Service Mesh — Sidecar Proxies

digraph mesh {
  rankdir=LR;
  graph [bgcolor=transparent, fontname=Inter, compound=true];
  node [shape=box, style="rounded,filled", fontname=Inter, fontsize=10];

  subgraph cluster_a {
    label="Service A pod"; style=dashed;
    A [label="App A", fillcolor="#dbeafe"];
    SA [label="Sidecar", fillcolor="#ede9fe"];
    A -> SA [dir=both];
  }
  subgraph cluster_b {
    label="Service B pod"; style=dashed;
    B [label="App B", fillcolor="#dbeafe"];
    SB [label="Sidecar", fillcolor="#ede9fe"];
    B -> SB [dir=both];
  }
  subgraph cluster_c {
    label="Service C pod"; style=dashed;
    C [label="App C", fillcolor="#dbeafe"];
    SC [label="Sidecar", fillcolor="#ede9fe"];
    C -> SC [dir=both];
  }

  SA -> SB [label="mTLS"];
  SB -> SC [label="mTLS"];

  CP [label="Control plane\n(Istio / Linkerd)", fillcolor="#fef3c7"];
  CP -> SA [style=dashed, label=config];
  CP -> SB [style=dashed];
  CP -> SC [style=dashed];

  Obs [label="Metrics + Tracing", fillcolor="#dcfce7"];
  SA -> Obs; SB -> Obs; SC -> Obs;
}