Linkerd
linkerd.io
What it is
Linkerd is a service mesh for Kubernetes that adds runtime debugging, observability, reliability and security without requiring changes to application code. It installs into a Kubernetes cluster and injects sidecar proxies into workload pods. The mesh handles HTTP, HTTP/2, gRPC and arbitrary TCP traffic, including TLS connections and WebSockets. It automatically enables mutual TLS between meshed applications and supports authorization policies between services. Metrics include request volume, success rates and latency distributions for HTTP, HTTP/2 and gRPC, plus TCP-level metrics. Traffic controls include load balancing, retries, timeouts, dynamic routing, traffic splitting and rate limiting. Linkerd can use Prometheus and Grafana and supports distributed tracing. Its Linkerd Viz Prometheus instance retains metrics for a short fixed interval, currently six hours, so it is intended to supplement an existing metrics store. Installation requires a modern Kubernetes cluster and a working kubectl command. The open-source project is licensed under Apache 2.0; Buoyant offers commercial support, training and architecture reviews. The listed plan is free.
Spec sheet
- Product
- Linkerd is a service mesh for Kubernetes that adds runtime debugging, observability, reliability, and security without requiring code changes.Read 29 Sep 2026 · linkerd.io
- Deployment
- Linkerd is installed into a Kubernetes cluster and adds its data plane to workloads by injecting proxies into their pods.Read 29 Sep 2026 · linkerd.io
- Integrations
- Linkerd can use Prometheus and Grafana for metrics and dashboards, and supports distributed tracing.Read 29 Sep 2026 · linkerd.io
- Security
- Linkerd automatically enables mutual TLS for communication between meshed applications and supports authorization policies between services.Read 29 Sep 2026 · linkerd.io
- Commercial support
- Buoyant offers 24x7 enterprise support, training, and architectural reviews for Linkerd.Read 29 Sep 2026 · linkerd.io
- Enterprise distribution
- Buoyant Enterprise for Linkerd lists a FIPS-compliant distribution with full L7 visibility and network encryption, authentication, and authorization.Read 29 Sep 2026 · linkerd.io
- Governance
- Linkerd is a CNCF graduated project licensed under Apache 2.0.Read 29 Sep 2026 · linkerd.io
- Metrics retention
- The Prometheus instance included with Linkerd Viz retains metrics for a short fixed interval, currently six hours, and Linkerd is designed to supplement an existing metrics store.Read 29 Sep 2026 · linkerd.io
- Observability
- Linkerd records request volume, success rates, and latency distributions for HTTP, HTTP/2, and gRPC traffic, plus TCP-level metrics.Read 29 Sep 2026 · linkerd.io
- Proxy
- Linkerd’s ultralight Linkerd2-proxy is written in Rust and designed specifically for the service mesh sidecar use case.Read 29 Sep 2026 · linkerd.io
- Requirements
- Linkerd requires a modern Kubernetes cluster and a functioning kubectl command for installation.Read 29 Sep 2026 · linkerd.io
- Security audit
- Linkerd says it completed its 2024 security audit, which included penetration testing and white-box testing.Read 29 Sep 2026 · linkerd.io
- Traffic management
- Linkerd supports load balancing, retries, timeouts, dynamic request routing, traffic splitting, and rate limiting.Read 29 Sep 2026 · linkerd.io
- Traffic support
- Linkerd proxies HTTP, HTTP/2, gRPC, and arbitrary TCP traffic, including TLS connections and WebSockets.Read 29 Sep 2026 · linkerd.io
Plans and prices
Strong points and limits
Strong points
- Adds mesh features without code changes
- Automatically enables mutual TLS
- Supports traffic policies including retries and rate limiting
- Works with Prometheus and Grafana
Limits
- Requires a modern Kubernetes cluster
- Included metrics retention is currently six hours
Who it suits
Linkerd suits teams running workloads on Kubernetes that want service-level traffic controls, metrics and mutual TLS without application code changes. It assumes a modern cluster and functioning kubectl.
Verdict
Linkerd brings traffic management, observability and security controls to Kubernetes workloads. Its included metrics store has limited retention, so it is designed to complement an existing metrics store.
Where Specifiction places it
- Service Mesh Platforms#10 of 227.6
- Distributed Systems#21 of 307.5