Why Sidecar proxy pattern in Microservices? - Purpose & Use Cases

The Big Idea

What if you could fix communication and security bugs in all your apps by changing just one helper next to them?

The Scenario

Imagine you have many small apps (microservices) talking to each other. Each app tries to handle security, logging, and communication by itself. You have to add the same code to every app, and it gets messy fast.

The Problem

Doing all these tasks inside each app is slow and confusing. If you want to change how apps talk or add security, you must update every app separately. This wastes time and causes mistakes.

The Solution

The sidecar proxy pattern puts a helper next to each app. This helper handles communication, security, and logging for the app. The app focuses on its main job, while the sidecar manages the rest smoothly and consistently.

Before vs After

✗ Before

app.handleSecurity();
app.logRequests();
app.communicateWithOthers();

✓ After

sidecarProxy.handleSecurity();
sidecarProxy.logRequests();
sidecarProxy.communicate();
app.focusOnBusinessLogic();

What It Enables

This pattern makes apps simpler and lets you update communication and security in one place without touching each app.

Real Life Example

Think of a delivery company where each driver manages their own route, vehicle maintenance, and customer calls. Switching to sidecar proxy is like giving each driver a personal assistant who handles calls and routes, so drivers focus on delivering packages.

Key Takeaways

Manual handling of communication and security in each app is hard and error-prone.

Sidecar proxy moves these tasks to a helper running alongside the app.

This leads to easier updates, better security, and simpler apps.

Practice

1. What is the main purpose of the sidecar proxy pattern in microservices architecture?

easy

A. To handle database transactions directly

B. To replace the main service with a proxy for better performance

C. To store data separately from the main service

D. To add features like communication and security without changing the service code

Solution

1. Step 1: Understand the role of sidecar proxy

   The sidecar proxy runs alongside the main service to add extra features such as communication handling, security, and monitoring.

2. Step 2: Identify what it does not do

   It does not replace the service, store data, or handle database transactions directly.

3. Final Answer:

   To add features like communication and security without changing the service code -> Option D

4. Quick Check:

   Sidecar proxy adds features without changing service code = D [OK]

Hint: Sidecar adds features beside service, not inside it [OK]

Common Mistakes:

• Thinking sidecar replaces the main service
• Confusing sidecar with database or storage
• Assuming sidecar handles business logic

2. Which of the following is the correct way to describe the deployment of a sidecar proxy in a microservices environment?

easy

A. Deployed alongside the main service in the same environment or container

B. Deployed as a separate service on a different server

C. Deployed inside the main service codebase

D. Deployed only on the client side

Solution

1. Step 1: Understand sidecar deployment

   The sidecar proxy runs alongside the main service, usually in the same environment or container, to intercept and manage traffic.

2. Step 2: Eliminate incorrect options

   It is not deployed as a separate service on a different server, nor inside the main service code, nor only on the client side.

3. Final Answer:

   Deployed alongside the main service in the same environment or container -> Option A

4. Quick Check:

   Sidecar runs alongside service = A [OK]

Hint: Sidecar runs side-by-side, not separately or inside code [OK]

Common Mistakes:

• Thinking sidecar is a separate remote service
• Confusing sidecar with code library inside service
• Assuming sidecar runs only on client machines

3. Consider this simplified request flow in a microservice using a sidecar proxy:

Client -> Sidecar Proxy -> Service -> Sidecar Proxy -> Client

What is the main benefit of this flow?

medium

A. The sidecar proxy can handle retries, security checks, and logging without changing the service

B. The service can directly communicate with the client without any proxy

C. The sidecar proxy replaces the service logic for faster processing

D. The client bypasses the sidecar proxy for faster response

Solution

1. Step 1: Analyze the request flow with sidecar proxy

   The sidecar proxy intercepts requests and responses, allowing it to add features like retries, security checks, and logging transparently.

2. Step 2: Understand the benefit of this interception

   This keeps the service code simple and focused on business logic, while the sidecar handles cross-cutting concerns.

3. Final Answer:

   The sidecar proxy can handle retries, security checks, and logging without changing the service -> Option A

4. Quick Check:

   Sidecar manages extra tasks transparently = A [OK]

Hint: Sidecar handles extras, service stays simple [OK]

Common Mistakes:

• Thinking sidecar replaces service logic
• Assuming client talks directly to service
• Believing sidecar slows down response by bypassing

4. A developer notices that the sidecar proxy is not forwarding requests to the main service correctly. Which of the following is the most likely cause?

medium

A. The main service code has a syntax error

B. The client is not sending requests

C. The sidecar proxy configuration is missing the service's local address

D. The database is down

Solution

1. Step 1: Identify sidecar proxy forwarding issue

   If the sidecar proxy does not forward requests, it is often due to incorrect or missing configuration about where the main service is located.

2. Step 2: Rule out unrelated causes

   Syntax errors in service code, client not sending requests, or database issues do not directly cause proxy forwarding failures.

3. Final Answer:

   The sidecar proxy configuration is missing the service's local address -> Option C

4. Quick Check:

   Proxy forwarding fails if service address missing = B [OK]

Hint: Check proxy config for service address first [OK]

Common Mistakes:

• Blaming service code syntax errors
• Assuming client or database issues cause proxy failure
• Ignoring proxy configuration details

5. You want to add monitoring and security features to multiple microservices without changing their code. How does the sidecar proxy pattern help solve this problem at scale?

hard

A. By centralizing monitoring and security in a single proxy for all services

B. By deploying a sidecar proxy with each service instance to handle monitoring and security independently

C. By rewriting each service to include monitoring and security code

D. By removing proxies and letting clients handle monitoring

Solution

1. Step 1: Understand scaling with sidecar proxies

   Deploying a sidecar proxy alongside each service instance allows independent handling of monitoring and security without modifying service code.

2. Step 2: Compare with other options

   Rewriting services is costly and error-prone; centralizing in one proxy creates a bottleneck; removing proxies loses control.

3. Final Answer:

   By deploying a sidecar proxy with each service instance to handle monitoring and security independently -> Option B

4. Quick Check:

   Sidecar per service instance scales features independently = C [OK]

Hint: Sidecar per service instance scales features well [OK]

Common Mistakes:

• Thinking one proxy can handle all services centrally
• Assuming code changes are needed for features
• Ignoring scalability and bottleneck issues