CIOPages
For vendorsCorrections to your listing are free
Fix an error, free List a company, free Order a Spotlight listingAbout Spotlight listings
DirectoryCloud InfrastructureService Mesh & API GatewayDubbo

Dubbo

About Dubbo

Dubbo is a cloud-native microservice framework. It allows building apps with built-in rpc, traffic management, security, and observability support. It supports multiple programming languages. It provides a unified microservice development paradigm with multi-language SDK support. It supports protocols including HTTP/2, gRPC, REST, Thrift, and TCP.

Used for

  • Discovering services across clusters with millions of instances.
  • Controlling traffic through routing rules including canary release and grayscale release.
  • Switching communication protocols via configuration change.
  • Deploying services across virtual machines, Docker, Kubernetes, and service mesh.
  • Monitoring service status using observable metrics.

Who it is for

  • Used by Commercial Bank of China.
  • Used by cloud vendors like Alibaba Cloud, Tencent Cloud, and Huawei Cloud.

From Dubbo's own website, read 2026-10-23. How we build listings.

How to evaluate Service Mesh & API Gateway

This is how the CIOPages Research Team evaluates this category. It is not an assessment of Dubbo. The category covers two kinds of product, so both frameworks are here. Most buyers need one of them.

API Management Platform
25%
Gateway & Traffic Management
Performance (latency < 5ms p99), rate limiting, load balancing, circuit breaking, protocol support (REST, GraphQL, gRPC, WebSocket)
25%
Security
OAuth 2.0/OIDC, API key management, mTLS, bot detection, runtime threat protection, OWASP API Top 10 coverage
20%
Developer Experience
Developer portal, API documentation (OpenAPI/Swagger), SDK generation, sandbox environments, self-service API access
15%
Analytics & Observability
Real-time traffic analytics, API usage dashboards, error tracking, latency monitoring, consumer analytics
15%
Lifecycle Management
API design (spec-first), versioning, deprecation workflows, CI/CD integration, governance policies, API catalog
Service Mesh
25%
Security & Zero-Trust Identity
Automatic mTLS for all service-to-service traffic, workload identity (SPIFFE/SVID) and certificate issuance/rotation, L4 and L7 authorization policy, integration with an external CA or your PKI, and FIPS-validated cryptography if you are regulated
25%
Day-Two Operations & Lifecycle
Upgrade mechanics and whether they force app-pod restarts, control-plane and certificate-authority operability, blast radius of a control-plane failure, debuggability of the data plane, multi-cluster lifecycle, and the realistic platform-team headcount to own it
20%
Data-Plane Architecture & Performance
Sidecar vs. eBPF vs. ambient model, per-pod or per-node resource overhead, added per-hop latency, behavior with ‘server-speaks-first’ and non-HTTP protocols, and whether L7 features can be adopted incrementally rather than all-or-nothing
15%
Traffic Management & Resilience
Request routing and canary/blue-green shifting, retries, timeouts, circuit breaking and outlier detection, fault injection for testing, multi-cluster and multi-zone failover, and east-west traffic policy beyond a single cluster
10%
Observability & Topology
Golden signals (latency, traffic, errors, saturation) per service with zero code change, distributed-trace context propagation, a live service-dependency map, and clean export to your existing Prometheus/Grafana/OpenTelemetry stack
5%
Ecosystem, Support & Governance
Project maturity and governance (CNCF status, breadth of maintainers, single-vendor vs. neutral control), OSS license vs. source-available terms, Kubernetes Gateway API / GAMMA support, and the quality of available commercial support and managed options

Other Service Mesh & API Gateway Vendors

View all

CIOPages put this listing together from public sources. It’s information, not an endorsement. How we build listings. Work here? Claim this listing or .

Quick Facts

dubbo.apache.org/en
CategoryCloud Infrastructure
SubcategoryService Mesh & API Gateway
DeploymentKubernetes, Virtual machines, Docker, Service mesh

We publish a detail only when we can point at the page it came from. Know when Dubbo was founded or where it is based? Send it to us, free.

Keep reading

Buyer Guide
Service Mesh
State of Play
Virtualization platforms

The annual review of this market: what changed, with answers from the vendors in it.

Checklist
API Strategy & Governance Checklist

Assess API program maturity across design, security, documentation, and lifecycle.