Consul

Service networking solution for managing secure connectivity between services across on-prem, hybrid, and multi-cloud environments. Provides service discovery, a service mesh with Envoy, identity-based authorization, L7 traffic management, and mTLS for service-to-service encryption.

Trusted by organizations such as Pandora, Mercedes-Benz, Criteo, and FIS Global. Consul stands out by supporting both virtual machines and Kubernetes from a single control plane, unlike Kubernetes-only meshes such as Istio or Linkerd. Uses Raft for cluster consensus and gossip for datacenter membership, with an ecosystem of 40+ partners and 80+ integrations.

Key capabilities:

• Dynamic service catalog with health checks for registration and discovery
• Service mesh with Envoy sidecars and API gateway for traffic control
• L4 and L7 service intentions plus ACLs for identity-based access
• Admin partitions, namespaces, and cluster peering for multi-tenancy
• Consul-Terraform-Sync for automating load balancers and firewalls from catalog changes

Engineers use Consul for service discovery in microservices, canary and split traffic patterns, zero-trust security with mTLS, and distributed tracing integration. The HTTP API, CLI, and UI fit into CI/CD and infrastructure-as-code workflows, with an official Terraform provider for managing ACLs and configuration entries.