This short explainer breaks down the difference between a CNI and a service mesh. It highlights how Kubernetes networking and security at Layer 3 and Layer 4 differ from the Layer 7 traffic management capabilities typically associated with service meshes. Well, the difference between a service mesh and a CNI is, I think, a CNI is more for the networking layer, so the L4 stuff where you can enforce network policies. Whereas a service mesh is kind of pushing upwards towards L7, so you can process, for example, headers and requests that you get between services. So it's something that is closer to developers and what they can adjust and understand, whereas a CNI is something you need for Kubernetes, but a service mesh you don't necessarily need all the time.