# Envoy

Published articles for Envoy.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## 【Istio 控制面】Linkerd 对照：非 xDS 的控制面机制

DevFeed: [【Istio 控制面】Linkerd 对照：非 xDS 的控制面机制](<https://devfeed.tech/articles/istio-linkerd-xds-34002.md>)

Original publisher: [Read original article](<https://quant67.com/post/istio-xds/14-linkerd-contrast/14-linkerd-contrast.html>)

Author: Liao Tonglang

Published: 2026-08-11T00:00:00Z

Content type: article

Language: zh

Sources: [土法炼钢 - 系统与基础设施](<https://devfeed.tech/sources/source-4.md>)

Topics: [istio](<https://devfeed.tech/topics/istio.md>), [linkerd](<https://devfeed.tech/topics/linkerd.md>), [API](<https://devfeed.tech/topics/api.md>), [proxy](<https://devfeed.tech/topics/proxy.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [control-plane](<https://devfeed.tech/tags/control-plane.md>), [destination-controller](<https://devfeed.tech/tags/destination-controller.md>), [envoy](<https://devfeed.tech/tags/envoy.md>), [go](<https://devfeed.tech/tags/go.md>), [identity](<https://devfeed.tech/tags/identity.md>), [istio](<https://devfeed.tech/tags/istio.md>), [istiod](<https://devfeed.tech/tags/istiod.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [linkerd](<https://devfeed.tech/tags/linkerd.md>), [mechanism-comparison](<https://devfeed.tech/tags/mechanism-comparison.md>), [network](<https://devfeed.tech/tags/network.md>), [policy](<https://devfeed.tech/tags/policy.md>), [proxy](<https://devfeed.tech/tags/proxy.md>), [route](<https://devfeed.tech/tags/route.md>), [rust](<https://devfeed.tech/tags/rust.md>), [service](<https://devfeed.tech/tags/service.md>), [serviceaccount](<https://devfeed.tech/tags/serviceaccount.md>), [sidecar](<https://devfeed.tech/tags/sidecar.md>), [xds](<https://devfeed.tech/tags/xds.md>)

### AI overview

This article compares Linkerd's control-plane architecture with Istio's istiod and xDS model. It describes Linkerd's separately deployed destination, identity, and proxy-injector components; its proxy-specific gRPC APIs; and its CSR-based identity issuance, contrasting these with Istio's consolidated control plane and xDS/SDS resource model. It explicitly avoids declaring either system superior without workload-specific evidence.

### Source excerpt

以官方文档为准，对照 Linkerd destination/identity 控制面与 Istio istiod/xDS 的机制差异：资源模型、订阅形状、身份签发路径；只讲机制边界，不判定优劣。

## Service Mesh Architecture: Sidecar Overhead, Istio, and Alternatives Without Sidecars

DevFeed: [Service Mesh Architecture: Sidecar Overhead, Istio, and Alternatives Without Sidecars](<https://devfeed.tech/articles/service-mesh-sidecar-sidecar-33975.md>)

Original publisher: [Read original article](<https://quant67.com/post/architecture/76-service-mesh/service-mesh.html>)

Author: Liao Tonglang

Published: 2026-04-13T00:00:00Z

Content type: article

Language: zh

Sources: [土法炼钢 - 系统与基础设施](<https://devfeed.tech/sources/source-4.md>)

Topics: [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [istio](<https://devfeed.tech/topics/istio.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Cilium](<https://devfeed.tech/topics/cilium.md>), [eBPF](<https://devfeed.tech/topics/ebpf.md>), [linkerd](<https://devfeed.tech/topics/linkerd.md>)

Tags: [architecture](<https://devfeed.tech/tags/architecture.md>), [cilium](<https://devfeed.tech/tags/cilium.md>), [ebpf](<https://devfeed.tech/tags/ebpf.md>), [envoy](<https://devfeed.tech/tags/envoy.md>), [istio](<https://devfeed.tech/tags/istio.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [linkerd](<https://devfeed.tech/tags/linkerd.md>), [observability](<https://devfeed.tech/tags/observability.md>), [proxy](<https://devfeed.tech/tags/proxy.md>), [security](<https://devfeed.tech/tags/security.md>), [service-mesh](<https://devfeed.tech/tags/service-mesh.md>), [sidecar](<https://devfeed.tech/tags/sidecar.md>), [tls](<https://devfeed.tech/tags/tls.md>)

### AI overview

This article explains the core problems addressed by service meshes and examines the Sidecar architecture, including traffic interception, proxy processing, Envoy's xDS configuration model, and Istio's istiod control plane. It focuses on the performance and operational overhead of Sidecars and compares them with approaches such as Cilium's eBPF-based implementation and Istio Ambient Mesh.

### Source excerpt

2023 年，某头部电商平台在全量接入 Istio 后发现：每个 Pod 的内存占用增加了 40-70 MB，p99 延迟从 12 ms 上升到 18 ms，整个集群每月多出数万美元的计算成本。这并非个例。CNCF 2024 年度调查显示，超过 60% 的受访企业已在生产环境中使用或评估服务网格（Service Mes...