Kmesh

Term 3 · Sep-Nov · 1 project

• Develop MCP Server for AI-Native Kmesh Service Mesh Management

  LFX Mentorship · Listed in the official cohort

  @yashisraniSource IssueLFX portal

  Build a Model Context Protocol (MCP) server that exposes Kmesh's capabilities as callable tools for AI agents (Claude, Cursor, GitHub Copilot). The MCP server acts as a middle layer between AI tools and Kmesh infrastructure, enabling natural language queries like "What services are running?" or "Why is service A not reaching service B?" instead of requiring users to learn complex kmeshctl commands, xDS APIs, and eBPF internals. Expected Outcome: - MCP Server — Go-based, 10 core tools, MCP v1.0+ compliant (HTTP/SSE transport), under mcp/ directory - Integration — Makefile targets (make mcp-server, make mcp-test, make mcp-image), container image - Testing — Unit tests (>80% coverage), integration tests, E2E tests, MCP protocol compliance tests - Documentation — User guide, developer guide (architecture + adding new tools), AI client setup examples (Claude Desktop, Cursor, Copilot) - Community — Blog post on kmesh.net, demo video showing AI agents interacting with Kmesh, community meeting presentation - Stretch Goals — 5 additional tools (total 15), read-write mode with safeguards, kmeshctl mcp serve subcommand, MCP resource templates

  • go/kubernetes/RUST API/MCP

Term 2 · Jun-Aug · 1 project

• Integrating Kmesh into Headlamp UI

  LFX Mentorship · Listed in the official cohort

  Source IssueLFX portal

  Headlamp is an open-source, extensible Kubernetes web UI offering easy cluster management, multi-cluster support, RBAC, and a plugin system for adding custom functionality. Users who work with Kmesh today have to switch back and forth between Headlamp (for general Kubernetes resource management) and CLI tools / kubectl (for Kmesh-specific inspection), which creates a fragmented workflow and a poor user experience. There is currently no simple visual way to view Kmesh resources, inspect waypoints and related components, understand overall mesh status, or troubleshoot issues quickly from within an interface users already use. This project proposes building a Headlamp plugin for Kmesh that brings Kmesh resources directly into the Headlamp UI, providing lightweight visibility of Kmesh resources alongside other Kubernetes resources. The full-featured Kmesh dashboard remains the place for advanced operations; the Headlamp plugin focuses on reducing context switching and improving ease of use for day-to-day workflows.

  • Kubernetes (CRDs
  • RBAC
  • kubectl)
  • React / Next.js
  • TypeScript
  • Familiarity with Kmesh (or service mesh concepts in general)
  • +1

Term 1 · Mar-May · 2 projects

• Kmesh supports multi-clusters

  LFX Mentorship · Listed in the official cohort

  @hzxuzhonghuSource IssueLFX portal

  Kmesh, as a high-performance service mesh data plane, is now only supported for use in a single cluster. However, now that multi-cluster support for istiod has been realized, we are able to move forward with the multi-cluster adaptation of Kmesh to support the use of Kmesh in multi-cluster environments. Adaptation to the current multi-cluster production environment with LLM and large data.

  • go
  • docker
  • kind
  • service mesh

• Optimize long connection load balance and support more load balance algorithm

  LFX Mentorship · Listed in the official cohort

  @LiZhenCheng9527Source IssueLFX portal

  Kmesh employs eBPF for load balancing. However, at present it only supports short-lived connections and offers a limited range of load balancing algorithms. Consequently, we aim to support a broader range of load balancing capabilities.

  • go
  • docker
  • kind
  • service mesh

Term 3 · Sep-Nov · 2 projects

• Improving Ipsec's Stability and Ease of Use

  LFX Mentorship · Listed in the official cohort

  @LiZhenCheng9527Source IssueLFX portal

  Communication encryption is an important functional feature of the Service Mesh to ensure communication security. Kmesh uses IPsec to implement this feature. However, Kmesh lacks the reliability maintenance and ease of use enhancements for Kmesh. Therefore, we should optimize the reliability and ease of use of IPsec in addition to its implementation.

  • Go
  • Some C knowledge about eBPF and IPsec
  • Basic networking knowledge

• Kmesh Orion replace waypopint

  LFX Mentorship · Listed in the official cohort

  @yaozengzengSource IssueLFX portal

  Kmesh, as a high-performance service mesh data plane, does have a performance advantage when compared to other service mesh data planes. However, in high-concurrency scenarios with application-layer protocols such as HTTP, it is held back by the waypoint. Therefore, we developed Orion to replace the waypoint. However, there is still some adaptive functionality development and testing that needs to be done before we can replace it.

  • Rust
  • Basic service mesh knowledge

Term 1 · Mar-May · 4 projects

• Add the Kmesh e2e Test

  LFX Mentorship · Listed in the official cohort

  @yaozegzengSource IssueLFX portal

  Kmesh now has an e2e testing framework, but it only covers some of the usage scenarios for key features. More test cases need to be covered to ensure the stability of key features.

  • go
  • Kmesh

• Kmesh eBPF unit test

  LFX Mentorship · Listed in the official cohort

  @bitcoffeeiuxSource IssueLFX portal

  As the community features continue to expand, the number of eBPF programs in the data plane has increased. Due to the inherent limitations of eBPF (third-state encoding, neither user space nor kernel space, running in a kernel virtual machine with a dedicated instruction set), Kmesh implements complex governance logic through features like tail call and map-in-map, which poses challenges for data plane quality protection. eBPF, a recently introduced programmable technology in the kernel, currently has an immature ecosystem. The industry is actively exploring eBPF testing capabilities (e.g., Unit Testing eBPF). This project aims to develop an eBPF UT testing framework in conjunction with the Kmesh project to ensure the quality of the Kmesh data plane.

  • C
  • eBPF
  • (go)

• Metrics for TCP Long Connection

  LFX Mentorship · Listed in the official cohort

  @nlgwcySource IssueLFX portal

  Currently, Kmesh metrics are only reported when a TCP connection is closed. In the case of long connections, it is not possible to know the status before the connection is closed. Therefore, we hope to add the capability to periodically report metrics for long connections.

  • go
  • c
  • eBPF

• Re-design and implement the Kmesh website

  LFX Mentorship · Listed in the official cohort

  @LiZhenCheng9527Source IssueLFX portal

  The existing Kmesh website theme struggled to meet existing development needs. Therefore, there is a need to redesign the Kmesh website and replace the theme to make it easier for developers to add documentation. Development instructions for the website are also provided.

  • JavaScript
  • Kmesh
  • Html