Mesh7: a microservices security platform (case study PDF)

Mesh7, a Silicon Valley startup, built a cloud-native application that examines communication between microservices, shows potential threats and applies security policies automatically.

This case study covers CodiLime's work as its technology partner: a service mesh platform for security and observability, policy generation with Envoy Proxy, a GoLang control plane with a K8s operator, DDOS protection and the service graph frontend.

The main topics covered in this report:

Layer 7 blind spots across workloads, cloud and third-party services
Policy generation via Envoy Proxy: API discovery, API validation, service discovery
GoLang control plane utilizing a K8s operator
Service graph and analytics frontend, plus a DDOS protection mechanism
Performance work on attack response, data aggregation and memory usage

Mesh7: a microservices security platform (case study PDF) — document render

Why download this report?

Which security blind spots did Mesh7 close?
Real-time visibility of interactions between workloads, cloud and third-party services, control over the flow of sensitive data, and detection of anomalous behavior and lateral threats at run time.
What did CodiLime build?
A service mesh platform for security and observability, with a DDoS protection mechanism, plugins for Istio, policy generation via Envoy Proxy and a Go control plane built as a Kubernetes operator.
How was the platform kept fast?
CodiLime analyzed performance and optimized attack response, data aggregation and memory usage, and created the CI/CD project and a performance measurement toolkit.
What does each team get?
Security teams detect threats and vulnerabilities immediately, and cloud ops teams run it on public or hybrid cloud, Kubernetes, VMware vCenter or AWS. With the SaaS installation, onboarding a customer takes minutes.