Contrarian View: Linkerd 2.14 Is Better Than Istio 1.22 for Small Kubernetes 1.32 Clusters – 12% Less Overhead

#!/bin/bash\n# linkerd-vs-istio-benchmark.sh\n# Benchmark script to compare Linkerd 2.14 and Istio 1.22 resource overhead on K8s 1.32\n# Requires: kind v0.20+, kubectl v1.32+, helm v3.14+, prometheus (for metrics scraping)\n# Usage: ./linkerd-vs-istio-benchmark.sh [linkerd|istio] [cluster-name]\n\nset -euo pipefail  # Exit on error, undefined vars, pipe failures\n\n# Configuration\nK8S_VERSION=\"1.32.0\"\nLINKERD_VERSION=\"2.14.0\"\nISTIO_VERSION=\"1.22.0\"\nCLUSTER_NAME=\"${2:-bench-cluster}\"\nMESH_TYPE=\"${1:-}\"\nPOD_DENSITY=200  # Number of sample pods to deploy per benchmark run\nBENCH_DURATION=300  # Seconds to run load before measuring (5 minutes)\n\n# Validate inputs\nif [[ -z \"$MESH_TYPE\" ]]; then\n  echo \"Error: Mesh type required. Use 'linkerd' or 'istio'\"\n  exit 1\nfi\n\nif [[ \"$MESH_TYPE\" != \"linkerd\" && \"$MESH_TYPE\" != \"istio\" ]]; then\n  echo \"Error: Invalid mesh type. Use 'linkerd' or 'istio'\"\n  exit 1\nfi\n\n# Check dependencies\nfor cmd in kind kubectl helm; do\n  if ! command -v \"$cmd\" &> /dev/null; then\n    echo \"Error: $cmd is not installed. Please install it first.\"\n    exit 1\n  fi\ndone\n\n# Create Kind cluster with K8s 1.32\necho \"Creating Kind cluster $CLUSTER_NAME with Kubernetes $K8S_VERSION...\"\nkind create cluster --name \"$CLUSTER_NAME\" --image \"kindest/node:v$K8S_VERSION\" --config - < \"${MESH_TYPE}-resource-metrics.txt\"\nkubectl top nodes > \"${MESH_TYPE}-node-metrics.txt\"\n\n# Cleanup\necho \"Cleaning up cluster...\"\nkind delete cluster --name \"$CLUSTER_NAME\"\n\necho \"Benchmark complete. Results saved to ${MESH_TYPE}-resource-metrics.txt and ${MESH_TYPE}-node-metrics.txt\"\n

#!/usr/bin/env python3\n# parse-benchmark-results.py\n# Parses kubectl top output from Linkerd/Istio benchmarks to calculate overhead delta\n# Requires: Python 3.10+, pandas (optional for CSV export)\n\nimport sys\nimport re\nfrom typing import Dict, List, Tuple\n\ndef parse_resource_file(filepath: str) -> List[Dict[str, str]]:\n    \"\"\"Parse kubectl top pods output into structured dicts.\n    Args:\n        filepath: Path to kubectl top pods output file\n    Returns:\n        List of dicts with keys: namespace, pod, cpu, memory\n    \"\"\"\n    metrics = []\n    try:\n        with open(filepath, 'r') as f:\n            lines = f.readlines()\n    except FileNotFoundError:\n        print(f\"Error: File {filepath} not found.\")\n        sys.exit(1)\n    except PermissionError:\n        print(f\"Error: No permission to read {filepath}.\")\n        sys.exit(1)\n\n    # Skip header line (first line)\n    for line in lines[1:]:\n        line = line.strip()\n        if not line:\n            continue\n        # Split by whitespace, handle variable spaces\n        parts = re.split(r'\s+', line)\n        if len(parts) < 4:\n            print(f\"Warning: Skipping malformed line: {line}\")\n            continue\n        namespace, pod, cpu, memory = parts[0], parts[1], parts[2], parts[3]\n        metrics.append({\n            \"namespace\": namespace,\n            \"pod\": pod,\n            \"cpu\": cpu,\n            \"memory\": memory\n        })\n    return metrics\n\ndef calculate_mesh_overhead(linkerd_metrics: List[Dict], istio_metrics: List[Dict]) -> Tuple[float, float]:\n    \"\"\"Calculate CPU and memory overhead delta between Linkerd and Istio.\n    Args:\n        linkerd_metrics: Parsed Linkerd metrics\n        istio_metrics: Parsed Istio metrics\n    Returns:\n        Tuple of (cpu_delta_percent, memory_delta_percent)\n    \"\"\"\n    # Filter for mesh control plane pods (linkerd-* for Linkerd, istio-* for Istio)\n    linkerd_cp = [m for m in linkerd_metrics if m[\"namespace\"] == \"linkerd\" or m[\"pod\"].startswith(\"linkerd\")]\n    istio_cp = [m for m in istio_metrics if m[\"namespace\"] == \"istio-system\" or m[\"pod\"].startswith(\"istio\")]\n\n    # Sum CPU and memory for control planes (convert to millicores and Mi)\n    def sum_resources(metrics: List[Dict]) -> Tuple[float, float]:\n        total_cpu = 0.0\n        total_mem = 0.0\n        for m in metrics:\n            # Parse CPU (e.g., 100m, 1)\n            cpu = m[\"cpu\"]\n            if cpu.endswith(\"m\"):\n                total_cpu += float(cpu[:-1])\n            else:\n                total_cpu += float(cpu) * 1000  # Convert cores to millicores\n            # Parse Memory (e.g., 100Mi, 1Gi)\n            mem = m[\"memory\"]\n            if mem.endswith(\"Mi\"):\n                total_mem += float(mem[:-2])\n            elif mem.endswith(\"Gi\"):\n                total_mem += float(mem[:-2]) * 1024\n            elif mem.endswith(\"Ki\"):\n                total_mem += float(mem[:-2]) / 1024\n        return total_cpu, total_mem\n\n    linkerd_cpu, linkerd_mem = sum_resources(linkerd_cp)\n    istio_cpu, istio_mem = sum_resources(istio_cp)\n\n    # Calculate delta (Linkerd - Istio) as percentage of Istio's usage\n    cpu_delta = ((linkerd_cpu - istio_cpu) / istio_cpu) * 100 if istio_cpu != 0 else 0.0\n    mem_delta = ((linkerd_mem - istio_mem) / istio_mem) * 100 if istio_mem != 0 else 0.0\n\n    return cpu_delta, mem_delta\n\ndef main():\n    if len(sys.argv) != 3:\n        print(\"Usage: ./parse-benchmark-results.py linkerd-metrics.txt istio-metrics.txt\")\n        sys.exit(1)\n\n    linkerd_file = sys.argv[1]\n    istio_file = sys.argv[2]\n\n    print(f\"Parsing Linkerd metrics from {linkerd_file}...\")\n    linkerd_metrics = parse_resource_file(linkerd_file)\n    print(f\"Found {len(linkerd_metrics)} Linkerd metric entries.\")\n\n    print(f\"Parsing Istio metrics from {istio_file}...\")\n    istio_metrics = parse_resource_file(istio_file)\n    print(f\"Found {len(istio_metrics)} Istio metric entries.\")\n\n    cpu_delta, mem_delta = calculate_mesh_overhead(linkerd_metrics, istio_metrics)\n\n    print(\"\\n=== Benchmark Results ===\")\n    print(f\"Linkerd control plane CPU: {sum_resources(linkerd_metrics)[0]}m\")\n    print(f\"Istio control plane CPU: {sum_resources(istio_metrics)[0]}m\")\n    print(f\"CPU Overhead Delta: {cpu_delta:.2f}% (negative means Linkerd uses less)\")\n    print(f\"Linkerd control plane Memory: {sum_resources(linkerd_metrics)[1]}Mi\")\n    print(f\"Istio control plane Memory: {sum_resources(istio_metrics)[1]}Mi\")\n    print(f\"Memory Overhead Delta: {mem_delta:.2f}% (negative means Linkerd uses less)\")\n    print(f\"Aggregate Overhead Delta: {((cpu_delta + mem_delta)/2):.2f}%\")\n\nif __name__ == \"__main__\":\n    main()\n

package main\n\nimport (\n\t\"context\"\n\t\"crypto/tls\"\n\t\"fmt\"\n\t\"io\"\n\t\"log\"\n\t\"math/rand\"\n\t\"net/http\"\n\t\"os\"\n\t\"sync\"\n\t\"time\"\n)\n\n// traffic-generator.go\n// Simulates realistic HTTP traffic to measure latency overhead of service meshes\n// Usage: go run traffic-generator.go [target-url] [duration-seconds] [concurrency]\n\nconst (\n\tdefaultTarget   = \"http://nginx-1.sample-app.svc.cluster.local\"\n\tdefaultDuration = 300 // seconds\n\tdefaultConcurrency = 50\n)\n\ntype latencyResult struct {\n\tminLatency  time.Duration\n\tmaxLatency  time.Duration\n\ttotalReqs   int\n\ttotalLatency time.Duration\n\terrors      int\n}\n\nfunc runTrafficGen(target string, duration time.Duration, concurrency int, resultChan chan<- latencyResult) {\n\tctx, cancel := context.WithTimeout(context.Background(), duration)\n\tdefer cancel()\n\n\tvar wg sync.WaitGroup\n\tresults := make(chan time.Duration, 1000)\n\terrChan := make(chan error, 1000)\n\n\t// Start workers\n\tfor i := 0; i < concurrency; i++ {\n\t\twg.Add(1)\n\t\tgo func() {\n\t\t\tdefer wg.Done()\n\t\t\tclient := &http.Client{\n\t\t\t\tTransport: &http.Transport{\n\t\t\t\t\tTLSClientConfig: &tls.Config{InsecureSkipVerify: true},\n\t\t\t\t},\n\t\t\t\tTimeout: 5 * time.Second,\n\t\t\t}\n\t\t\tfor {\n\t\t\t\tselect {\n\t\t\t\tcase <-ctx.Done():\n\t\t\t\t\treturn\n\t\t\t\tdefault:\n\t\t\t\t\tstart := time.Now()\n\t\t\t\t\treq, err := http.NewRequestWithContext(ctx, \"GET\", target, nil)\n\t\t\t\t\tif err != nil {\n\t\t\t\t\t\terrChan <- err\n\t\t\t\t\t\tcontinue\n\t\t\t\t\t}\n\t\t\t\t\t// Add random headers to simulate real traffic\n\t\t\t\t\treq.Header.Set(\"X-Request-ID\", fmt.Sprintf(\"%d\", rand.Int63()))\n\t\t\t\t\treq.Header.Set(\"User-Agent\", \"Mesh-Benchmark-Client/1.0\")\n\n\t\t\t\t\tresp, err := client.Do(req)\n\t\t\t\t\tif err != nil {\n\t\t\t\t\t\terrChan <- err\n\t\t\t\t\t\tcontinue\n\t\t\t\t\t}\n\t\t\t\t\tio.Copy(io.Discard, resp.Body)\n\t\t\t\t\tresp.Body.Close()\n\t\t\t\t\tlatency := time.Since(start)\n\t\t\t\t\tresults <- latency\n\t\t\t\t}\n\t\t\t}\n\t\t}()\n\t}\n\n\t// Collect results\n\tgo func() {\n\t\twg.Wait()\n\t\tclose(results)\n\t\tclose(errChan)\n\t}()\n\n\tvar res latencyResult\n\tres.minLatency = time.Hour // Initialize to high value\n\tfor {\n\t\tselect {\n\t\tcase lat, ok := <-results:\n\t\t\tif !ok {\n\t\t\t\tresults = nil\n\t\t\t} else {\n\t\t\t\tres.totalReqs++\n\t\t\t\tres.totalLatency += lat\n\t\t\t\tif lat < res.minLatency {\n\t\t\t\t\tres.minLatency = lat\n\t\t\t\t}\n\t\t\t\tif lat > res.maxLatency {\n\t\t\t\t\tres.maxLatency = lat\n\t\t\t\t}\n\t\t\t}\n\t\tcase err, ok := <-errChan:\n\t\t\tif !ok {\n\t\t\t\terrChan = nil\n\t\t\t} else {\n\t\t\t\tlog.Printf(\"Request error: %v\", err)\n\t\t\t\tres.errors++\n\t\t\t}\n\t\t}\n\t\tif results == nil && errChan == nil {\n\t\t\tbreak\n\t\t}\n\t}\n\n\tres.totalLatency = res.totalLatency\n\tresultChan <- res\n}\n\nfunc main() {\n\ttarget := defaultTarget\n\tduration := defaultDuration\n\tconcurrency := defaultConcurrency\n\n\t// Parse CLI args\n\tif len(os.Args) > 1 {\n\t\ttarget = os.Args[1]\n\t}\n\tif len(os.Args) > 2 {\n\t\td, err := time.ParseDuration(os.Args[2] + \"s\")\n\t\tif err != nil {\n\t\t\tlog.Fatalf(\"Invalid duration: %v\", err)\n\t\t}\n\t\tduration = int(d.Seconds())\n\t}\n\tif len(os.Args) > 3 {\n\t\tfmt.Sscanf(os.Args[3], \"%d\", &concurrency)\n\t}\n\n\tfmt.Printf(\"Starting traffic generation to %s for %d seconds with %d concurrent workers\\n\", target, duration, concurrency)\n\tresultChan := make(chan latencyResult)\n\tgo runTrafficGen(target, time.Duration(duration)*time.Second, concurrency, resultChan)\n\n\tres := <-resultChan\n\tclose(resultChan)\n\n\tavgLatency := res.totalLatency / time.Duration(res.totalReqs)\n\tfmt.Println(\"\\n=== Traffic Generation Results ===\")\n\tfmt.Printf(\"Total Requests: %d\\n\", res.totalReqs)\n\tfmt.Printf(\"Errors: %d (%.2f%%)\\n\", res.errors, (float64(res.errors)/float64(res.totalReqs))*100)\n\tfmt.Printf(\"Min Latency: %v\\n\", res.minLatency)\n\tfmt.Printf(\"Max Latency: %v\\n\", res.maxLatency)\n\tfmt.Printf(\"Average Latency: %v\\n\", avgLatency)\n\tfmt.Printf(\"P99 Latency (estimated): %v\\n\", res.maxLatency * 90 / 100) // Simplified P99 estimate\n}\n

kubectl top pods -n istio-system  # For Istio control plane\nkubectl top pods -n linkerd       # For Linkerd control plane

kubectl edit configmap linkerd-config -n linkerd\n# Set tracing.enabled: false, metrics.prometheus.enabled: false if unused

kubectl apply -f - <