Intermesh is a research prototype from the NetSys Lab at UC Berkeley exploring disaggregated control in service meshes: what it takes for independently operated meshes to interoperate across partial-trust boundaries without a shared control plane.
Nodes exchange signed, time-bounded endorsements about names, addresses, and policy. Each node runs a Datalog-style trust engine that derives its own local view of the mesh from that authenticated control state, so admission, disclosure, and peering are explicit policy rather than the implicit behavior of a central controller.
Intermesh exists to explore a research idea, and it shows. It is not production ready, not audited, and not meant to be deployed; interfaces, policy semantics, and wire formats change without notice.
Intermesh is written in Rust and builds and tests on Linux.
cargo local # lint + build + unit tests + e2e tests
cargo all # local, plus perf and VM testsSee docs/development.md for environment setup, e2e and
VM test details, and the local mesh demo in sandbox/.