A service mesh operator wants to allow all services to communicate with each other unless an explicit deny intention exists. Which default intention behavior achieves this?

Question

Accepted Answer

A. Allow-by-default (allow all traffic unless explicitly denied). Consul service mesh supports two default behaviors: allow-by-default and deny-by-default. Allow-by-default permits all service communication unless a specific `deny` intention overrides it. This is the simpler starting point. Option b describes deny-by-default, which is the recommended zero-trust posture but is not the scenario the operator is seeking.

A service mesh operator wants to allow all services to communicate with each other unless an explicit deny intention exists. Which default intention behavior achieves this?

Related Questions

Discussion