Need FIPS-validated encryption in transit for your Kubernetes application? Buoyant's FIPS build of Buoyant Enterprise for Linkerd uses FIPS-validated cryptographic libraries for all encryption and transparently encrypts all data in transit between meshed pods with these libraries, giving you the ability to meet the strict federal government cybersecurity requirements of the National Institute of Standards and Technology (NIST) FIPS 140-2 and FIPS 140-3 standards.

Best of all, Buoyant Enterprise for Linkerd is our distribution of Linkerd, the world's lightest and fastest service mesh, giving you dramatically improved performance compared to Istio, Cilium Mesh, and other service meshes.

Linkerd is the only service mesh that uses a ultra-secure "micro-proxy" written in the Rust programming language, achieving critical memory safety guarantees. Other service mesh such as Istio and Cilium use Envoy, a complex proxy written C++, a language known for CVEs, buffer overflow exploits, and endemic security vulnerabilities.

Linkerd uses industry standards such as mutual TLS and the Gateway API to provide a comprehensive suite of network security controls, including cryptographic workload identity, fine-grained micro-segmentation, deny-by-default, and true zero trust networking. With Buoyant Enterprise for Linkerd, not only is your service mesh ultrafast, small, and simple—it's built for security from the ground up.

Buoyant's FIPS build of Linkerd is designed for organizations that must comply with NIST FIPS 140-2 and 140-3 standards. While Linkerd is the lightest, most secure service mesh on the market, open source Linkerd itself does not meet FIPS standards.

We've helped companies around the world build Kubernetes applications using FIPS validated cryptographic libraries. CMVP certificate numbers are available upon request. If FIPS compliance is a requirement for you, we'd love to chat!