What Is Alibaba Cloud Service Mesh (ASM)?

Image for post
Image for post

Alibaba Cloud Service Mesh (ASM) is the first fully-managed and Istio-compatible service mesh platform in the industry. It centrally manages the traffic of service applications that run on various computing infrastructures, including Alibaba Cloud Container Service for Kubernetes (ACK) managed and dedicated clusters, Alibaba Cloud Serverless Kubernetes (ASK) clusters, Elastic Compute Service (ECS), and Elastic Container Instance (ECI). ASM is compatible with the open-source Istio Service Mesh of the Istio community. It simplifies service management, including traffic routing and splitting for service calls, authentication security for inter-service communication, and mesh observability, all of which greatly reduces the development and O&M workload. This is the first edition in the ASM Public Preview Series and it explains what ASM is, and gives a brief overview of its architecture and features. Find below the links to other articles in this series:

Product Architecture

An ASM instance with the managed control plane supports application services from multiple Kubernetes clusters or application services that run on ECI pods. In addition, it also supports the integration of some non-Kubernetes services (such as services that run on VMs or bare metal hosts) into the same service mesh.

The following figure shows the ASM product architecture.

Image for post
Image for post


  • Consistent Management Mode: ASM uses a consistent mode to manage application services that run on ACK managed and dedicated Kubernetes clusters, serverless Kubernetes clusters, and access clusters in hybrid cloud and multi-cloud. This provides unified observability and throttling.
  • Centralized Traffic Management: ASM centrally manages traffic in a container or VM hybrid environment.
  • Managed Core Components of the Control Plane: Managed core components of the control plane helps to minimize users’ resource overhead and O&M costs.
  • Data Plane with Extendable Plug-in: Data plane capabilities, such as monitoring, tracing, and throttling, are integrated by using the Envoy plug-in. In addition, WebAssembly technology is used to facilitate data plane extension.

Original Source:

Follow me to keep abreast with the latest technology news, industry insights, and developer trends.

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store