Training Example: Buoyant – Review the Data, Give Your Score & Compare to the Real AI Evaluation

[H1] The best service mesh for AWS
Turn any AWS Kubernetes deployment into a highly reliable, horizontally scalable platform. Buoyant Enterprise for Linkerd adds security, observability, and reliability to EKS while reducing infrastructure cost.Get startedLearn more
[IMG: Hewlett Packard]
[IMG: Walmart]
[IMG: Expedia]
[IMG: Comcast]
[IMG: GoDaddy]
[IMG: Timescale]
[IMG: Hewlett Packard]
[IMG: Walmart]
[IMG: Expedia]
[IMG: Comcast]
[IMG: GoDaddy]
[IMG: Timescale]
[H2] Auditable zero trust security
Say goodbye to IP-based access control, perimeter firewalls, and buffer overflow exploits. Say hello to workload identity, end-to-end encryption, and deny-by-default security policies.Learn more
[H2] Ultra-high availability
Scale out across multiple clusters, remove single points of failure, dynamically redistribute application traffic in response to latency or instability, and transform your Kubernetes platform into a truly resilient distributed system.Learn more
[H2] Network and cloud cost savings
Decommission expensive application load balancers, reduce cloud costs with zone-aware load balancing, and reduce latency—all without sacrificing reliability.Learn more
[IMG: Network topology diagram in Buoyant Cloud showing k8s-prod namespace with services like glue-api, publisher, external-api highlighted with success rates and connections.]
[H2] Production-ready service mesh
Buoyant Enterprise for Linkerd is our production-ready distribution of the open source Linkerd service mesh, built for sustained use at scale and long-term commercial support.Learn more
[H2] Why Rust?
Why the future of the cloud will be built in RustWhy the future of the cloud will be built in RustGet startedWhy the future of the cloud will be built in RustGet startedWhy the future of the cloud will be built in RustWhy the future of the cloud will be built in Rustby Buoyant CTO Oliver GouldAccording to the US Cybersecurity & Infrastructure Security Agency, an astonishing 70% of serious security bugs are memory vulnerabilities —a problem that is endemic to software written in C and C++.Linkerd is the only service mesh built in Rust, a memory-safe language that protects against precisely this type of vulnerability while being just as fast (if not faster!) than C and C++.After all, the platform of the future can't be built in the language of the past.Linkerd avoids memory safety bugs by using RustGoogle’s Chromium project found that 70% of serious security bugs are due to memory safety problems.
[H2] We're committed to open source
Say goodbye to IP-based access control, perimeter firewalls, and buffer overflow exploits. Say hello to workload identity, end-to-end encryption, and deny-by-default security policies.Say goodbye to IP-based access control, perimeter firewalls, and buffer overflow exploits. Say hello to workload identity, end-to-end encryption, and deny-by-default security policies.Get startedSay goodbye to IP-based access control, perimeter firewalls, and buffer overflow exploits. Say hello to workload identity, end-to-end encryption, and deny-by-default security policies.Get startedSay goodbye to IP-based access control, perimeter firewalls, and buffer overflow exploits. Say hello to workload identity, end-to-end encryption, and deny-by-default security policies.We’ve been leading the charge for introducing Rust to the cloud native space. Linkerd’s innovative microproxy approach is powered by Rust, allowing us to deliver lightning-fast performance without the security vulnerabilities of languages like C++.We’ve been leading the charge for introducing Rust to the cloud native space. Linkerd’s innovative microproxy approach is powered by Rust, allowing us to deliver lightning-fast performance without the security vulnerabilities of languages like C++.Learn moreWe’ve been leading the charge for introducing Rust to the cloud native space. Linkerd’s innovative microproxy approach is powered by Rust, allowing us to deliver lightning-fast performance without the security vulnerabilities of languages like C++.Get startedWe’ve been leading the charge for introducing Rust to the cloud native space. Linkerd’s innovative microproxy approach is powered by Rust, allowing us to deliver lightning-fast performance without the security vulnerabilities of languages like C++.We contributed Linkerd to the Cloud Native Computing Foundation in 2016, and in 2019, Linkerd became the first service mesh project to achieve graduated status in the Cloud Native Computing Foundation, the highest level of maturity possible.We contributed Linkerd to the Cloud Native Computing Foundation in 2016, and in 2019, Linkerd became the first service mesh project to achieve graduated status in the Cloud Native Computing Foundation, the highest level of maturity possible.Get startedWe contributed Linkerd to the Cloud Native Computing Foundation in 2016, and in 2019, Linkerd became the first service mesh project to achieve graduated status in the Cloud Native Computing Foundation, the highest level of maturity possible.Get startedWe contributed Linkerd to the Cloud Native Computing Foundation in 2016, and in 2019, Linkerd became the first service mesh project to achieve graduated status in the Cloud Native Computing Foundation, the highest level of maturity possible.
[H2] We partner with world-class companies
Partners page
[IMG: AWS logo]
[IMG: Suse]
[IMG: IntelliGCR logo]
[IMG: Microsoft]
[IMG: krumware logo]
[IMG: testifysec logo]
[IMG: Datadog]
[H2] Our customers are changing the world
We found Istio to be unnecessarily complicated. We would have spent months just learning the system, which isn’t an option when you’re in a high-growth stage like IntelliGRC. With Buoyant Enterprise for Linkerd, we could get it running immediately.
[H3] Matthew DuVal
Head Engineer at IntelliGRCRead case studyWe had the Linkerd multi-cluster up and running within an hour! After a few days of struggling with Istio, we gave up on it. Linkerd did the job fast and easily — the perfect mesh for us. It had all the features we needed at the time, was easy to operate, had a great community, and solid documentation.
[H3] Kasper Nissen
Lead Platform ArchitectRead case studyUnlike other service mesh offerings that crowd half baked features into the mix, or over-complicated topology choices, Linkerd follows the Unix model of doing one thing well, in a composable way. Lachlan Smith, Lead Software Engineer
[H3] Lachlan Smith
Lead Software EngineerRead case studyWe had the Linkerd multi-cluster up and running within an hour! After a few days of struggling with Istio, we gave up on it. Linkerd did the job fast and easily — the perfect mesh for us. It had all the features we needed at the time, was easy to operate, had a great community, and solid documentation.
[H3] Chris Voss
Lead Platform ArchitectRead case studyPreviousNext
[H2] Latest from the Buoyant Blog
Blog HomeMay 21, 2026What Are Availability Zones? A Guide to Multi-AZ Kubernetes May 6, 2026See What Your Mesh Is Telling You: A Practitioner's Guide to Buoyant CloudApril 28, 2026The AI Kubernetes Show is Back: Now a Regular Biweekly Podcast!

[H1] Buoyant Enterprise for Linkerd
Buoyant's production-ready distribution of Linkerd, the world's most advanced service mesh. Fully hardened and designed for sustained production use.Get started for freePricing
[H2] FIPS 140-2 and 140-3 validated encryption
[H2] Kubernetes at the Edge
[H2] Zero trust security
[IMG: Book cover titled]
[H2] The enterprise architect's guide to the service mesh
Read ebookZero trust network securityUltra-high availabilityNetwork optimization and cost savings
[H2] Zero trust network security
Buoyant Enterprise for Linkerd delivers true zero trust network security to every application on your Kubernetes platform, without changing any code.Built on industry standards including mutual TLS, the Gateway API, and the memory-safe Rust language, BEL allows you to move away from outdated IP-based access control, perimeter firewalls, and buffer overflow exploits, to security built on cryptographic workload identity, end-to-end encryption for all customer data, and ultra-fine-grained security boundaries.Mutual TLSTransparently add encryption and bidirectional authentication to every network connection.Cryptographic workload identityAutomatically authenticate connections using cryptographic proof of workload identity, not easily-spoofed IP addresses.Authorization policiesBuild human-readable, least-privilege access policies that cover workload identity, HTTP methods, gRPC routes, and more.Granular security boundariesGo beyond firewalls and perimeter defense by building per-pod and per-instance security boundaries around every application component.Learn more
[H2] Ultra-high availability
Buoyant Enterprise for Linkerd adds dynamic traffic management and control designed for the realities of modern software applications.BEL's fully distributed, Rust data plane is capable of handling everything from HTTP/2 and gRPC traffic down to raw TCP streams, while withstanding network partitions, machine outages, failures of clusters, zones, and regions, and anything else you can throw its way.Automated failoverAutomatically redirect traffic to different clusters in the event of service failure, without interrupting application behavior.Real-time latency-aware load balancingAutomatically send requests to the fastest available application components, reducing user-facing end-to-end latency.Retries, timeouts, and circuit breakingTransparently retry requests sent to slow or failing endpoints on alternate endpoints, and automatically shed load to overloaded application components.Canary and blue-green deploysReduce the risk of shipping buggy code to production by “easing” new code into production and automatically falling back to old code if problems are detected.Learn more
[H2] Network optimization and cost savings
Buoyant Enterprise for Linkerd optimizes not just latency but network spend, ensuring your dollars are spent on business priorities first.Decommission expensive application load balancers and automatically reduce cross-zone network spend with BEL's highly-available, zone-aware routing.Zone-aware routingPreserve zone locality, reduce latency, and cut unnecessary cloud spend with Buoyant Enterprise for Linkerd's High Availability Zonal Load Balancing (HAZL).Universal traffic routingRoute HTTP and gRPC traffic based on request properties with Buoyant Enterprise for Linkerd, avoiding costly ALBs.Automated lifecycle managementAutomate Buoyant Enterprise for Linkerd from installation to upgrades, freeing teams for more crucial tasks.Learn more
[H3] Get started with Buoyant Enterprise for Linkerd
Download and install the world's most advanced service mesh on any Kubernetes cluster in minutesGet started

Skip to main content

[IMG: Linkedin]
LinkedIn

[H2] Start your seamless migration
Get startedSeamless GKE to EKS: Migrating with Confidence on LinkerdDe-risk your EKS migrationEnsure security and compliance without code changesCut AWS cross-zone costs without sacrificing reliabilityAchieve EKS best practicesGet Started Today
[H2] Learn how Tradeshift used Linkerd’s multi-cluster capabilities to migrate to EKS with zero downtime.
Learn more
[H2] Simplify your EKS migration
Migrating from Microsoft’s Azure Kubernetes Services (AKS) offering to Amazon’s managed Kubernetes service is one of the most significant challenges a platform team can tackle. Buoyant Enterprise for Linkerd (BEL) can dramatically simplify this migration process and help ensure your services stay reliable, secure, and observable throughout the migration—and beyond."Buoyant absolutely made our AWS cloud expansion process easier and continues to improve the way we work on EKS."Adam GlennEngineering Manager at Expel
[H2] De-risk your EKS migration
Linkerd’s powerful multicluster communication capabilities allow you to incrementally move services from AKS to EKS, without requiring code changes or interrupting developer workflows, and roll back instantly if something goes wrong during the process. Every connection is encrypted and authenticated with mTLS.Dynamically shift traffic between environments without code changes. Fully encrypted and authenticated with mutual TLS.
[H2] Ensure security and compliance without code changes
Linkerd automatically encrypts and authenticates every TCP connection without application changes or additional configuration, and provides powerful zero-trust authorization policies. For teams with regulatory requirements such as FedRAMP, CMMC, FISMA, or HIPAA, Linkerd allows you to implement FIPS-validated encryption and to simplify audits with a dedicated FIPS dashboard with real-time proof of encryption and visibility into CMVP numbers.
[H2] Cut AWS cross-zone costs without sacrificing reliability
For new AWS adopters, cross-zone traffic charges can be an unpleasant surprise, sometimes amounting to six figures annually—or more! Linkerd’s High Availability Zonal Load Balancing (HAZL) capability can eliminate these charges for multi-zone EKS clusters without affecting overall reliability. See how Imagine Learning is on track to reduce regional data transfer networking costs by at least 40%.With Linkerd, traffic routed to a new zone ONLY if there is an issue with the in-zone services
[H2] Achieve EKS best practices
Linkerd allows you to create a secure and highly reliable platform on top of EKS through best practices like:Spanning multi-region and AZsEncrypting all traffic with mTLSFine-tuning zero-trust authorization policiesImplementing traffic management with retries, rate limiting, and circuit breakingUniform observability across every pod, service, and cluster
[H2] Get started today
Linkerd is trusted by top enterprises running AWS for their most critical workloads. It integrates natively with the AWS services your team already uses and can be easily accessed through the AWS marketplace.Check out our guide to migrating to Amazon EKS to help you get started.