# Istio

Connect, secure, control, and observe services.

Repository: https://github.com/istio/istio
Canonical: https://ross.abutalabs.com/products/istio
Homepage: https://istio.io
Language: Go
License: Apache-2.0
License Family: permissive
Topics: microservices, service-mesh, lyft-envoy, kubernetes, api-management, circuit-breaker, polyglot-microservices, enforce-policies, proxies, microservice, envoy, consul, nomad, request-routing, resiliency, fault-injection
Last push: 2026-08-26T22:10:10+00:00
Link (homepage): https://istio.io
Link (site_page): https://istio.io/latest/about/service-mesh
Link (site_page): https://istio.io/latest/about/solutions
Link (site_page): https://istio.io/latest/about/case-studies
Link (site_page): https://istio.io/latest/about/ecosystem

## Health v2 (maintenance only)
Score: 93/100 (v2, computed 2026-09-03T02:39:23.370411+00:00)
- activity 99, release rhythm 81, longevity 100
- inputs: {"age_days": 3575, "days_push": 7, "days_rel": 48, "gap_med": 6, "n_releases_24m": 66}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 38356, forks 8374 (observed 2026-08-28T04:12:07.383844+00:00)

## What it is
Istio is an open-source service mesh that layers transparently onto distributed applications, providing traffic management, zero-trust security (mTLS), policy enforcement, and observability with few or no code changes. It extends Kubernetes with a programmable, application-aware network using Envoy proxies or the ambient zero-trust tunnel, and is a CNCF graduated project.

## Use cases
- manage traffic flow and routing between microservices in Kubernetes
- encrypt service-to-service communication with automatic mTLS
- add observability, metrics, and distributed tracing to services without code changes
- run canary deployments and A/B testing with fine-grained traffic splitting
- enforce zero-trust security policies and access control across a fleet of services
- improve reliability with circuit breaking, retries, and fault injection
- connect services across multi-cloud, hybrid, VM, and on-premises environments

## When to choose
- you run a microservices architecture on Kubernetes and need uniform traffic management, security, and telemetry
- you want zero-trust mTLS and policy enforcement without modifying application code
- you need canary releases, A/B testing, or resilient routing across many services
- you want a mature, CNCF-graduated service mesh with a large ecosystem and managed offerings

## When to avoid
- you have a small, simple deployment where a service mesh would add unnecessary complexity and resource overhead
- your services are not on Kubernetes or similar platforms and you cannot operate proxy infrastructure
- you only need basic ingress routing, where a simple API gateway suffices
- your team lacks the operational capacity to run and upgrade mesh control planes

## Facets
- artifact type: infra-config
- maturity: stable
- function: microservices, api-gateway, monitoring, tracing, security, networking, service-discovery, deployment
- domain: microservices, cloud-computing, networking, security, monitoring, infrastructure-as-code
- platform: cloud, self-hosted, go
- tags: service-mesh, envoy, istio, traffic-management, mtls, zero-trust, canary-deployments, circuit-breaker, ambient-mode, sidecar-proxy, cncf, fault-injection, request-routing, telemetry, devops, containers, kubernetes, docker, linux

## Member repositories
- istio/istio (main) score 93
- istio/community (docs) score 77

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:12:07.383844+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T16:24:56.489580+00:00, confidence not recorded.
  - readme: https://github.com/istio/istio (fetched 2026-08-28T04:12:07.383844+00:00, sha 543aca12152f)
  - homepage: https://istio.io (fetched 2026-08-29T07:47:10.885508+00:00, sha f63ecca18b55)
  - site_page: https://istio.io/latest/about/service-mesh (fetched 2026-08-29T07:47:10.894416+00:00, sha cf9a25c3f9f3)
  - site_page: https://istio.io/latest/about/solutions (fetched 2026-08-29T07:47:10.896471+00:00, sha 4641c6dc9c89)
  - site_page: https://istio.io/latest/about/case-studies (fetched 2026-08-29T07:47:10.898125+00:00, sha abe0d3f548b1)
  - site_page: https://istio.io/latest/about/ecosystem (fetched 2026-08-29T07:47:10.899744+00:00, sha 106cd78d1af6)
  - site_page: https://istio.io/latest/about/deployment (fetched 2026-08-29T07:47:10.901541+00:00, sha cf435ee35595)
  - site_page: https://istio.io/latest/about/training (fetched 2026-08-29T07:47:10.903251+00:00, sha a3d7c6b2a9f7)
  - site_page: https://istio.io/latest/about/faq (fetched 2026-08-29T07:47:10.904745+00:00, sha 3fad88d855e2)
  - site_page: https://istio.io/latest/docs (fetched 2026-08-29T07:47:10.906978+00:00, sha a63018ea1bcd)
- Data as of 2026-08-30T08:39:29.467469+00:00.