Sidecar process

As explained in Effective Platform Engineering

A sidecar proxy is a proxy deployed alongside an application workload to handle communication without requiring application-code changes.

A sidecar proxy runs alongside an application workload and handles its network traffic without requiring application-code changes. It can forward, filter, or modify traffic according to its configuration. In a service mesh, this makes communication behavior a platform concern rather than something every service must implement. section 8.4.2

A proxy can be configured to:

• Validate a web token on requests to an API. section 8.4.2
• Retry a connection before returning a failure. section 8.4.2
• Encrypt traffic between proxies on communicating services. section 8.4.2

On Kubernetes, a proxy runs over the container network. A dedicated proxy per pod supports finer-grained traffic control, isolation, and observability. Sharing one proxy per node or cluster is an alternative, but makes service-specific policies and granular metrics harder. Choose the placement according to the control each workload needs. section 8.4.2

Figure 8.5 A service mesh acts as a control plane for proxy servers, deploying and configuring them based on our instructions, creating a standardized way of utilizing this integration point.

The diagram shows how a service mesh deploys and configures proxies through a control plane, standardizing this integration point. section 8.4.2

How Effective Platform Engineering covers it

How deep it goes

Defines proxy behavior and compares per-pod with shared placement, but does not show individual proxy configuration.

Examples

Uses web-token validation, connection retries, and encryption between proxies as configuration examples.

What it assumes

Assumes familiarity with Kubernetes pods and container networking while defining the proxy’s intermediary role.

What you can do after

Operate/configure it through a service mesh to apply communication behavior without changing application code.

How it connects

Connects sidecar proxies to service meshes, Kubernetes container networking, traffic control, isolation, and observability.

liveBookmanning.com

Read Effective Platform Engineering on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Google Anthos in ActionA sidecar is a container deployed alongside a main container in the same Pod to provide supporting functionality such as proxying.
• 

  liveBookmanning.com
  Logs and TelemetryThe sidecar pattern deploys a supporting process alongside a primary application component so they share a lifecycle and execution context.
• 

  liveBookmanning.com
  Kubernetes in Action, Second EditionThe sidecar pattern places a complementary process in a separate container alongside a primary application process in the same pod.
• 

  liveBookmanning.com
  Authorization in ActionA sidecar is a separately deployed component or proxy that runs alongside a primary service to provide supporting functionality.
• 

  liveBookmanning.com
  Podman in Action: Secure, rootless containers for Kubernetes, microservices, and moreA sidecar container is an additional co-located container that supports or monitors a primary container or its execution environment.
• 

  liveBookmanning.com
  Acing the Certified Kubernetes Administrator Exam, Second EditionThe sidecar pattern runs a supporting process alongside a primary application process, typically within the same pod.
• 

  liveBookmanning.com
  Designing Deep Learning Systems: A guide for software engineersA container deployed alongside a primary application container to provide supporting functionality such as adaptation, proxying, or initialization.
• 

  liveBookmanning.com
  Secure APIsA sidecar is a container-application pattern in which a secondary process runs alongside a primary application to provide supporting functionality.
• 

  liveBookmanning.com
  Kafka for ArchitectsThe sidecar pattern deploys an auxiliary component alongside a primary service component to provide supporting functionality without embedding it in the service.
• 

  liveBookmanning.com
  LLMs in ProductionA sidecar is a companion component deployed alongside a primary application to perform supporting processing or communication.

Compare how 11 books explain sidecar process →

Related concepts

• service meshused by · A service mesh is an infrastructure layer that manages communication and cross-cutting concerns such as traffic control, security, and observability between distributed services.
• poduses · A Kubernetes Pod is the smallest deployable unit in Kubernetes, grouping one or more co-located containers that share networking and other resources.
• containerkind of · A software container is an isolated execution environment that packages an application and its dependencies while sharing the host operating system kernel.
• Istiopart of · Istio is an open-source service mesh platform that provides traffic management, security, and observability for service-to-service communication.
• automatic sidecar injectionproduced by · Automatic sidecar injection is the admission-time addition of a proxy sidecar to newly created pods based on cluster configuration.
• NVIDIA Triton Inference Serviceuses · NVIDIA Triton Inference Server is open-source software for deploying and serving machine-learning models through standardized interfaces across frameworks and hardware backends.

This explainer was generated by Manning's knowledge graph from the text of Effective Platform Engineering. The section links point to the parts of the book it draws on.