linkerd/linkerd2

Linkerd is an ultralight, security-first service mesh for Kubernetes that adds critical security, observability, and reliability features to your Kubernetes stack with no code change required.

Linkerd solves the problem of securing and observing microservices communication in Kubernetes clusters without requiring application code modifications. It works by injecting a lightweight data plane proxy into your pods, which transparently handles service-to-service traffic. The control plane manages configuration and policy enforcement across the mesh, enabling features like automatic mutual TLS, traffic splitting, and distributed tracing out of the box.

Linkerd suits teams running Kubernetes who want to add security and observability without rewriting applications. It is particularly valuable for organizations prioritizing minimal resource overhead and straightforward deployment. The tool is designed to be simpler and lighter than some alternatives in the service mesh space, making it accessible to teams without extensive infrastructure expertise.

The project maintains a substantial base of real-world adopters, with almost all open issues raised by outside users rather than the core team. Responses to issues and pull requests typically arrive within one to two weeks. Work in the issue tracker is dominated by bug fixes, enhancements, and pinned items, reflecting a focus on stability and addressing user-reported problems.