Flomesh Service Mesh vs Traefik Mesh

Flomesh Service Mesh (FSM) provides traffic management and service governance for microservices running on Kubernetes. It uses the Flomesh Pipy proxy, which is automatically added as a sidecar to onboarded applications. FSM supports traffic shifting, ingress and egress, and Kubernetes Gateway API capabilities, along with HTTP, TCP, gRPC and MQTT traffic. For service security, it enables mutual TLS and fine-grained access policies. Certificate management can use Tresor, cert-manager or HashiCorp Vault. Documentation marks Prometheus and Grafana integrations as stable and Jaeger distributed tracing as beta; integration guides also cover Dapr and discovery registries such as Consul, Eureka and Nacos. FSM supports x86 and ARM architectures and multi-cluster Kubernetes connectivity through the MCS API, though multicluster is marked alpha. It is open source, free and self-hosted, with Kubernetes and OpenShift listed. Installation requires Kubernetes 1.19 or later; version 1.1 is listed for Kubernetes 1.19 through 1.24.

Traefik Mesh is a free, open-source service mesh designed for use in Kubernetes. It routes traffic through proxy endpoints on each node and runs the mesh controller in a dedicated pod, without sidecar containers. Existing services remain outside the mesh until they are added through Traefik Mesh service names. Services can be configured with annotations or Service Mesh Interface (SMI) objects, and ACL mode can require authorization between resources using SMI TrafficTarget resources. Traffic controls include retries, circuit breakers, rate limits, and SMI traffic splitting; examples cover HTTP and TCP services. A built-in debugging API is accessed through the controller pod rather than exposed as a service. Installation uses a Helm chart and requires Kubernetes, CoreDNS or KubeDNS, and Helm v3. The compatibility page lists Kubernetes 1.21, 1.22, and 1.23 as its latest supported minor versions, and says general functionality is not guaranteed for older versions. Traefik Mesh does not provide mutual TLS or implement the SMI Traffic Metrics specification. It is self-hosted and listed for Kubernetes.