Buoyant

Buoyant is the company behind Linkerd, an open-source service mesh for Kubernetes, and the vendor of Buoyant Enterprise for Linkerd (BEL), a commercial distribution aimed at production platform teams. A service mesh, as the company defines it, is an infrastructure layer handling service-to-service communication, mutual TLS, traffic management, observability and authorization without changes to application code. Linkerd is described as the first CNCF-graduated service mesh and uses a Rust-based micro-proxy data plane.

BEL extends open-source Linkerd with FIPS 140-2 and 140-3 validated cryptographic builds covering both control plane and data plane (with a CMVP audit dashboard), HAZL (high-availability zonal load balancing) for keeping traffic in-zone when healthy to reduce cross-zone data transfer costs, a lifecycle operator, Buoyant Cloud, multi-cluster topology and federated services, and 24x7 support. Product capabilities marketed on the site include per-request gRPC load balancing on every meshed pod (GA since 2018), zero-configuration strict mTLS with workload identity, golden metrics (success rate, RPS, latency) without instrumentation, automated trust anchor rotation, multi-cluster mTLS and failover, and signed SBOMs with SLSA provenance in each release.

Buoyant frames six production use cases: FIPS compliance for FedRAMP, CMMC and HIPAA; gRPC on Kubernetes; observability and reliability; multi-cluster and failover; cross-zone cost reduction; and zero trust in Kubernetes. It also publishes solution guides for migrating from Microsoft AKS to EKS and GKE to EKS, edge deployments, and a zero-trust reference architecture, and runs educational programs including Service Mesh Academy workshops, self-paced service mesh certification courses, a blog, a podcast and a free O'Reilly book, "Linkerd: Up & Running."

Founding story

Buoyant was founded in 2015 by William Morgan and Oliver Gould, both previously infrastructure engineers at Twitter. They created Linkerd and, per the company, pioneered the service mesh category. In 2019 press coverage, Morgan was identified as CEO and Gould as CTO.

Business model

Buoyant develops and stewards the open-source Linkerd service mesh and sells a commercial distribution, Buoyant Enterprise for Linkerd (BEL), which layers paid capabilities on top of the open-source project: FIPS 140-2/140-3 validated control-plane and data-plane builds, HAZL cross-zone traffic management, a lifecycle operator, Buoyant Cloud, multi-cluster topology management and 24x7 enterprise support. The website offers a free entry point and self-service trial alongside sales-assisted plans and briefings, and the company publishes tiered plan/feature comparisons between open-source Linkerd and BEL.

Revenue comes from commercial subscriptions to Buoyant Enterprise for Linkerd, sold in plans that add FIPS-validated builds, HAZL, the lifecycle operator, Buoyant Cloud, multi-cluster topology and 24x7 enterprise support to the free open-source project, with a free tier and paid enterprise tiers available for comparison on the site.

Traction

The company reports Buoyant Enterprise for Linkerd in production at Xbox (22,000 pods on zero-config mTLS across 26+ clusters, with an in-house observability system retired), Imagine Learning (targeting at least 40% lower regional data transfer costs via HAZL and a 97% reduction in service-mesh-related CVE exposure in 2024), IntelliGRC (4x MRR growth and doubled new opportunities after FedRAMP authorization) and Tradeshift (self-hosted to EKS migration with zero downtime). In March 2019, press coverage reported Linkerd powering production infrastructure at Salesforce, Credit Karma, Expedia, BigCommerce and PayPal.

Latest developments

Recent company content covers signed SBOMs and SLSA provenance shipped with every BEL release to support FIPS compliance and post-deployment CVE tracking, use of SPIFFE to extend Linkerd's identity-based authentication into broader infrastructure identity, and Gateway API conformance work involving gRPC protocol declaration and detection. Podcast episodes address SPIFFE identity for AI agents on Kubernetes and disaggregated inference on Kubernetes. Customer outcomes highlighted include Xbox running 22,000 pods with zero-config mTLS across 26+ clusters, Imagine Learning targeting at least a 40% cut in regional data transfer costs with HAZL and a 97% drop in service-mesh-related CVE exposure in 2024, IntelliGRC growing MRR fourfold after FedRAMP authorization, and Tradeshift migrating from self-hosted infrastructure to EKS with zero downtime via multi-cluster mesh.