Kuma vs Tetrate Istio Subscription

Kuma is an open-source control plane for managing service meshes and microservices across Kubernetes, virtual machines, and bare-metal environments. It supports single-zone or multi-zone deployments across clouds, regions, and Kubernetes clusters, and one control plane can serve multiple meshes. Its traffic policies cover HTTP and TCP routing, health checks, circuit breaking, retries, timeouts, fault injection, and rate limiting. Security features include mutual TLS and mesh traffic permissions. Observability includes service maps, traces, access logs, metrics, and OpenTelemetry, with documented integrations for Prometheus, Grafana, Jaeger, and Datadog. Interfaces include Kubernetes CRDs, a GUI, a REST API, and a CLI; Envoy is bundled as the data-plane proxy. Kuma is self-hosted and available under a free open-source plan. Its installation guide provides Linux and macOS downloads, and documents macOS CLI installation through Homebrew. The Kubernetes quickstart describes the GUI as read-only. Production guidance covers secrets management, API access and authentication, proxy membership, certificates, and Kubernetes RBAC.

Tetrate Istio Subscription has no write-up on Specifiction yet; its figures are above.