When Kuma is being deployed in multi-zone mode and a service from one zone wants to consume a service from another zone, does that mean that the outbound request will automatically be routed to the correct address of the service (potentially in a different zone) while still honoring any custom "TrafficRoute" policies that the mesh administrators may have created in the meanwhile?
Yes. In Kuma the “.mesh” DNS zone will route to either an IP address of a replica of the service in the same zone, or to the IP address of a Kuma ingress in another zone for automatic cross-zone connectivity (only if mTLS is enabled so we can leverage SNI). Any TrafficRoute will be honored, and we can also apply zone-shifting rules by using the “kuma.io/zone“ tag in a “TrafficRoute” [1] policy.
Yep, Kuma supports both Kubernetes with native CRDs and auto-injection, as well as VMs with sidecar data plane proxies. You can configure it via a REST API or the CLI. In multi-zone it's also possible to mix and match them in a hybrid service mesh.
7 comments
[ 3.4 ms ] story [ 31.9 ms ] thread[1] - https://kuma.io/policies