Blog
Linkerd service mesh: edge ingress CORS is optional, mTLS between pods, and browser traffic patterns
Mesh encryption is invisible to browsers—CORS still applies at the ingress controller that faces the public internet.
1 min read
linkerdservice-meshcors
Tap and metrics
Linkerd tap shows pod-to-pod traffic without Origin—use ingress logs for browser-related CORS debugging.
Golden metrics should alert when preflight ratios spike relative to GET/POST success rates.
Multicluster
Split horizons across clusters can duplicate ingress hostnames—ensure Allow-Origin lists match the hostname users type.
Service mirrors should not bypass CORS policies intended for the primary cluster.