In a sidecar mesh (classic Istio, Linkerd), the proxy
(typically Envoy or linkerd2-proxy) runs:
A) On each Kubernetes node, once per node (DaemonSet style only).
B) As an extra container inside EVERY application pod, sharing the
pod's network namespace, so all in/out traffic is transparently
routed through it.
C) As a single central VM in front of the whole cluster.
D) Inside the application binary itself.Sign in to save your code and track progress across devices.
