https://microsegment.io/tags/service-mesh/ Recent content in Service-Mesh on microsegment.io Hugo en-us Tue, 06 Oct 2026 00:00:00 +0000 https://microsegment.io/post/2026-10-06-mtls-is-not-a-containment-policy/ Tue, 06 Oct 2026 00:00:00 +0000 https://microsegment.io/post/2026-10-06-mtls-is-not-a-containment-policy/ <p>The connection is encrypted. Both workloads have valid certificates. The dashboard is green.</p> <p>Now assume the calling workload is compromised. Which services can it still use?</p> <p>That is the containment question. A successful handshake is not the answer.</p> <h2 id="identity-is-an-input-to-policy">Identity Is An Input To Policy</h2> <p><a href="https://csrc.nist.gov/pubs/sp/800/207/a/final">NIST SP 800-207A</a> describes cloud-native access control using application and service identities alongside network parameters and user identities. Its architectural direction is granular application access, not simply encrypted connectivity.</p> https://microsegment.io/post/2019-11-23-the-service-mesh/ Sat, 23 Nov 2019 00:00:00 +0000 https://microsegment.io/post/2019-11-23-the-service-mesh/ <p>Whenever you hear people speak about containers and container networking, there is a high chance of the Service Mesh coming up as a topic. It is a real hype and while being on the twitters i discovered this great article by <a href="https://twitter.com/wm">William Morgan</a> of <a href="https://buoyant.io">@BuoyantIO</a>, the creator of Linkerd.</p> <p>William does a great job of explaining the technology, the use cases, what to use it for and what not and i have a couple of comments to add:</p>