Anthos Service Mesh

The fully managed service mesh for your complex microservices architectures.

View documentation for this product.

Think services first

Microservices architectures present numerous benefits but also introduce challenges like added complexity and fragmentation for different workloads. The Anthos platform unburdens your operations and development teams by simplifying service delivery across the board, from traffic management and mesh telemetry to securing communications between services. Anthos Service Mesh, Google’s fully managed service mesh, lets you easily manage these complex environments and enjoy the benefits they promise.

Fully managed, full stop

Since it’s a fully managed offering, Anthos Service Mesh takes all the guesswork and effort out of procuring and managing your service mesh solution. You focus on developing great apps; let us worry about your mesh.

Understand your apps

Your mesh can’t be at its most efficient if you can’t see how it’s operating. Anthos Service Mesh’s robust tracing, monitoring, and logging features give you deep insights into how your services are performing, how that performance affects other processes, and any issues that might exist.

Security simplified

Securing your service mesh can feel daunting. Anthos Service Mesh helps you embrace a zero-trust security model by giving you the tools to automatically and declaratively secure your services and their communication. You can manage authentication, authorization, and encryption between services with a diverse set of features—all with little or no changes to the applications themselves.

Easy traffic management

With Anthos Service Mesh, you can control traffic flows and API calls between services while also gaining visibility into your traffic. This makes calls more reliable and your network more robust, even in adverse conditions, while enabling you to catch issues before they become problems.

Features

Deep visibility built in [beta]

Anthos Service Mesh’s integration with Cloud Logging, Cloud Monitoring, and Cloud Trace opens up a wide range of features, including the ability to monitor SLOs at a per-service level and set targets for latency and availability. It also automatically generates graphs and tracks your compliance over time to show how you compare to your “error budget.”

Easy authentication, encryption

Transport authentication via mTLS (Mutual Transport Layer Security) has never been easier. Secure your service-to-service and end-user-to-service communications with a single click mTLS installation or incremental implementation.

Flexible authorization

Decide who has access to what services in your mesh with easy-to-use role-based access control (RBAC). You specify the permissions, then grant access to them at the level you choose, from namespace all the way down to users.

Fine-grained traffic controls

Anthos Service Mesh decouples traffic flow from infrastructure scaling, opening up many traffic management features, including dynamic request routing for A/B testing, canary deployments, and gradual rollouts—all outside of your application code.

Failure recovery out of the box

Anthos Service Mesh provides a number of critical failure-recovery features out of the box that can be configured dynamically at runtime, including timeouts, circuit breakers, active health checks, and bounded retries.

Fault injection tools

Even with robust failure-recovery features, it’s critical to test your mesh’s resilience. That’s where fault injection comes in. You can easily configure delay and abort faults to be injected into requests that match certain conditions, and even restrict the percentage of requests that should be subjected to faults.

Load balancing

Choose between round robin (each healthy upstream host is selected in order), random (load balancer selects a random healthy host), and weighted-least-request load balancing.

Resources

Take the next step

Start building on Google Cloud with $300 in free credits and 20+ always free products.

Need help getting started?
Work with a trusted partner
Continue browsing