Meshlib eliminates sidecars to cut service mesh latency
New sidecar-less service mesh cuts latency 30% vs Istio in benchmarks...
Researchers Habib Mostafaei and Tom van Liempd have introduced Meshlib, a groundbreaking sidecar-less service mesh extension designed to eliminate the latency and resource overhead of traditional sidecar proxies. Built as a control-plane extension for Cilium, Meshlib leverages a non-intrusive application-bound library to enforce Layer-7 policies directly within the application process. By delegating transport-level identity and routing to Cilium's eBPF-based data plane, Meshlib removes the need for per-pod sidecar proxies—addressing a longstanding challenge in microservice architectures.
In rigorous testing against Istio, Linkerd, and unmodified Cilium using the TrainTicket benchmark (126 security policies across 37 services), Meshlib demonstrated the lowest end-to-end latency of all evaluated configurations while maintaining comparable resource overhead. Notably, the architecture is fully interoperable with unmodified services, enabling organizations to adopt it incrementally without disrupting existing deployments.
- Meshlib is a sidecar-less service mesh extension built for Cilium, enforcing policies in-process to reduce latency
- Achieved 30% lower end-to-end latency vs. Istio in TrainTicket benchmarks with 126 policies across 37 services
- Fully interoperable with unmodified services, allowing incremental adoption without service changes
Why It Matters
Eliminates sidecar overhead for faster, more efficient microservices security enforcement in production.