2018-05-29 21:07:40 +00:00
---
2020-04-07 18:55:19 +00:00
layout: docs
2020-09-01 15:14:13 +00:00
page_title: Service Mesh
2018-05-29 21:07:40 +00:00
description: |-
2019-06-14 05:52:50 +00:00
Consul Connect provides service-to-service connection authorization and
encryption using mutual TLS.
2018-05-29 21:07:40 +00:00
---
2022-03-18 15:55:57 +00:00
# Consul Service Mesh
2018-05-29 21:07:40 +00:00
2022-03-18 15:55:57 +00:00
Consul Service Mesh provides service-to-service connection authorization and
encryption using mutual Transport Layer Security (TLS). Consul Connect is used interchangeably
with the name Consul Service Mesh and is what this document will use to refer to for Service Mesh functionality within Consul.
Applications can use [sidecar proxies](/docs/connect/proxies) in a service mesh configuration to
establish TLS connections for inbound and outbound connections without being aware of Connect at all.
Applications may also [natively integrate with Connect](/docs/connect/native) for optimal performance and security.
Connect can help you secure your services and provide data about service-to-service communications.
2019-06-14 05:52:50 +00:00
2020-04-06 20:27:35 +00:00
Review the video below to learn more about Consul Connect from HashiCorp's co-founder Armon.
2019-12-18 18:54:39 +00:00
2020-04-07 18:55:19 +00:00
<iframe
src="https://www.youtube.com/embed/8T8t4-hQY74"
frameborder="0"
allowfullscreen="true"
width="560"
height="315"
></iframe>
2019-12-18 18:54:39 +00:00
2019-06-14 05:52:50 +00:00
## Application Security
Connect enables secure deployment best-practices with automatic
service-to-service encryption, and identity-based authorization.
Connect uses the registered service identity (rather than IP addresses) to
2020-04-09 23:46:54 +00:00
enforce access control with [intentions](/docs/connect/intentions). This
2019-06-14 05:52:50 +00:00
makes it easier to reason about access control and enables services to be
rescheduled by orchestrators including Kubernetes and Nomad. Intention
enforcement is network agnostic, so Connect works with physical networks, cloud
networks, software-defined networks, cross-cloud, and more.
## Observability
2019-08-01 17:57:26 +00:00
One of the key benefits of Consul Connect is the uniform and consistent view it can
2020-04-06 20:27:35 +00:00
provide of all the services on your network, irrespective of their different
2019-06-14 05:52:50 +00:00
programming languages and frameworks. When you configure Consul Connect to use
sidecar proxies, those proxies "see" all service-to-service traffic and can
collect data about it. Consul Connect can configure Envoy proxies to collect
layer 7 metrics and export them to tools like Prometheus. Correctly instrumented
2020-01-14 22:59:27 +00:00
applications can also send open tracing data through Envoy.
2018-06-06 22:10:52 +00:00
2022-03-18 15:55:57 +00:00
## Getting Started With Consul Service Mesh
2018-10-11 09:44:42 +00:00
There are several ways to try Connect in different environments.
2022-09-06 15:35:01 +00:00
- The [Getting Started with Consul Service Mesh collection](https://learn.hashicorp.com/tutorials/consul/service-mesh?utm_source=docs)
2020-04-06 20:27:35 +00:00
walks you through installing Consul as service mesh for Kubernetes using the Helm
chart, deploying services in the service mesh, and using intentions to secure service
communications.
2022-03-18 15:55:57 +00:00
2022-09-06 15:35:01 +00:00
- The [Getting Started With Consul Service Mesh for Kubernetes](https://learn.hashicorp.com/tutorials/consul/service-mesh-deploy?in=consul/gs-consul-service-mesh?utm_source=docs) guide walks you through installing Consul on Kubernetes to set up a service mesh for establishing communication between Kubernetes services.
2018-11-13 13:43:53 +00:00
2022-09-06 15:35:01 +00:00
- The [Secure Service-to-Service Communication tutorial](https://learn.hashicorp.com/tutorials/consul/service-mesh-with-envoy-proxy?utm_source=docs)
2020-04-06 20:27:35 +00:00
is a simple walk through of connecting two services on your local machine
using Consul Connect's built-in proxy and configuring your first intention. The guide also includes an introduction to
using Envoy as the Connect sidecar proxy.
2018-11-13 13:43:53 +00:00
2022-09-06 15:35:01 +00:00
- The [Kubernetes tutorial](https://learn.hashicorp.com/tutorials/consul/kubernetes-minikube?utm_source=docs)
2020-04-06 20:27:35 +00:00
walks you through configuring Consul Connect in Kubernetes using the Helm
chart, and using intentions. You can run the guide on Minikube or an existing
Kubernetes cluster.
2022-09-06 15:35:01 +00:00
- The [observability tutorial](https://learn.hashicorp.com/tutorials/consul/kubernetes-layer7-observability?in=consul/kubernetes)
2020-04-06 20:27:35 +00:00
shows how to deploy a basic metrics collection and visualization pipeline on
a Minikube or Kubernetes cluster using the official Helm charts for Consul,
Prometheus, and Grafana.
