After object storage (21 Oct), this post covers sidecars: cross-cutting duties, lifecycle coupling, resource sums, blast radius, admin ports, version skew, fail open/closed and gateway contrast.

पार्श्वयानधर्मः: A Metrical Codification of the Sidecar Pattern (with English glosses)

What this post is about

A sidecar is a colocated helper container/process that implements shared platform concerns beside the app.

Topics covered

1. Cross-cutting without every language rewrite
2. Shared birth/death order
3. Resource accounting for both containers
4. Blast radius of proxy bugs
5. Typical duties (mTLS metrics)
6. Admin interface exposure
7. App/sidecar version skew
8. Fail open vs closed
9. Operate the sidecar itself
10. Gateway vs sidecar planes

Sanskrit title

पार्श्वयानधर्मः = pārśva-yāna-dharmaḥ “dharma of the side-vehicle / sidecar”.

English

Minimizable; Sanskrit-first.

ग्राह्यम् / Keep

१. defined start/stop: and volume shares
२. request sum: app+sidecar
३. canary proxy upgrades: mesh rollouts
४. localhost admin: not LAN open
५. compat matrix: app vs proxy versions
६. explicit fail mode: open vs closed
७. sidecar SLOs: cpu restarts cert age

त्याज्यम् / Avoid

• forget sidecar memory in capacity plans
• one bad proxy to 100 percent fleet with no canary
• expose envoy admin to the pod network

पदच्छेदः
अनुप्रयोगे यदि सर्वं धर्मं लिखेत् तदा भाषा बध्यते । पार्श्वयानधर्मस्तस्माद् बाह्यसेवकः ॥१॥

Word-for-word

Gloss table

English sense
A sidecar is a helper process colocated with the app that takes cross-cutting duties (proxy mTLS metrics) so many languages share one implementation.

Context / topic
Topic: why sidecars.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
lifecycle साथं जन्म मृत्युः । अनाथsidecar प्रेतः ॥२॥

Word-for-word

Gloss table

English sense
Start order stop order and shared volumes must be defined. A sidecar that outlives or pre-dies wrong breaks probes.

Context / topic
Topic: lifecycle coupling. Links to health probes.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
resource requests sidecar+app योगः । विस्मृतsidecar node thrash ॥३॥

Word-for-word

Gloss table

English sense
Schedule on the sum of app and sidecar resources. Ignoring sidecar CPU/memory strands nodes.

Context / topic
Topic: resources. Links to resource quanta.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
blast radius: sidecar bug सर्वान् हन्ति । canary mesh विवेकः ॥४॥

Word-for-word

Gloss table

English sense
A bad proxy version can fail every language at once. Roll mesh/sidecar updates as carefully as data planes.

Context / topic
Topic: blast radius. Links to canary/experiments.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
mTLS metrics logging प्रायः पार्श्वे । app code लघुः तिष्ठेत् ॥५॥

Word-for-word

Gloss table

English sense
Classic sidecar jobs: traffic policy, mTLS, telemetry export. Keep business logic in the app container.

Context / topic
Topic: duties split.

सन्धिः: परस्परप्रत्ययः + अवलोकनम्.

वृत्तमिति: एकादशाक्षराः पादाः।

पदच्छेदः
localhost only admin ports । sidecar admin विश्वे मा ॥६॥

Word-for-word

Gloss table

English sense
Bind sidecar admin/debug interfaces to localhost or mesh policy not to every pod IP on the LAN.

Context / topic
Topic: admin exposure.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
version skew app vs sidecar । matrix परीक्षणम् ॥७॥

Word-for-word

Gloss table

English sense
Publish which app versions work with which sidecar/proxy versions; CI should catch forbidden pairs.

Context / topic
Topic: compatibility.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
fail open vs fail closed proxy down । नीतिः स्पशा ॥८॥

Word-for-word

Gloss table

English sense
If the proxy dies should traffic freeze (fail closed) or bypass (fail open)? Security and availability disagree; pick explicitly.

Context / topic
Topic: failure policy.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
observability of sidecar itself । meta-metrics अवश्यानि ॥९॥

Word-for-word

Gloss table

English sense
Monitor sidecar CPU restarts config push lag and certificate age not only app golden signals.

Context / topic
Topic: operate the helper.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
द्वारपालः क्लस्टरद्वारे पार्श्वयानं पोड्द्वारे । mTLS उभयोः मित्रम् ॥१०॥

Word-for-word

Gloss table

English sense
Gateway is north-south edge policy; sidecar is east-west pod policy. mTLS often lives in the sidecar plane.

Context / topic
Topic: gateway vs sidecar.

सन्धिः: द्वारं बहिः; यानं पार्श्वे।

वृत्तमिति: एकादशाक्षराः पादाः।

पदच्छेदः
lifecycle resources blast admin skew पञ्चकम् । एभिः पार्श्वयानं बाह्यसेवकसमन्वितम् ॥११॥

Word-for-word

Gloss table

English sense
Five limbs: shared lifecycle, summed resources, careful rollout blast radius, locked admin ports and version skew control.

Context / topic
Topic: checklist.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
इति पार्श्वयानधर्मसारो बाह्यसेवकसमन्वितः । मितं पार्श्वं क्रियायोग्यं तन्त्रधर्मः स उच्यते ॥१२॥

Word-for-word

Gloss table

English sense
Closing: share cross-cuts in a helper but operate that helper like production software.

Context / topic
Topic: close.

उपसंहारन्यायः: धर्मं पार्श्वे देहि; यानं मा विस्मर; क्रमेण वह।

वृत्तमिति: ८-८-८-८।

१. Why sidecar
२. Lifecycle
३. Resources
४. Blast radius
५. Duties
६. Admin ports
७. Skew
८. Fail mode
९. Meta-ops
१०. Gateway link
११. Five limbs
१२. Close

1. Prior: mTLS 2026-10-14; gateway 2026-08-12; probes 2026-10-11; resources 2026-09-10.
2. Domain: sidecar/service mesh data plane ops.
3. English minimizable; Sanskrit-first.
4. Style: no em dash; no Oxford comma in English clauses.