Aspen Service Mesh

Aspen Service Mesh provides an Istio-based microservices solution for service providers and medium- to large-scale enterprises. Learn how to get started today!

Introduction

Aspen Service Mesh Packet Inspector

Aspen Service Mesh Packet Inspector

Security should be ensured at all layers and work together with new clusters when introducing services running on top of a microservices infrastructure. It is paramount for all new points of exposure to be visible, which aids in pin-pointing security threats.

  • Enterprise Visibility - Per-user, per-service and per-tenant traffic and service visibility allow traceability for compliance tracking and performance purposes.
  • Enhance Cluster Security - Topology obfuscation of internal infrastructure and visibility to traffic enables increased security of deployed clusters and services.
  • Service Provider Visibility - Per-subscriber and per-service traffic visibility allows traceability for compliance tracking and billing purposes.

Product Overview

Diagram illustrating F5’s Aspen Service Mesh

Connect microservices and scale Kubernetes with minimal management overhead

Aspen Service Mesh is deployed by an enterprise as an Istio-based microservices service mesh platform, or by a service provider as an SBA service mesh building block for 5G SA deployments. It may also be deployed by a service provider in conjunction with F5 BIG-IP Next Service Proxy for Kubernetes (SPK) for legacy 4G or 5G non-standalone (NSA) deployments in transition to a standalone 5G deployment.

Connecting microservices with a service mesh ›

For highly regulated businesses where data ownership and security are prioritized, and where legacy services maybe in transition.

A microservice deployment platform for HA and DR. Deploy workloads requiring high availability or disaster recovery capability.

Easily integrate data and services across various cloud-native architectures. Integrate security and visibility for seamless deployments.

Deploy a single cluster, multi-cluster, or multi-cloud deployment to provide services to multiple tenants, each isolated from each other.

Core Capabilities

Aspen Service Mesh is a full featured Istio-based service mesh with 24/7 support and is secure by default. It also includes several capabilities which are not found in open source Istio, as detailed below.

Provides traffic control and policy enforcement.

Configuration provides strict security capability out of the box.

Supports native, end-to-end dual-stack networking across the service mesh.

Enables service-mesh traffic capture and visibility.

Granular certificate management for service mesh and other products.

Makes installations and upgrades easier.

FQDN and SPIFFE support. Eases 4G VNF to 5G CNF migration.

Industry support of Aspen Service Mesh traffic format.

Resources

Featured

Thousands of lighted filaments in various colors standing on end

5G SBA deployment within a cloud-native infrastructure enables application-centric dynamic workloads to meet ever-changing subscriber demands.

Next Steps

Find out how F5 products and solutions can enable you to achieve your goals.

Contact F5