Platform & DevOps·Traffic into and inside the cluster
every connection your service makes actually goes through a proxy in the same pod, which is where the retries and the TLS happen.
Sidecar proxy
Also calledmesh sidecar, envoy sidecar, mesh data plane
The per-workload proxy that intercepts inbound and outbound traffic, giving a mesh its identity, encryption, routing and telemetry without application changes. It is the data plane of a service mesh, and it is why mesh features apply uniformly to services written in five languages. Its costs are a hop of latency, memory and CPU on every pod, and a genuinely difficult startup and shutdown ordering problem with the application beside it.