Service mesh vs library-based approach in Kubernetes - Visual Side-by-Side Comparison

Process Flow - Service mesh vs library-based approach

Start: Application Service

↓

Direct Service Calls

↓

Service Communication

↓

Service Mesh Control Plane

↓

Configuration & Policy

Shows how library-based approach integrates proxies inside app code, while service mesh uses sidecar proxies to intercept calls, enabling features via a control plane.

Execution Sample

Kubernetes

app -> library proxy -> service
app -> sidecar proxy -> service
sidecar proxy -> control plane

Shows the flow of service calls through library proxy vs sidecar proxy in service mesh.

Process Table

Step	Component	Action	Result	Notes
1	Application	Calls service via library proxy	Request sent directly with embedded proxy logic	Library proxy is part of app code
2	Library Proxy	Processes request	Request forwarded to target service	No separate container involved
3	Application	Calls service	Request sent to sidecar proxy container	In service mesh, proxy runs separately
4	Sidecar Proxy	Intercepts and processes request	Applies policies, telemetry, security	Transparent to app
5	Sidecar Proxy	Forwards request to target service	Service receives request	Service unaware of proxy
6	Sidecar Proxy	Reports metrics to control plane	Control plane updates state	Enables centralized management
7	Control Plane	Sends config and policies	Sidecar proxies update behavior	Dynamic and centralized
8	Application	Receives response	Response returned to app	Same for both approaches
9	End	No more steps	Communication complete	Process repeats for each call

💡 Communication ends after response is received by application

Status Tracker

Component	Start	After Step 1	After Step 3	After Step 4	After Step 6	Final
Application	Idle	Request sent via library proxy	Request sent to sidecar proxy	Waiting for response	Waiting for response	Response received
Library Proxy	Inactive	Processing request	N/A	N/A	N/A	Idle
Sidecar Proxy	Inactive	N/A	Intercepting request	Applying policies	Reporting metrics	Idle
Control Plane	Idle	Idle	Idle	Idle	Updating config	Idle

Key Moments - 3 Insights

Why does the sidecar proxy run as a separate container instead of inside the app?

Because the sidecar proxy is independent, it can be updated or managed without changing the app code, as shown in execution_table steps 3 and 4.

How does the library-based approach affect the application code?

The library proxy is embedded inside the app, so the app code must include proxy logic, seen in execution_table step 1.

What role does the control plane play in the service mesh?

The control plane manages configuration and policies centrally, updating sidecar proxies dynamically, as shown in steps 6 and 7.

Visual Quiz - 3 Questions

Look at the execution_table, at which step does the sidecar proxy apply policies to the request?

A Step 2

B Step 4

C Step 6

D Step 8

💡 Hint

Check the 'Action' column for sidecar proxy activities in execution_table rows

According to variable_tracker, what is the state of the library proxy after step 1?

A Idle

B Intercepting request

C Processing request

D Reporting metrics

💡 Hint

Look at the 'Library Proxy' row under 'After Step 1' in variable_tracker

If the control plane stops sending config, which step in execution_table would be affected?

A Step 7

B Step 4

C Step 5

D Step 9

💡 Hint

Refer to the 'Control Plane' actions in execution_table step 7

Concept Snapshot

Service mesh uses sidecar proxies as separate containers to intercept service calls,
allowing centralized control and features without changing app code.
Library-based approach embeds proxy logic inside the app, requiring code changes.
Service mesh control plane manages policies and config dynamically.
Sidecar proxies report telemetry and enforce security transparently.
Library proxies handle requests directly within the app process.

Full Transcript

This visual execution compares service mesh and library-based approaches for managing service communication in Kubernetes. The library-based proxy is part of the application code and processes requests directly, requiring app changes. The service mesh uses sidecar proxies running as separate containers that intercept calls transparently, applying policies and reporting metrics to a control plane. The control plane centrally manages configuration and policies, updating sidecars dynamically. The execution table traces each step from the application sending requests through proxies to the service and back. The variable tracker shows component states changing over time. Key moments clarify why sidecars run separately, how library proxies affect app code, and the control plane's role. The quiz tests understanding of proxy actions, states, and control plane impact. This helps beginners see how service mesh adds features without modifying app code, unlike library proxies.