--- title: "Envoy-Based Application-Level Security and Observability" source: "https://wordpress-1075849-4005834.cloudwaysapps.com/tigera-products/service-mesh/" description: "Gain application-level observability and secure service-to-service communication within your Kubernetes cluster." --- Solution # Envoy-Based Application-Level Security and Observability Gain application-level observability and secure service-to-service communication within your Kubernetes cluster, without the operational complexity and performance overhead of a service mesh [Start Free](https://www.calicocloud.io/) [Get a Demo](https://www.tigera.io/demo/) ![Application Layer Observability | Tigera 1](https://embed-ssl.wistia.com/deliveries/c7b3603ff4e2a3f3203cae5547a5f45b6fe7ea2e.jpg?image_crop_resized=612x344) ## Benefits ![Two overlapping blue parallelograms](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2021/05/Icon-1.png) ### Best-in-class encryption ### Lower performance overhead ### Reduced operational complexity ### Secure access and authorization ## Trusted by Customers Worldwide [![Orange logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-Orange.png)](http://www.orange.com/en) [![Siemens Healthineers logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/09/logo-siemens-healthineers.png)](https://www.siemens-healthineers.com/) [![RBC logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2024/05/logo-RBC.png)](https://www.rbcroyalbank.com/) [![Marsh McLennan logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-Marsh-and-McLennan.png)](http://www.mmc.com/) [![Nowcom logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-NOWCOM.png)](http://www.nowcom.com/) [![Presidio logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2024/05/logo-Presidio.png)](https://www.presidio.com/) [![Box logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-box.png)](http://www.box.com/home) [![Nvidia logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2024/05/logo-Nvidia.png)](https://www.nvidia.com/) [![FM Global logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2023/03/logo-FM-Global.png)](https://www.fmglobal.com/) [![Upwork logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/12/logo-upwork.png)](https://www.upwork.com/) [![Essentra logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/04/logo-Essentra.png)](https://www.essentra.com/en) [![GoDaddy logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2023/03/logo-GoDaddy.png)](https://www.godaddy.com/) [![Arvato Systems logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2025/01/logo-Arvato-systems.png)](https://www.arvato-systems.com/) [![Aldagi logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/10/logo-aldagi.png)](https://aldagi.ge/en/) [![NBC Universal logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/09/logo-NBC-Universal.png)](https://www.nbcuniversal.com/) [![Chipotle logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2024/05/logo-Chipotle.png)](https://www.chipotle.com/) [![Meridianlink logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-Meridianlink.png)](http://www.meridianlink.com/) [![Mulligan Funding logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-MulliganFunding.png)](https://www.mulliganfunding.com/) [![HanseMerkur logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-HanseMerkur.png)](http://www.hmrv.de/en) [![Fiserv logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/12/logo-fiserv.png)](https://www.fiserv.com/) [![Berenberg logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-BERENBERG.png)](http://www.berenberg.de/en/) [![eHealth logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2023/10/logo-eHealth.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/ehealth-case-study/) [![Coinmetrics logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-coinmetrics.png)](http://coinmetrics.io/) ## Key Features ![Service Graph displaying connected services and HTTP flow data.](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/09/service-graph-06.png) - Provides a centralized, all-encompassing view of service-to-service communication within a Kubernetes cluster. Have purpose-built visualizations showing the communication between the logical hierarchy of namespaces, services, and deployments. - Eliminate sidecars with Envoy integrated directly into the data plane. Minimize resource consumption by generating and aggregating observability data in the form of log data at the source on each node in the cluster. Meet security requirements while maintaining observability with high-performance, low overhead, encryption for data-in-transit with WireGuard. - Provides Kubernetes-specific metadata in logs and metrics with zero configuration overhead (i.e. eliminate setup tags and pod annotation). - Leverages state-of-the-art encryption with WireGuard to secure workload communication within a cluster without the operational complexity of managing and deploying certificates. - Using WireGuard, remote write into secure network tunnels that are implemented in a simple way, extremely performant, make use of state-of-the-art cryptography, and remain easy to administer compared to IPsec. Authorize secure and faster access to the environments in highly performant and fewer steps as per organizational policies. ## How It Works ![L7 HTTP Dashboard](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/09/L7-HTTP-Dashboard-2.png) 1. Leverages WireGuard for high-performance data-in-transit encryption to meet internal data security or regulatory requirements. 2. Delivers a single pane of glass view of all application-layer traffic, broken down by services, response codes, performance metrics, and API calls with the addition of log data rich with application-level context. 3. Provides flow log data with Kubernetes-context information: - Source and destination namespace - Average and maximum request duration - Request URL - Response code - User-agent - Method and status code (e.g. HTTP) - Bytes sent and received - Source and destination type (pod, networkset, etc.) - Request and response latency ## Available on Microsoft Azure, AWS, and Google Marketplace Get started right away on Azure, AWS, or Google Cloud—every Calico component you need to get up and running is ready to go. [On Azure](https://azuremarketplace.microsoft.com/en-ca/marketplace/apps/tigerainc1620235671643.calicocloudsaas?tab=overview) [On AWS](https://aws.amazon.com/marketplace/pp/prodview-pq3tgvtlj3wce) [On Google Cloud](https://console.cloud.google.com/marketplace/product/tigera-public/calico-cloud?inv=1&invt=Ab27_g&project=tigera-public) ![Microsoft Azure, AWS, and Google Cloud logos.](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2025/07/Solution-cloud-marketplace-AWS-Azure-03.svg) ## Resources ![O’Reilly eBook: Kubernetes Security and Observability](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2024/05/Featured-resources-OReilley-ebook.png) eBook ### O’Reilly eBook: Kubernetes Security and Observability Learn to secure Kubernetes workloads and monitor network traffic for compliance and security. [Learn More](https://www.tigera.io/blog/oreilly-ebook-kubernetes-security-and-observability-early-release/) ![Kubernetes Observability with Calico](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/01/generic-Tigera-1200x628-1-380x200.png) Solution Brief ### Kubernetes Observability with Calico See how Calico gives you application-level observability for Kubernetes workloads. [Learn More](https://info.tigera.io/rs/805-GFH-732/images/Tigera_solution_brief_Kubernetes_Observability_with%20Calico.pdf) ![Calico Logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/01/Calico-logo-2026-black-text.svg) ## Ready to Get Started? Get started for free or request a demo to see Calico in action [Start Free](https://www.calicocloud.io/) [Get a Demo](https://wordpress-1075849-4005834.cloudwaysapps.com/demo/)