Tetrate Service Bridge

Security

Simplify policy enforcement by extending the capabilities of a service mesh to your entire application fleet. App-level zoning allows for secure, fine-grained segmentation. Vetted workflows allow application, platform, and infosec teams to effectively manage policies for the entire organization. A centralized view of config changes with policy controls enables audit and continuous proof of compliance.

Compliance

IT security, compliance

Tetrate Service Bridge provides FIPS and federally certified builds, plus out-of-the box controls to ensure compliance with regulatory requirements. Audit log exports are also available to provide proof of current and historical adherence to governance and compliance standards.

Secure multitenancy

Secure Multi-Tenant Environments

Give application teams the tools they need to manage their services without stepping on each other’s toes. Reduce the risk of accidental misconfiguration or malicious attack by limiting access to only the resources each team needs. Maintain agility while ensuring security across your organization by enforcing consistent global policies while delegating control to individual app teams.

End-to-end mTLS

End-to-end mTLS: Securing Microservices in Service Mesh

Implement encryption consistently and flexibly across all workloads, including between containers and VMs. Choose TLS version support based on corporate governance policy, not the capacity of your application teams. Tetrate Service Bridge integrates with your existing public key infrastructure––including ACM and Venafi––for centralized management.

Secure access

Security - Preventing Unauthorized Access

Tetrate’s built-in implementation of NIST’s next-generation access control (NGAC) provides for fine-grained, flexible segmentation, authentication and authorization. Move auth out of your applications to unburden your developers. Perform access control in Envoy between services to ensure consistent policy enforcement across your entire fleet and manage it all in one place.

Policy-driven

Service Mesh Policy - Managing Service-to-Service Communications

Take security concerns out of the application code stack and put them in the application networking platform where they belong. Give your security team centralized control of policy for all your applications. Free your app devs from implementing security controls.

Connectivity

Tetrate Service Bridge is built specifically for heterogeneous, multi-site deployments, enabling seamless cross-cluster communication. Control how traffic arrives at your clusters with edge and application gateways. Manage application connectivity with simple, consistent workflows, regardless of where they’re deployed.

Multi-cluster

Application Discovery & Connectivity Management

Manage application connectivity across your entire infrastructure—including multiple clusters, multiple clouds, and on premises—from a single point of control. Tetrate Service Bridge was built from the ground up to support hybrid network and compute environments, reducing the complexity of managing application networking across your entire fleet.

Multi-platform

Manage and secure multi-platform environments

Manage VMs and monoliths the same way as your services. Extend the power of your service mesh to all workloads, bringing VMs and monoliths as first-class citizens into your mesh.

Seamless

Seamless connectivity architecture and methods

Gain runtime service discovery for all your applications to enable seamless application communication across your entire infrastructure—multi-cluster to multi-cloud, from monoliths to microservices. Map your global service inventory to the right teams with the right tools to ensure your apps are managed efficiently and safely.

Standardized

Availability security, connectivity, and observability

Ship code faster by standardizing the way your applications communicate. Replace patchworks of custom gateways. Instead, offload security, connectivity, and observability to the mesh to increase agility and operational efficiency across your organization.

Observability

Gain a comprehensive view of your entire application infrastructure to understand dependencies and health at a glance. Deliver app-specific alerts to the right teams with correlated metrics, traces, and service lifecycle events. Give app teams the context they need to pinpoint problems and dramatically reduce mean time to recovery. Tetrate Service Bridge also makes it easy to apply SLOs globally across your fleet.

SLOs

SLOs with Service Monitoring - Implementing Service Level Objectives

See the topology of your services and their dependency relationships to understand application health at a glance. Correlated metrics, traces, logs, and lifecycle events make it easier to troubleshoot apps and reduce MTTI and MTTR.

Signals

SkyWalking APM End-to-end Monitoring

Get a consistent set of both service and app-level signals from all your applications. Ensure alerts get to the right teams so they can take action as performance degradation starts, before your users notice. Skywalking under the hood means data collection will scale efficiently with your apps.

Dashboard

Topology Discovery Service - Software

Give app teams a view of their service topology and dependencies at a glance. Provide them the tools they need to manage their SLOs. Ensure alerts get to the right people.

Behaviors

Discover Topological Behavior

Collect consistent baseline metrics for all apps without having to get them from each app team. Create, measure, and monitor both app and service-level SLOs across all your fleet. Use that in-depth knowledge of app behaviors to recognize anomalies and take action before users notice.

Reliability

Ensure business continuity with the built-in scalability and high-availability capabilities of Tetrate Service Bridge, layered over Istio’s reliability primitives. TSB provides a distributed, autoscaling ingress layer across your applications plus tools to manage transparent failover—from a manual “big red button” to touch-free, automatic failover. View the context of your applications, their dependencies, and where they’re deployed to understand global health and manage SLOs across your entire fleet. Be sure your teams can measure how their apps behave and have the tools to respond to their operational needs.

HA & DR

High availability (HA) and disaster recovery (DR)

Tetrate Service Bridge layers on top of Istio’s reliability primitives to help you deploy and operate highly-available applications. First-class support for multiple clusters makes it easy to build for high availability. TSB provides automatic failover for apps already built for it, plus a big red button to immediately control how and where traffic flows.

Release cadence

Service Release Cadence

Increase release cadence with built-in tools to measure when it’s safe to release newly deployed versions of your services to live traffic. Tetrate Service Bridge gives you the confidence to move quickly plus the tools to safely roll back to a good state when needed.

Migration

Cloud Migration Services and Solutions

Easily shift traffic from sick clusters to healthy ones—before your users notice. Equip app teams with the tools they need to understand their applications’ health and take action on early indicators with the best information possible at their fingertips.

Lifecycle

Lifecycle Management Service Mesh

Take the labor and risk out of updating new app versions as well as your underlying mesh infrastructure. Give your app teams the primitives for fast, safe application updates. Make it easy and safe for platform operators to keep application infrastructure up-to-date.

Load balancing

Network load balancer and application load balancer

Offload reliability concerns to the mesh by using built-in recovery features like timeouts, retries, and circuit breakers. Increase the ability to mitigate cascading failures with client-side load balancing. Decrease latency and minimize egress costs with locality-aware load balancing that ensures local traffic stays local.

Resources

Report

Tetrate Named a Cool Vendor by Gartner

Tetrate is recognized by Gartner as a Cool Vendor in Cloud Computing. You can read the report to learn what Gartner has to say about Tetrate…

Download Report ›

Video

Starting out with
Service Mesh

Envoy creator Matt Klein (Lyft) advises organizations starting with service mesh to make changes incrementally, to solve problems one piece at a time.

Watch Now ›

Case Study

Encryption & PCI Compliance with Istio Service Mesh

Service mesh architecture provides a rich set of features for controlling and securing communications among services. Encryption in transit…

What’s Your App SCOR?