Route APIs, enforce policy and shift production traffic without rebuilding the application layer. One programmable path from edge to service.
MESHCTRL treats routes, retries, identity and rollout policy as one programmable layer rather than five disconnected systems.
Match host, path, header, identity or percentage and steer requests without touching application code.
route /checkout → checkout-v496%Short-lived workload identity with automatic certificate rotation.
Retries, budgets, circuit breaking and locality-aware failover at the proxy layer.
Global defaults for safety. Local overrides when teams need them. Every decision is versioned and observable.
policy "api-global" {
match = "/api/*"
limit = 82000
burst = 12000
key = "identity.sub"
on_exceed {
status = 429
retry_after = "1s"
}
}Terminate, authenticate and route at the edge while keeping your upstream topology private and replaceable.
POP / FRA-03
CONTROL ROOM / 07
$ meshctl status --fabric prod
✓ 214 proxies connected
✓ 38 gateways healthy
✓ policy convergence 184ms
ready for traffic operation.