Re:Nebula, Slack's Open Source Global Overlay Network
by roberson87 on Wednesday November 20, 2019 @03:08AM
(#21582007)
Sounds like a service mesh. How is this any difference to Istio/linkerd? This library may be useful, but the stated problem it seeks to solve is hardly a unique one.
[ Parent
| on HN ]
Re:Nebula, Slack's Open Source Global Overlay Network
by vsupalov on Wednesday November 20, 2019 @05:33AM
(#21582659)
To me it reads more like Nebula is a VPN solution, with end-to-end encryption and security groups baked in.
To my understanding, a service mesh does not establish a common VPN-like network, but assumes it's there already. Nebula and service meshes both provide authentication, end-to-end encryption and role-based access control. A service mesh can do more than Nebula: it makes it possible to shift traffic between services for example apart from a "security group"-like filtering.
However, I might be mistaken. Any corrections are more than welcome.