Kubernetes service mesh — traffic management, mTLS, and observability for microservices via sidecar or ambient mode.
Istio is an open-source service mesh for distributed applications running on Kubernetes. It transparently manages service-to-service communication via Envoy proxies — providing traffic management, mTLS, authorization, and rich telemetry without changing application code.