# Introducing Ambient Mesh

DevFeed: [Introducing Ambient Mesh](<https://devfeed.tech/articles/introducing-ambient-mesh-48751.md>)

Original publisher: [Read original article](<https://istio.io/latest/blog/2022/introducing-ambient-mesh/>)

Author: John Howard (Google), Ethan J. Jackson (Google), Yuval Kohavi (Solo.io), Idit Levine (Solo.io), Justin Pettit (Google), Lin Sun (Solo.io)

Published: 2022-09-07T13:00:00Z

Content type: release

Language: en

Sources: [Istio Blog](<https://devfeed.tech/sources/istio-blog.md>)

Topics: [istio](<https://devfeed.tech/topics/istio.md>), [service-mesh](<https://devfeed.tech/topics/service-mesh.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Zero Trust](<https://devfeed.tech/topics/zero-trust.md>), [telemetry](<https://devfeed.tech/topics/telemetry.md>)

Tags: [ambient](<https://devfeed.tech/tags/ambient.md>), [ambient-mesh](<https://devfeed.tech/tags/ambient-mesh.md>), [istio](<https://devfeed.tech/tags/istio.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [mesh](<https://devfeed.tech/tags/mesh.md>), [microservices](<https://devfeed.tech/tags/microservices.md>), [services](<https://devfeed.tech/tags/services.md>), [telemetry](<https://devfeed.tech/tags/telemetry.md>), [traffic-management](<https://devfeed.tech/tags/traffic-management.md>), [zero-trust](<https://devfeed.tech/tags/zero-trust.md>)

## AI overview

Istio introduces Ambient Mesh, a dataplane mode that removes the need for per-application sidecar proxies. It is designed to simplify operations, improve application compatibility, reduce infrastructure cost, and retain Istio features such as zero-trust security, telemetry, and traffic management.

## Source excerpt

Ambient mode is now generally available! Today, we are excited to introduce "ambient mesh", and its reference implementation: a new Istio data plane mode that's designed for simplified operations, broader application compatibility, and reduced infrastructure cost. Ambient mesh gives users the option to forgo sidecar proxies in favor of a data plane that's integrated into their infrastructure, all while maintaining Istio's core features of zero-trust security, telemetry, and traffic management. We are sharing a preview of ambient mesh with the Istio community that we are working to bring to production readiness in the coming months. Istio and sidecars Since its inception, a defining feature of Istio's architecture has been the use of sidecars - programmable proxies deployed alongside application containers. Sidecars allow operators to reap Istio's benefits, without requiring applications to undergo major surgery and its associated costs. Istio's traditional model deploys Envoy proxies as sidecars within the workloads' pods Although sidecars have significant advantages over refactoring applications, they do not provide a perfect separation between applications and the Istio data plane. This results in a few limitations: Invasiveness - Sidecars must be "injected" into applications by modifying their Kubernetes pod spec and redirecting traffic within the pod. As a result, installing or upgrading sidecars requires restarting the application pod, which can be disruptive for workloads. Underutilization of resources - Since the sidecar proxy is dedicated to its associated workload, the CPU and memory resources must be provisioned for worst case usage of each individual pod. This adds up to large reservations that can lead to underutilization of resources across the cluster. Traffic breaking - Traffic capture and HTTP processing, as typically done by Istio's sidecars, is computationally expensive and can break some applications with non-conformant HTTP implementations. While