A service mesh like Istio can provide foundational mechanisms to implement a zero-trust application and network architecture, however, it introduces operational complexity. What if we can get the best of the service mesh security primitives like workload identity, and mutual TLS while reducing operational complexity? A completely sidecar-free mesh can improve a security posture with cryptographic workload identity, and Layer 4, and Layer 7 policies without the cost of ownership of current service mesh implementations.

- Service mesh with no sidecar i.e. better for networking

- Observability integrations

- Application Up in a more efficient way