Service Mesh

Multi-Language Edition: This chapter is also available in Vietnamese at 📖 Bản tiếng Việt (Vietnamese Edition). 🏛️ Anchor Pillar Hub #8: Alipay Double 11 Architecture (544K TPS) | 🗺️ Sitewide Engineering Reading Map ← Series hub ← Prev • Next → Answer-first: Alipay’s tech stack combines SOFAStack middleware, OceanBase distributed databases, and lightweight Service Mesh sidecars to achieve high-density microservice deployments with low inter-service RPC overhead. Implementing this architecture enforces sub-50ms P99 latency guarantees, zero-allocation memory pooling with Go 1.24 unique.Handle, and fault-tolerant Dapr 1.15 component orchestration for resilient production scaling. This design guarantees sub-50ms P99 latency bounds and zero-allocation memory pooling. ...

Multi-Language Edition: This chapter is also available in Vietnamese at 📖 Bản tiếng Việt (Vietnamese Edition). Previous: Chapter 5 — Optimizing Golang Database Connection Pools | Series Hub | Next: Chapter 7 — Designing Idempotency APIs for Payment Systems Answer-First: The long-standing debate of “API Gateway vs. Service Mesh” is resolved by strict traffic topology boundaries: North-South Traffic (external untrusted clients entering the cluster) is exclusively governed by an API Gateway (Envoy, Kong, or K8s Gateway API) focusing on edge SSL termination, WAF scrubbing, OAuth2/OIDC token exchange, and API monetization. In contrast, East-West Traffic (inter-service communication within the private cluster) is handled by a Service Mesh (Istio Ambient Mesh or Cilium eBPF) delivering zero-trust mTLS via SPIFFE/SPIRE, dynamic circuit breaking, outlier detection, and distributed tracing without application code changes. ...

📖 Series Navigation: ← Previous Chapter: Part 9 — Cookie vs. SessionStorage vs. LocalStorage | Series Hub Part 10: Envoy Gateway vs. Cilium eBPF Service Mesh: Kernel Performance & Layer 7 Governance Showdown Answer-first: Envoy Gateway excels as a North-South Edge API Gateway with dedicated Envoy pods for advanced L7 policies (WAF, JWT, rate limiting, AI token quotas). Cilium eBPF dominates East-West cluster networking by bypassing the TCP/IP stack via sockops and cutting 92% RAM with node-level Envoy daemons. The 2026 standard combines both. ...