An interactive explainer

You did not make that call.

Your code opens a connection to a service by name. A rule in your pod's network catches it and hands it to a second program running beside your app. That program makes the real call. Nothing in your code says any of this, and nothing in your code can see it. Watch the connection get redirected. Then find out why a retry policy nobody switched on puts 27 requests on the one service that was already failing.

Service mesh · Sidecar proxy · Istio · Control plane and data plane

Deployment & Cloud · Intermediate · 11 min · Why your service never made the call it thinks it made — an interactive explainer on ViLearn, with a simulation and a knowledge check. All explainers.

Related: How Kubernetes keeps your app alive · Why one expired key takes down a database that was 20% busy · How two strangers get a secret past everyone in the room