Service registry, integrated health checks, and DNS and HTTP interfaces +
Service registry, integrated health checks, and DNS and HTTP interfaces enable any service to discover and be discovered by other services
Load balancers are often used to front a service tier and provide a static IP. These load balancers add cost, increase latency, introduce single points of failure, and must be updated as services scale up/down.
+Load balancers are often used to front a service tier and provide a static IP. These load balancers add cost, increase latency, introduce single points of failure, and must be updated as services scale up/down.
Instead of load balancers, connectivity in dynamic infrastructure is best solved with service discovery. Service discovery uses a registry to keep a real-time list of services, their location, and their health. Services query the registry to discover the location of upstream services and then connect directly. This allows services to scale up/down and gracefully handle failure without a load balancer intermediary.
+Instead of load balancers, connectivity in dynamic infrastructure is best solved with service discovery. Service discovery uses a registry to keep a real-time list of services, their location, and their health. Services query the registry to discover the location of upstream services and then connect directly. This allows services to scale up/down and gracefully handle failure without a load balancer intermediary.
Consul provides a registry of all the running nodes and services, along with their current health status. This allows operators to understand the environment, and applications and automation tools to interact with dynamic infrastructure using an HTTP API.
+Consul provides a registry of all the running nodes and services, along with their current health status. This allows operators to understand the environment, and applications and automation tools to interact with dynamic infrastructure using an HTTP API.
- Learn more + Learn more
Consul enables service discovery using a built-in DNS server. This allows existing applications to easily integrate, as almost all applications support using DNS to resolve IP addresses. Using DNS instead of a static IP address allows services to scale up/down and route around failures easily.
+Consul enables service discovery using a built-in DNS server. This allows existing applications to easily integrate, as almost all applications support using DNS to resolve IP addresses. Using DNS instead of a static IP address allows services to scale up/down and route around failures easily.
- Learn more + Learn more
10.0.1.109
Consul provides an HTTP API to query the service registry for nodes, services, and health check information. The API also supports blocking queries, or long-polling for any changes. This allows automation tools to react to services being registered or health status changes to change configurations or traffic routing in real time.
+Consul provides an HTTP API to query the service registry for nodes, services, and health check information. The API also supports blocking queries, or long-polling for any changes. This allows automation tools to react to services being registered or health status changes to change configurations or traffic routing in real time.
- Learn more + Learn more
10.0.1.109
Consul supports multiple datacenters out of the box with no complicated configuration. Look up services in other datacenters or keep the request local. Advanced features like Prepared Queries enable automatic failover to other datacenters.
+Consul supports multiple datacenters out of the box with no complicated configuration. Look up services in other datacenters or keep the request local. Advanced features like Prepared Queries enable automatic failover to other datacenters.
- Learn more + Learn more
dc=dc2
Pairing service discovery with health checking prevents routing requests to unhealthy hosts and enables services to easily provide circuit breakers.
+Pairing service discovery with health checking prevents routing requests to unhealthy hosts and enables services to easily provide circuit breakers.
- Learn more + Learn more
dc=dc2
dc=dc2
In this talk from HashiConf 2015, Tarrant Rollins discusses how Twitch uses HashiCorp Consul to overcome legacy infrastructure and solve complex problems.
- Watch + Video +In this talk from HashiConf 2015, Tarrant Rollins discusses how Twitch uses HashiCorp Consul to overcome legacy infrastructure and solve complex problems.
+dc=dc2
Justen Walker explains how Jet.com uses HashiCorp Consul and Nomad to allow hundreds of developers to have self-service access, despite relying on NGINX static configs—and with a remarkably small DevOps team.
- Watch + Video +Justen Walker explains how Jet.com uses HashiCorp Consul and Nomad to allow hundreds of developers to have self-service access, despite relying on NGINX static configs—and with a remarkably small DevOps team.
+dc=dc2
diff --git a/website/source/downloads.html.erb b/website/source/downloads.html.erb
index 6c79b43e22..9058d4bf30 100644
--- a/website/source/downloads.html.erb
+++ b/website/source/downloads.html.erb
@@ -40,7 +40,7 @@ description: |-
Consul is a service networking solution to connect and secure services across any runtime platform and public or private cloud
- +Consul is a service networking solution to connect and secure services across any runtime platform and public or private cloud.
+ Download - Get Started + Get StartedThe shift from static infrastructure to dynamic +
The shift from static infrastructure to dynamic infrastructure changes the approach to networking from host-based to service-based. Connectivity moves from the use of static IPs to dynamic service discovery, and security moves from static firewalls to @@ -84,14 +84,14 @@ description: |- -
Consul can be run as a platform to solve a range of use-cases - in service networking.
+Consul can be run as a platform to solve a range of use-cases + in service networking.
- Use the service registry to address and discover services across multiple runtime platforms, cloud providers and regions.
+Use the service registry to address and discover services across multiple runtime platforms, cloud providers and regions.
- Service discovery, identity-based authorization, and L7 traffic management abstracted from application code with proxies in the service mesh pattern.
+Service discovery, identity-based authorization, and L7 traffic management abstracted from application code with proxies in the service mesh pattern.
Codify and automate service definitions, health checks, service +
Codify and automate service definitions, health checks, service authorization policies, failover logic, and more.
Connect services across any runtime platform and public or private cloud. Connect services from Kubernetes to VMs, Containers to Serverless functions.
+Connect services across any runtime platform and public or private cloud. Connect services from Kubernetes to VMs, Containers to Serverless functions.
+
Provision clusters on any infrastructure, connect to services over TLS via proxy integrations, and Serve TLS certificates with pluggable Certificate Authorities.
Consul Open Source addresses the technical complexity of connecting services across distributed infrastructure.
+Consul Open Source addresses the technical complexity of connecting services across distributed infrastructure.
Consul Enterprise addresses the organizational complexity of large user bases and compliance requirements with collaboration and governance features.
+Consul Enterprise addresses the organizational complexity of large user bases and compliance requirements with collaboration and governance features.
Service discovery, identity-based authorization, and L7 traffic management abstracted from application code with proxies in the service mesh pattern
+Service discovery, identity-based authorization, and L7 traffic management abstracted from application code with proxies in the service mesh pattern
East-west firewalls use IP-based rules to secure ingress and +
East-west firewalls use IP-based rules to secure ingress and egress traffic. But in a dynamic world where services move across machines and machines are frequently created and destroyed, this perimeter-based approach is difficult to scale as it results in @@ -45,12 +45,12 @@ description: |-
Service mesh is a new approach to secure the service itself +
Service mesh is a new approach to secure the service itself
rather than relying on the network. Consul uses centrally
managed service policies and configuration to enable
dynamic routing and security based on service identity.
@@ -64,15 +64,15 @@ description: |-
Service-to-service communication policy at Layer 7 can be managed centrally, enabling advanced traffic management patterns such as service failover, path-based routing, and traffic shifting that can be applied across public and private clouds, platforms, and networks. Service-to-service communication policy at Layer 7 can be managed centrally, enabling advanced traffic management patterns such as service failover, path-based routing, and traffic shifting that can be applied across public and private clouds, platforms, and networks.
- Learn more
+ Learn more
Centrally managed service observability at Layer 7 including detailed metrics on all service-to-service communication such as connections, bytes transferred, retries, timeouts, open circuits, and request rates, response codes. Centrally managed service observability at Layer 7 including detailed metrics on all service-to-service communication such as connections, bytes transferred, retries, timeouts, open circuits, and request rates, response codes.
- Learn more
+ Learn more
Secure communication between legacy and modern workloads. Sidecar proxies allow applications to be integrated without code changes and Layer 4 support provides nearly universal protocol compatibility. Secure communication between legacy and modern workloads. Sidecar proxies allow applications to be integrated without code changes and Layer 4 support provides nearly universal protocol compatibility.
- Learn more
+ Learn more
TLS certificates are used to identify services and secure communications. Certificates use the SPIFFE format for interoperability with other platforms. Consul can be a certificate authority to simplify deployment, or integrate with external signing authorities like Vault. TLS certificates are used to identify services and secure communications. Certificates use the SPIFFE format for interoperability with other platforms. Consul can be a certificate authority to simplify deployment, or integrate with external signing authorities like Vault.
- Learn more
+ Learn more
All traffic between services is encrypted and authenticated with mutual TLS. Using TLS provides a strong guarantee of the identity of services communicating, and ensures all data in transit is encrypted. All traffic between services is encrypted and authenticated with mutual TLS. Using TLS provides a strong guarantee of the identity of services communicating, and ensures all data in transit is encrypted.
- Learn more
+ Learn more
Connect between different cloud regions, VPCs and between overlay and underlay networks without complex network tunnels and NAT. Mesh Gateways solve routing at TLS layer while preserving end-to-end encryption and limiting attack surface area at the edge of each network. Connect between different cloud regions, VPCs and between overlay and underlay networks without complex network tunnels and NAT. Mesh Gateways solve routing at TLS layer while preserving end-to-end encryption and limiting attack surface area at the edge of each network.
- Learn more
+ Learn more
-
Features
+ Features
@@ -105,10 +105,10 @@ Splits = [
-
Layer 7 Traffic Management
- Layer 7 Traffic Management
+
@@ -131,10 +131,10 @@ Splits = [
-
Layer 7 Observability
- Layer 7 Observability
+
@@ -160,10 +160,10 @@ Splits = [
-
Secure services across any runtime platform
- Secure services across any runtime platform
+
@@ -182,10 +182,10 @@ Splits = [
-
Certificate-Based Service Identity
- Certificate-Based Service Identity
+
@@ -228,16 +228,16 @@ Secure Sockets Layer
-
Encrypted communication
- Encrypted communication
+
@@ -247,14 +247,14 @@ Secure Sockets Layer
-
Mesh Gateway
- Mesh Gateway
+
+