Nexus Cloud Mesh Control Plane
Distributed Service Mesh Control Plane with mTLS & Traffic Shaping
Cloud-native control plane providing mTLS encryption, canary deployments, and rate-limiting across multi-region Kubernetes clusters.
GoEnvoy ProxygRPCKubernetes CRDsCert-ManagerPrometheusCloud PlatformsGoKubernetesgRPCEnvoy

Overview
Control plane managing distributed Envoy proxies across 12 cloud regions.
Problem
Managing mTLS certificates and canary rules manually across multi-cloud clusters is error-prone.
Solution
Built a Custom Resource Definition (CRD) controller in Go using controller-runtime to sync state in 500ms.
Results
Automated 100% of internal mTLS certificate rotations for 4,000+ workloads.
