- Home
- Service Mesh Platforms
- Linkerd
Linkerd
What it is
Linkerd is a service mesh for Kubernetes that adds runtime debugging, observability, reliability, and security without code changes. It installs into a Kubernetes cluster and injects proxies into workload pods. The mesh handles HTTP, HTTP/2, gRPC, and arbitrary TCP traffic, including TLS connections and WebSockets. It automatically enables mutual TLS between meshed applications and supports authorization policies between services. Metrics include request volume, success rates, and latency distributions for HTTP-family traffic, along with TCP-level measures. Traffic controls include load balancing, retries, timeouts, dynamic routing, traffic splitting, and rate limiting. Linkerd can work with Prometheus and Grafana for metrics and dashboards, and supports distributed tracing. Its included Linkerd Viz Prometheus instance retains metrics for a short fixed interval, currently six hours, so Linkerd is intended to supplement an existing metrics store. Installation requires a modern Kubernetes cluster and a functioning kubectl command. Linkerd is open source under Apache 2.0; Buoyant offers commercial support, training, and architectural reviews.
For and against
For
- Enables mutual TLS between meshed applications.
- Offers service authorization policies.
- Includes retries, timeouts, and traffic splitting.
- Works with Prometheus and Grafana.
- Open source under Apache 2.0.
Against
- Requires a modern Kubernetes cluster.
- Installation requires a functioning kubectl command.
- Included metrics retention is currently six hours.
- Designed to supplement an existing metrics store.
The verdict
Linkerd provides Kubernetes service-mesh security, traffic management, and observability without requiring code changes. Its included metrics retention is short, so teams need an existing metrics store for longer-term retention.
Who it suits
Linkerd suits teams operating Kubernetes applications that want mesh-level security, traffic controls, and observability without changing application code. It requires a modern Kubernetes cluster and a functioning kubectl command.
Plans and prices
Linkerd open source
Open source, Apache 2.0 licensed · Requires Kubernetes
Read 29 Sep 2026 · linkerd.io
On the record
- Commercial support
- Buoyant offers 24x7 enterprise support, training, and architectural reviews for Linkerd.linkerd.io · read 29 Sep 2026
- Deployment
- Linkerd is installed into a Kubernetes cluster and adds its data plane to workloads by injecting proxies into their pods.linkerd.io · read 29 Sep 2026
- Enterprise distribution
- Buoyant Enterprise for Linkerd lists a FIPS-compliant distribution with full L7 visibility and network encryption, authentication, and authorization.linkerd.io · read 29 Sep 2026
- Governance
- Linkerd is a CNCF graduated project licensed under Apache 2.0.linkerd.io · read 29 Sep 2026
- Integrations
- Linkerd can use Prometheus and Grafana for metrics and dashboards, and supports distributed tracing.linkerd.io · read 29 Sep 2026
- Metrics retention
- The Prometheus instance included with Linkerd Viz retains metrics for a short fixed interval, currently six hours, and Linkerd is designed to supplement an existing metrics store.linkerd.io · read 29 Sep 2026
- Observability
- Linkerd records request volume, success rates, and latency distributions for HTTP, HTTP/2, and gRPC traffic, plus TCP-level metrics.linkerd.io · read 29 Sep 2026
- Product
- Linkerd is a service mesh for Kubernetes that adds runtime debugging, observability, reliability, and security without requiring code changes.linkerd.io · read 29 Sep 2026
- Proxy
- Linkerd’s ultralight Linkerd2-proxy is written in Rust and designed specifically for the service mesh sidecar use case.linkerd.io · read 29 Sep 2026
- Requirements
- Linkerd requires a modern Kubernetes cluster and a functioning kubectl command for installation.linkerd.io · read 29 Sep 2026
- Security
- Linkerd automatically enables mutual TLS for communication between meshed applications and supports authorization policies between services.linkerd.io · read 29 Sep 2026
- Security audit
- Linkerd says it completed its 2024 security audit, which included penetration testing and white-box testing.linkerd.io · read 29 Sep 2026
- Traffic management
- Linkerd supports load balancing, retries, timeouts, dynamic request routing, traffic splitting, and rate limiting.linkerd.io · read 29 Sep 2026
- Traffic support
- Linkerd proxies HTTP, HTTP/2, gRPC, and arbitrary TCP traffic, including TLS connections and WebSockets.linkerd.io · read 29 Sep 2026
