Categories
DevOps Infrastructure Microservices Networking Configuration Management Service Mesh Service DiscoveryStars
Forks
Watchers
Developer links
HashiCorp Consul
With nearly 30,000 GitHub stars and deployment across organizations including Criteo, Pandora, and Barclays, HashiCorp Consul is the industry-standard platform for service discovery, service mesh, and distributed configuration across dynamic multi-cloud and multi-datacenter infrastructure. Services register themselves and become discoverable via a built-in DNS interface on port 8600 or an HTTP API on port 8500, with health checks ensuring only healthy instances receive traffic through automatic catalog deregistration and service-level circuit breaking. The service mesh capabilities use Envoy sidecar proxies with Transparent Proxy mode to establish automatic mTLS encryption for all service-to-service communication, while identity-based intentions define fine-grained authorization rules controlling which services can communicate. The integrated API Gateway manages north-south traffic into the mesh with configurable routing rules, TLS termination, and header-based matching policies. Consul's distributed key-value store provides hierarchical configuration storage accessible via CLI, HTTP API, and the built-in web UI, with blocking queries enabling watch-based configuration updates without polling. Multi-datacenter federation connects Consul clusters across regions through WAN gossip and RPC forwarding, enabling cross-datacenter service discovery and failover with configurable prepared queries. The Raft consensus protocol provides strong consistency for the service catalog and KV store, with anti-entropy mechanisms ensuring agent state converges with the server catalog. Consul integrates natively with Kubernetes via Helm charts with automatic sidecar injection, Nomad for workload orchestration, Vault for secrets management, and Terraform for infrastructure provisioning. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BUSL 1.1 licensed.
Benefits
- DNS-Based Service Discovery
- Services register and discover each other via built-in DNS and HTTP interfaces with health-check integration that automatically removes unhealthy instances from query results.
- Automatic mTLS Service Mesh
- Envoy sidecar proxies with Transparent Proxy mode encrypt all service-to-service traffic with mutual TLS, while identity-based intentions control authorization without application changes.
- Multi-Datacenter WAN Federation
- WAN gossip protocol and RPC forwarding connect Consul clusters across datacenters with cross-datacenter service discovery, prepared query failover, and consistent KV replication.
- Distributed Key-Value Store
- Hierarchical configuration storage with blocking queries enables watch-based updates across services, accessible via CLI, HTTP API, and the built-in web UI dashboard.
Features
- Health Checking
- HTTP, TCP, gRPC, script, and Docker-based health checks monitor service instances with configurable intervals, timeouts, and deregistration thresholds for automatic failover.
- API Gateway
- Manages north-south traffic into the service mesh with route-based matching, TLS termination, header manipulation, and integration with Consul service discovery.
- Transparent Proxy
- Redirects all inbound and outbound traffic through Envoy sidecars automatically using iptables rules, requiring zero application code changes for mesh adoption.
- Prepared Queries
- Templated service queries with datacenter failover, nearest-node routing, and tag-based filtering enable sophisticated service resolution strategies without client-side logic.
- Web UI Dashboard
- Built-in browser interface displays service catalog, node health, key-value store, intentions, and cluster topology with real-time updates and multi-datacenter views.