F5 Aspen Mesh

Aspen Mesh provides an Istio-based microservices solution for service providers. Learn how to get started today!

Deploy, Manage, and Monitor Microservices at Scale

Aspen Mesh enables 5G service-based architecture

Based on CNCF’s Istio project, Aspen Mesh enables service providers migrating from 4G virtualized network functions (VNF) to the service-based architecture (SBA) of 5G, which relies on a microservice infrastructure.

  • 5G Standalone (SA) SBA Service Mesh - Deploy cloud-native network functions (CNFs) with security and visibility built-in.
  • 4G VNF to 5G CNF Transition Platform - Enables faster transition to a 5G core.
  • Service Provider IT Microservices Platform - Leverage microservices for SP back-office IT.
Aspen Service Mesh enables 5G service-based architecture
Aspen Service Mesh Packet Inspector

Aspen Mesh Packet Inspector

Security should be ensured at all layers and work together with new clusters when introducing services running on top of a microservices infrastructure. It is paramount for all new points of exposure to be visible, which aids in pin-pointing security threats.

  • Enterprise Visibility - Per-user, per-service and per-tenant traffic and service visibility allow traceability for compliance tracking and performance purposes.
  • Enhance Cluster Security - Topology obfuscation of internal infrastructure and visibility to traffic enables increased security of deployed clusters and services.
  • Service Provider Visibility - Per-subscriber and per-service traffic visibility allows traceability for compliance tracking, trouble shooting, and billing purposes.

Product Overview

Diagram illustrating F5’s Aspen Service Mesh

Connect microservices and scale Kubernetes with minimal management overhead

Aspen Mesh is deployed by a service provider as an SBA service mesh building block for 5G SA deployments. It may also be deployed by a service provider in conjunction with F5 BIG-IP Next Service Proxy for Kubernetes (SPK) for legacy 4G or 5G non-standalone (NSA) deployments in transition to a standalone 5G deployment.

Connecting microservices with a service mesh ›

On-Premises, Private or Hybrid Cloud

For highly regulated businesses where data ownership and security are prioritized, and where legacy services maybe in transition.

Multi-Cluster

A microservice deployment platform for HA and DR. Deploy workloads requiring high availability or disaster recovery capability.

Multi-Cloud

Easily integrate data and services across various cloud-native architectures. Integrate security and visibility for seamless deployments.

Multi-Tenant

Deploy a single cluster, multi-cluster, or multi-cloud deployment to provide services to multiple tenants, each isolated from each other.

Core Capabilities

Aspen Mesh is a full featured Istio-based service mesh with 24/7 support and is secure by default. It also includes several capabilities which are not found in open source Istio, as detailed below.

Open source Istio capabilities

Provides traffic control and policy enforcement.

Robust security by default

Configuration provides strict security capability out of the box.

IPv4/IPv6 dual-stack networking

Supports native, end-to-end dual-stack networking across the service mesh.

Packet Inspector

Enables service-mesh traffic capture and visibility.

Certificate orchestrator

Granular certificate management for service mesh and other products.

Helm 3 support

Makes installations and upgrades easier

DNS Subject Alternative Name (SAN) certificates

FQDN and SPIFFE support. Eases 4G VNF to 5G CNF migration.

Drive traffic to your analytic tools

Industry support of Aspen Mesh traffic format.

Platform Support and Integrations

Kubernetes Integrations

F5 Aspen Mesh can be flexibly deployed on Kubernetes cloud-native infrastructure.

Resources

Featured

A cloud labeled with 5G

5G Cloud-Native Infrastructure

F5’s 5G infrastructure solutions combine powerful tools for managing and securing traffic into and within containerized networks, providing the tools service providers need to modernize their network infrastructure.

Read the overview

Next Steps

Deliver and Secure Every App
F5 application delivery and security solutions are built to ensure that every app and API deployed anywhere is fast, available, and secure. Learn how we can partner to deliver exceptional experiences every time.
Connect With Us