Greymatter vs Network Service Mesh

Greymatter is a Zero Trust Networking platform for controlling, connecting, and securing applications, APIs, and AI workloads. Its architecture has analytics, zero trust, service connectivity, orchestration, and enterprise-integration layers. Deployments can run across AWS, Azure, GCP, Oracle Cloud, sovereign clouds, Kubernetes distributions, virtual machines, edge environments, and disconnected settings. Greymatter automates workload identity provisioning, applies mutual TLS, and uses NIST-validated FIPS 140-3 cryptography, CMVP #5191. GitOps Playbooks manage traffic policies across clusters with autonomous updates and zero-downtime changes. Deployment options include canary, blue-green, and progressive delivery with health checks, fallback logic, and rollback. Analytics integrates with Grafana, Kibana, Prometheus, Splunk, Elasticsearch, SIEMs, and APMs. Identity integrations support OAuth2, OIDC, and PKI, including Keycloak, Ping Federate, Okta, and Auth0. It offers hybrid deployment, enterprise support, and a 30-day free trial.

Network Service Mesh connects workloads across clusters and clouds through a hybrid, multi-cloud IP service mesh. Each workload can connect independently to zero or more Network Services, regardless of where it runs. The project says it works with an existing CNI without requiring changes to Kubernetes or workloads. Services can provide connectivity, security, and observability at Layer 3 and above, carrying IP or Ethernet payloads.

Clients may be Kubernetes pods, virtual machines, or physical servers. They authenticate independently, currently using SPIFFE IDs, and need authorization to attach. Clients request and close virtual wires over gRPC and can monitor connection status through a streaming call. Endpoint selection offers composition, selective composition, topology awareness, and scale from zero. A service may also provide domain-scoped DNS for connected pods. The architecture describes integration with Istio, Linkerd, Consul, and Kuma. Network Service Mesh is a CNCF sandbox project and is free and open source. Its run guide lists Docker, Go, a Kubernetes cluster, and kubectl as prerequisites; most examples require at least two worker nodes.