Features

Automatic mTLS. Linkerd automatically enables mutual Transport Layer Security (TLS) for all communication between meshed applications.

. Linkerd will automatically inject the data plane proxy into your pods based annotations.

CNI Plugin. Linkerd can be configured to run a CNI plugin that rewrites each pod’s iptables rules automatically.

. Linkerd provides a web dashboard, as well as pre-configured Grafana dashboards.

Fault Injection. Linkerd provides mechanisms to programmatically inject failures into services.

. The Linkerd control plane can run in high availability (HA) mode.

HTTP, HTTP/2, and gRPC Proxying. Linkerd will automatically enable advanced features (including metrics, load balancing, retries, and more) for HTTP, HTTP/2, and gRPC connections.

. Linkerd can work alongside your ingress controller of choice.

Multi-cluster communication. Linkerd can transparently and securely connect services that are running in different clusters.

. Linkerd can perform service-specific retries and timeouts.

Service Profiles. Linkerd’s service profiles enable per-route metrics as well as retries and timeouts.

. Linkerd is capable of proxying all TCP traffic, including TLS’d connections, WebSockets, and HTTP tunneling.

Traffic Split (canaries, blue/green deploys). Linkerd can dynamically send a portion of traffic to different services.