Buoyant Blog

Today we're pleased to announce Linkerd 2.12.4, including OpenSSL security updates, fixes for large clusters, and more!

Earlier this week, OpenSSL released a security advisory detailing two high-severity vulnerabilities in certain versions of OpenSSL. After careful investigation, the Buoyant security team has determined that the latest Linkerd releases (2.12, 2.12.1, and 2.12.2) are not vulnerable to the noted exploits, and that no action is required by users of the latest Linkerd releases to mitigate these vulnerabilities in Linkerd.

Today we’re very happy to announce the release of Linkerd 2.12. This massive release introduces route-based policy to Linkerd, allowing users to define and enforce authorization policies based on HTTP routes in a fully zero-trust way. These policies are built on Linkerd's strong workload identities, secured by mutual TLS, and configured using types from Kubernetes' s new Gateway API.

In the upcoming 2.12 release, Linkerd will take a first step towards adopting the Gateway API as core configuration framework. While this API was originally designed to handle ingress traffic, we believe it has a lot of potential for service meshes as well. In this blog post we'll cover some of our thinking behind this choice and what, if anything, it means for you.

Today, we’re happy to announce that we’ve published our Linkerd Production Runbook, freely available to all. As every SRE knows, the “runbook” for a system is where you capture all the hard-earned advice for operating the system in production. Our Linkerd Production Runbook is a distillation...

It’s finally arrived! The CNCF’s Introduction to Service Mesh with Linkerd training course is now available. If you’re new to the service mesh, this course covers everything from basic service mesh concepts to practical implementations of Linkerd in a production environment. The service mesh doesn’t...

Today, the Cloud Native Computing Foundation’s (CNCF) Technical Oversight Committee (TOC) voted to accept Linkerd as its fifth hosted project, alongside Kubernetes, Prometheus, OpenTracing and Fluentd. Linkerd is an open source, resilient ...