procuring and managing your service mesh solution. You focus on developing great apps; let us worry about your mesh.
Hybrid and multicloud
Cloud Service Mesh gives you the flexibility to support your workloads in Google Cloud, other public clouds, and on-prem deployments.
Modernize at your pace
Cloud Service Mesh works for VM-based (Compute Engine) and containerized applications (Cloud Run, Google Kubernetes Engine, or self-managed Kubernetes) and can be incrementally introduced for your services.
Key features
Cloud Service Mesh is a Google-managed service: if there is a problem, our operators get paged, not yours. You don't have to worry about deploying and managing the control plane, which means your people can focus on your business.
With Cloud Service Mesh, you can control traffic flows and API calls between services while also gaining visibility into your traffic. This makes calls more reliable and your network more robust, even in adverse conditions, while enabling you to catch issues before they become problems.
Securing your service mesh can feel daunting. Cloud Service Mesh helps you embrace a zero-trust security model by giving you the tools to automatically and declaratively secure your services and their communication. You can manage authentication, authorization, and encryption between services with a diverse set of features—all with little or no changes to the applications themselves.
Even with robust failure-recovery features, it’s critical to test your mesh’s resilience. That’s where fault injection comes in. You can easily configure delay and abort faults to be injected into requests that match certain conditions, and even restrict the percentage of requests that should be subjected to faults.
Decide who has access to what services in your mesh with easy-to-use role-based access control (RBAC). You specify the permissions, then grant access to them at the level you choose, from namespace all the way down to users.
What's new
Sign up for Google Cloud newsletters to receive product updates, event information, special offers, and more.
Documentation
Get an overview of Cloud Service Mesh and key implementation options.
Learn about various environments supported by Cloud Service Mesh.
Learn how Cloud Service Mesh provides observability into the health and performance of your services.
Learn how Cloud Service Mesh helps you mitigate insider threats and reduce the risk of a data breach by ensuring that all communications between workloads are encrypted, mutually authenticated, and authorized.
Enable and provision Cloud Service Mesh on Google Kubernetes Engine (GKE).
Enable and provision Cloud Service Mesh on Google Compute Engine (GCE).
Enable and provision Cloud Service Mesh in hybrid or multicloud environments.
Pricing
Cloud Service Mesh is available as part of GKE Enterprise or as a standalone offering on Google Cloud. Google APIs enabled on the project determine how you are billed. If you want to use Cloud Service Mesh on-premises or on other clouds, you must subscribe to GKE Enterprise.
GKE Enterprise customers are not billed separately for Cloud Service Mesh because it is already included in the GKE Enterprise pricing.
To use Cloud Service Mesh as a standalone service, don't enable the GKE Enterprise API on your project.
Start building on Google Cloud with $300 in free credits and 20+ always free products.