This is an automated email from the ASF dual-hosted git repository.
zhongxjian pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/dubbo-website.git
The following commit(s) were added to refs/heads/master by this push:
new 503d2e1dbc1 add dubbo service mesh docs (#3164)
503d2e1dbc1 is described below
commit 503d2e1dbc1722de50adb07f2e657faea0dbb2bd
Author: Southern Cross <[email protected]>
AuthorDate: Thu Dec 4 21:03:53 2025 +0800
add dubbo service mesh docs (#3164)
---
content/en/overview/mannual/_index.md | 2 +-
content/en/overview/mesh/_index.md | 52 ++++++++
content/en/overview/mesh/concepts/observability.md | 10 ++
content/en/overview/mesh/concepts/security.md | 135 +++++++++++++++++++++
.../overview/mesh/concepts/traffic-management.md | 129 ++++++++++++++++++++
content/en/overview/mesh/getting-started.md | 58 +++++++++
content/en/overview/mesh/setup/_index.md | 10 ++
content/en/overview/mesh/setup/install/_index.md | 10 ++
content/en/overview/mesh/setup/install/dubboctl.md | 56 +++++++++
content/en/overview/mesh/setup/install/helm.md | 57 +++++++++
.../overview/mesh/setup/install/platform/_index.md | 10 ++
content/en/overview/mesh/tasks/_index.md | 45 +++++++
content/en/overview/mesh/upgrade/_index.md | 10 ++
content/en/overview/what/_index.md | 2 +-
content/zh-cn/overview/mannual/_index.md | 2 +-
content/zh-cn/overview/mesh/_index.md | 54 +++++++++
content/zh-cn/overview/mesh/concepts/_index.md | 44 +++++++
.../zh-cn/overview/mesh/concepts/observability.md | 8 ++
content/zh-cn/overview/mesh/concepts/security.md | 134 ++++++++++++++++++++
.../overview/mesh/concepts/traffic-management.md | 128 +++++++++++++++++++
content/zh-cn/overview/mesh/getting-started.md | 52 ++++++++
content/zh-cn/overview/mesh/setup/_index.md | 11 ++
.../zh-cn/overview/mesh/setup/install/_index.md | 10 ++
.../zh-cn/overview/mesh/setup/install/dubboctl.md | 43 +++++++
content/zh-cn/overview/mesh/setup/install/helm.md | 50 ++++++++
.../overview/mesh/setup/install/platform/_index.md | 8 ++
content/zh-cn/overview/mesh/tasks/_index.md | 44 +++++++
content/zh-cn/overview/mesh/upgrade/_index.md | 9 ++
content/zh-cn/overview/notices/_index.md | 2 +-
content/zh-cn/overview/reference/_index.md | 2 +-
content/zh-cn/overview/what/_index.md | 2 +-
package.json | 2 +-
32 files changed, 1184 insertions(+), 7 deletions(-)
diff --git a/content/en/overview/mannual/_index.md
b/content/en/overview/mannual/_index.md
index d660f0504cd..e1f2f7c6b39 100755
--- a/content/en/overview/mannual/_index.md
+++ b/content/en/overview/mannual/_index.md
@@ -13,7 +13,7 @@ linkTitle: User Manual
no_list: true
title: Dubbo SDK User Manual
type: docs
-weight: 6
+weight: 2
---
> This document is based on Dubbo3. Since Dubbo3 is fully compatible with 2.7
> version usage, the general features in this document (except those specific
> to 3.x version) are also applicable to 2.7 version users.
diff --git a/content/en/overview/mesh/_index.md
b/content/en/overview/mesh/_index.md
new file mode 100644
index 00000000000..ad630f71865
--- /dev/null
+++ b/content/en/overview/mesh/_index.md
@@ -0,0 +1,52 @@
+---
+aliases:
+ - /en/overview/mannual/
+ - /en/docs3-v2/
+ - /en/docs3-v2/
+always_unfold: true
+description: Instructions on how to set up and run Dubbo in Proxyless mode
+linkTitle: Service Mesh
+no_list: true
+title: Dubbo Service Mesh
+type: docs
+weight: 3
+---
+
+> The service mesh is currently in an early experimental stage. Standard
features will be gradually completed and supported.
+
+Instructions on how to set up and run Dubbod in Proxyless mode.
+
+{{< blocks/section color="white" height="auto">}}
+<div class="td-content list-page">
+ <div class="lead"></div>
+ <header class="article-meta"></header>
+ <div class="row">
+ <div class="col-sm col-md-6 mb-4">
+ <div class="h-100">
+ <h4 class="card-title">
+ <a href='{{< relref "./getting-started" >}}'>Getting
started</a>
+ </h4>
+ <p>Quickly and easily try out Dubbod features.</p>
+ </div>
+ </div>
+ <div class="col-sm col-md-6 mb-4">
+ <div class="h-100">
+ <h4 class="card-title">
+ <a href='{{< relref "./setup/install" >}}'>Installation
guide</a>
+ </h4>
+ <p>Choose the installation guide that best fits your platform
and needs.</p>
+ </div>
+ </div>
+ <div class="col-sm col-md-6 mb-4">
+ <div class="h-100">
+ <h4 class="card-title">
+ <a href='{{< relref "./upgrade" >}}'>Upgrade Dubbod</a>
+ </h4>
+ <p>Upgrade, downgrade, and manage Dubbo across multiple
control planes.</p>
+ </div>
+ </div>
+ </div>
+ <hr>
+</div>
+{{< /blocks/section >}}
+
diff --git a/content/en/overview/mesh/concepts/observability.md
b/content/en/overview/mesh/concepts/observability.md
new file mode 100644
index 00000000000..85a7ff16339
--- /dev/null
+++ b/content/en/overview/mesh/concepts/observability.md
@@ -0,0 +1,10 @@
+---
+description: Describes Dubbo telemetry and monitoring capabilities.
+linkTitle: Observability
+title: Observability
+type: docs
+weight: 3
+---
+
+Coming soon.
+
diff --git a/content/en/overview/mesh/concepts/security.md
b/content/en/overview/mesh/concepts/security.md
new file mode 100644
index 00000000000..eb2e8b43a65
--- /dev/null
+++ b/content/en/overview/mesh/concepts/security.md
@@ -0,0 +1,135 @@
+---
+description: Describes Dubbo authentication capabilities.
+linkTitle: Security
+title: Security
+type: docs
+weight: 2
+---
+
+Dubbo Service Mesh security provides strong identities, powerful policies,
transparent TLS encryption, and authentication tooling to protect your services
and data. It follows the same security model as Istio, but is optimized for the
Dubbo protocol and sidecarless architecture.
+
+## High-level architecture
+
+The security architecture of Dubbo Service Mesh has two core components:
+
+- **Identity**: every workload has an identity that represents who it is.
+- **Authentication**: authentication policies define how services authenticate
each other.
+
+These components work together to provide security for your service mesh.
+
+## Dubbo identities
+
+In Dubbo Service Mesh, every workload has an identity that represents its
origin. Identities are based on the SPIFFE standard and use SPIFFE URIs of the
form: `spiffe://<trust-domain>/ns/<namespace>/sa/<service-account>`.
+
+### Identity format
+
+A Dubbo identity consists of:
+
+- **Trust Domain**: defines the mesh or organizational boundary, defaulting to
`cluster.local`.
+- **Namespace**: the Kubernetes namespace.
+- **Service Account**: the Kubernetes ServiceAccount.
+
+For example, a workload running with ServiceAccount `bookinfo-productpage` in
the `default` namespace has the identity:
+`spiffe://cluster.local/ns/default/sa/bookinfo-productpage`
+
+### Trust domain aliases
+
+Dubbo Service Mesh supports trust domain aliases, allowing a mesh to trust
workloads from multiple trust domains. This is useful in multi-cluster or
multi-tenant scenarios. Using `TrustDomainAliases` in MeshConfig, the control
plane expands identities across trust domains automatically.
+
+## Identity and certificate management
+
+Dubbo Service Mesh uses the SPIFFE standard to manage workload identities and
certificates. Each workload automatically obtains a SPIFFE identity and can
request an X.509 certificate for mutual TLS authentication.
+
+### Certificate issuance
+
+The Dubbo control plane includes a certificate authority (CA) that issues
certificates for workloads. Workloads communicate with the control plane
through the Dubbo Agent to request certificates and rotate them periodically.
+
+### Certificate storage
+
+Workload certificates are stored in the following locations inside the
container:
+
+- Certificate chain: `./etc/certs/cert-chain.pem` or
`./var/run/secrets/workload-spiffe-uds/credentials/cert-chain.pem`
+- Private key: `./etc/certs/key.pem` or
`./var/run/secrets/workload-spiffe-uds/credentials/key.pem`
+- Root certificate: `./etc/certs/root-cert.pem` or
`./var/run/secrets/workload-spiffe-uds/credentials/root-cert.pem`
+
+Certificates can be delivered to workloads via SDS (Secret Discovery Service)
or mounted files.
+
+## Authentication
+
+Dubbo Service Mesh supports peer authentication (PeerAuthentication) for
service-to-service authentication.
+
+### Mutual TLS authentication
+
+Mutual TLS is the primary mechanism for service-to-service authentication in
Dubbo Service Mesh. It provides:
+
+- **Strong service-to-service authentication**: built-in identity and
credential management.
+- **Secure by default**: service-to-service traffic is encrypted by default.
+- **Automatic key management**: automatic key and certificate rotation.
+- **Transparent encryption**: no changes required to application code.
+
+#### Permissive mode
+
+In permissive mode, a service accepts both plaintext and mTLS traffic. This is
useful for gradually migrating to mTLS while still supporting legacy workloads.
+
+#### Secure naming
+
+Secure naming ensures that only workloads with the correct ServiceAccount can
access a given service. Dubbo uses SPIFFE identities to validate service
identities and guarantee that only authorized services can communicate with
each other.
+
+### Authentication architecture
+
+The authentication architecture in Dubbo Service Mesh consists of:
+
+- **Control plane**: `dubbod` manages authentication policies and certificates.
+- **Data plane**: Dubbo Agent enforces authentication policies and handles TLS
handshakes.
+- **Policy storage**: authentication policies are stored as Kubernetes CRDs.
+
+### Authentication policies
+
+Authentication policies specify authentication requirements at mesh,
namespace, or workload scope. Dubbo supports the PeerAuthentication policy to
define service-to-service authentication requirements.
+
+#### Policy storage
+
+Authentication policies are stored as Kubernetes CRDs in the API server. The
Dubbo control plane watches these resources and pushes policy changes to the
data plane.
+
+#### Selector field
+
+PeerAuthentication policies can use the `selector` field to target specific
workloads. If no selector is specified, the policy applies to the entire
namespace or mesh.
+
+#### Peer authentication
+
+PeerAuthentication policies configure service-to-service authentication. They
support the following mTLS modes:
+
+- **STRICT**: only mTLS traffic is accepted.
+- **PERMISSIVE**: both plaintext and mTLS traffic are accepted.
+- **DISABLE**: mTLS is disabled.
+
+The following example configures a PeerAuthentication policy that enforces
STRICT mTLS for all services in the `default` namespace:
+
+```yaml
+apiVersion: security.dubbo.apache.org/v1
+kind: PeerAuthentication
+metadata:
+ name: default
+ namespace: default
+spec:
+ mtls:
+ mode: STRICT
+```
+
+### Updating authentication policies
+
+When you update authentication policies, the Dubbo control plane automatically
pushes the new policies to the data plane. Policy changes take effect
immediately without restarting workloads.
+
+## Learn more
+
+After understanding the basic concepts above, you can:
+
+* Try authentication tasks using security policies.
+* Learn about example security policies that can further harden your mesh.
+* Read the FAQ to troubleshoot issues related to security policies.
+
+## Related content
+
+- [Traffic management](/en/overview/mesh/concepts/traffic-management/)
+- [Observability](/en/overview/mesh/concepts/observability/)
+
diff --git a/content/en/overview/mesh/concepts/traffic-management.md
b/content/en/overview/mesh/concepts/traffic-management.md
new file mode 100644
index 00000000000..45f0a339b2f
--- /dev/null
+++ b/content/en/overview/mesh/concepts/traffic-management.md
@@ -0,0 +1,129 @@
+---
+description: Describes Dubbo traffic routing and control capabilities.
+linkTitle: Traffic Management
+title: Traffic Management
+type: docs
+weight: 1
+---
+
+In Dubbo Service Mesh, traffic management is implemented through the
collaboration of the Dubbo control plane and the Dubbo Agent. The control plane
generates gRPC xDS configuration based on Kubernetes CRDs and pushes it to
Dubbo Agent via the xDS protocol, enabling fine-grained control over
inter-service traffic.
+
+## Traffic management overview
+
+The traffic management model of Dubbo Service Mesh is aligned with Istio, but
optimized for the Dubbo protocol and sidecarless architecture. The core
components are:
+
+- **ServiceRoute**: defines routing rules and controls how requests are routed
to service instances.
+- **SubsetRule**: defines service subsets and traffic policies, such as load
balancing, connection pools, TLS settings, etc.
+- **MeshConfig**: mesh-wide configuration, including default traffic policies,
trust domain, and more.
+
+By configuring these resources, you can achieve traffic routing, load
balancing, and resilience without modifying application code.
+
+## ServiceRoute
+
+ServiceRoute is the core resource used to define routing rules in Dubbo
Service Mesh, corresponding to Istio's VirtualService. It allows you to
configure how requests are routed to different versions or instances of a
service.
+
+ServiceRoute enables you to:
+- Route traffic to different versions of a service (for example, v1 and v2).
+- Route based on request attributes such as headers and paths.
+- Configure weighted routing for canary and gradual rollouts.
+- (Planned) Configure timeouts and retries for resilience.
+
+### ServiceRoute example
+
+The following example shows how to configure a ServiceRoute to split traffic:
+
+```yaml
+apiVersion: networking.dubbo.apache.org/v1
+kind: ServiceRoute
+metadata:
+ name: provider-weights
+ namespace: grpc-app
+spec:
+ hosts:
+ - provider.grpc-app.svc.cluster.local
+ http:
+ - route:
+ - destination:
+ host: provider.grpc-app.svc.cluster.local
+ subset: v1
+ weight: 10
+ - destination:
+ host: provider.grpc-app.svc.cluster.local
+ subset: v2
+ weight: 90
+```
+
+#### hosts field
+
+The `hosts` field specifies the services that the ServiceRoute applies to. You
can use either fully qualified domain names (FQDN) or short names. The control
plane automatically resolves short names to FQDNs.
+
+#### Routing rules
+
+Routing rules define how requests are routed to target services. Each rule can
contain:
+
+- **Match conditions**: based on request attributes such as path or headers.
+- **Destination**: target service host, subset, and port.
+- **Weight**: the proportion of traffic sent to each destination.
+
+#### Routing rule priority
+
+When multiple ServiceRoutes match the same service, the control plane applies
them in creation-time order. More specific match conditions take precedence
over generic ones.
+
+### More about routing rules
+
+ServiceRoute supports more complex routing scenarios, including:
+
+- **Path-based routing**: route traffic to different service versions based on
URL path.
+- **Header-based routing**: make routing decisions based on HTTP headers.
+- **Delegated routing**: compose and reuse routing rules via the `delegate`
field.
+
+## SubsetRule
+
+SubsetRule is the resource used to define service subsets and traffic policies
in Dubbo Service Mesh, corresponding to Istio's DestinationRule. It allows you
to organize service instances into logical subsets and configure traffic
policies for each subset.
+
+### Load balancing options
+
+SubsetRule supports multiple load balancing strategies, configured via
`LocalityLbSetting` in MeshConfig:
+
+- **Locality-based load balancing**: prefer instances in the same region or
zone.
+- **ROUND_ROBIN**: distribute requests sequentially across instances.
+- **LEAST_CONN**: route requests to instances with the fewest active
connections.
+
+### SubsetRule example
+
+The following example shows how to create subsets and configure traffic
policies:
+
+```yaml
+apiVersion: networking.dubbo.apache.org/v1
+kind: SubsetRule
+metadata:
+ name: provider-versions
+ namespace: grpc-app
+spec:
+ host: provider.grpc-app.svc.cluster.local
+ subsets:
+ - name: v1
+ labels:
+ version: v1
+ - name: v2
+ labels:
+ version: v2
+ trafficPolicy:
+ loadBalancer:
+ simple: ROUND_ROBIN
+ tls:
+ mode: ISTIO_MUTUAL
+```
+
+Subsets are selected based on Pod labels. In the example above, Pods with
label `version: v1` are placed into subset `v1`, and Pods with `version: v2`
into subset `v2`.
+
+## Other notes
+
+Because Dubbo Service Mesh uses a sidecarless architecture, the traditional
Sidecar resource is replaced by the Dubbo Agent. The Dubbo Agent is embedded
into the application process and communicates with the control plane via the
xDS protocol.
+
+## Related content
+
+- [Dubbo Service Mesh Quickstart](/en/overview/quickstart/)
+- [Security concepts](/en/overview/mesh/concepts/security/)
+- [Observability](/en/overview/mesh/concepts/observability/)
+
diff --git a/content/en/overview/mesh/getting-started.md
b/content/en/overview/mesh/getting-started.md
new file mode 100644
index 00000000000..01a807dc8ee
--- /dev/null
+++ b/content/en/overview/mesh/getting-started.md
@@ -0,0 +1,58 @@
+---
+description: Quickly try Dubbo features
+linkTitle: Getting started
+title: Quickstart
+type: docs
+weight: 1
+---
+
+Special thanks to [Megan Yahya's KubeCon EU 2021
talk](https://www.youtube.com/watch?v=cGJXkZ7jiDk) for inspiration and related
support.
+
+Dubbo Service Mesh is a proxyless mesh model developed in 2025. In this model,
processes communicate directly and interact with the control plane via the xDS
protocol.
+
+This mode introduces no extra proxy forwarding overhead, making it suitable
for latency-sensitive applications and for any deployment environment.
+
+## Download Dubbo
+
+1. Go to the Dubbo release page and download the installer for your OS, or
automatically download the latest version (Linux or macOS):
+
+```bash
+curl -L https://dubbo.apache.org/downloadDubbo | sh -
+```
+
+2. Change to the Dubbo package directory:
+
+```bash
+cd dubbo-x.xx.x
+```
+
+## Install Dubbo
+
+1. Install Dubbo with the default profile:
+
+```bash
+dubboctl install -y
+```
+
+2. Label the namespace to tell Dubbo to automatically inject the Dubbo Agent
when deploying applications:
+
+```bash
+kubectl label namespace default dubbo-injection=enabled
+```
+
+{{< blocks/section color="white" height="auto">}}
+<div class="td-content list-page">
+ <div class="lead"></div>
+ <header class="article-meta"></header>
+ <div class="row justify-content-center">
+ <div class="col-sm col-md-5 mb-4">
+ <div class="h-100 text-center">
+ <a class="btn btn-lg btn-primary mb-3" href='{{< relref
"./setup/install" >}}' style="min-width: 200px; color: white;">
+ Get started with Proxyless mode
+ </a>
+ </div>
+ </div>
+ </div>
+</div>
+{{< /blocks/section >}}
+
diff --git a/content/en/overview/mesh/setup/_index.md
b/content/en/overview/mesh/setup/_index.md
new file mode 100644
index 00000000000..1acf1d29d30
--- /dev/null
+++ b/content/en/overview/mesh/setup/_index.md
@@ -0,0 +1,10 @@
+---
+description: Proxyless mode
+linkTitle: Proxyless mode
+title: Proxyless mode
+type: docs
+weight: 3
+---
+
+Choose the installation guide that best fits your platform and needs.
+
diff --git a/content/en/overview/mesh/setup/install/_index.md
b/content/en/overview/mesh/setup/install/_index.md
new file mode 100644
index 00000000000..a0ac872f18c
--- /dev/null
+++ b/content/en/overview/mesh/setup/install/_index.md
@@ -0,0 +1,10 @@
+---
+description: Choose the installation method that best fits your platform and
needs
+linkTitle: Install
+title: Install
+type: docs
+weight: 1
+---
+
+Choose the installation method that best fits your platform and needs.
+
diff --git a/content/en/overview/mesh/setup/install/dubboctl.md
b/content/en/overview/mesh/setup/install/dubboctl.md
new file mode 100644
index 00000000000..4d480856d73
--- /dev/null
+++ b/content/en/overview/mesh/setup/install/dubboctl.md
@@ -0,0 +1,56 @@
+---
+description: Install using Dubboctl
+linkTitle: Dubboctl
+title: dubboctl
+type: docs
+weight: 1
+---
+
+This installation guide uses the `dubboctl` command-line tool, which provides
rich customization for the Dubbo control plane and data plane adapters. You can
choose any built-in Dubbo profile and further customize it for your specific
needs.
+
+The `dubboctl` command exposes the full DubboOperator API via command-line
flags. These flags can be set individually or passed via YAML files that
contain DubboOperator custom resources (CRs).
+
+## Prerequisites
+
+Before you begin, check the following prerequisites:
+
+1. [Download the Dubbod release](../../getting-started.md)
+
+## Install Dubbo using a profile
+
+```bash
+dubboctl install -y
+```
+
+This command installs the default profile into your Kubernetes cluster.
+
+You can choose any built-in Dubbo profile:
+
+```bash
+dubboctl install --set profile=demo
+```
+
+You can pass the profile name from the command line to install it into the
cluster.
+
+## Generate manifests before installation
+
+```bash
+dubboctl manifest generate > $HOME/generated-manifest.yaml
+```
+
+## Uninstall
+
+To completely uninstall Dubbo from the cluster, run:
+
+```bash
+istioctl uninstall --remove -y
+```
+
+This removes all Dubbo resources. Future versions will support specifying a
manifest file.
+
+The `dubbo-system` namespace is not removed by default. If you no longer need
it, remove it with:
+
+```bash
+kubectl delete namespace dubbo-system
+```
+
diff --git a/content/en/overview/mesh/setup/install/helm.md
b/content/en/overview/mesh/setup/install/helm.md
new file mode 100644
index 00000000000..0c3d61378ce
--- /dev/null
+++ b/content/en/overview/mesh/setup/install/helm.md
@@ -0,0 +1,57 @@
+---
+description: Install using Helm
+linkTitle: Helm
+title: Helm
+type: docs
+weight: 2
+---
+
+Follow this guide to install and configure the Dubbo mesh using Helm.
+
+## Prerequisites
+
+```bash
+helm repo add dubbo https://charts.dubbo.apache.org
+helm repo update
+```
+
+## Installation steps
+
+1. Install the Dubbo Base chart, which contains cluster-wide custom resource
definitions (CRDs). These must be installed before deploying the Dubbo control
plane:
+
+```bash
+helm install dubbo-base dubbo/base -n dubbo-system --create-namespace
+```
+
+2. Install the Dubbo Discovery chart, which deploys Dubbo control plane
services:
+
+```bash
+helm install dubbod dubbo/dubbod -n dubbo-system --wait
+```
+
+## Uninstall
+
+1. List all Dubbo charts installed in the `dubbo-system` namespace:
+
+```bash
+helm ls -n dubbo-system
+```
+
+2. Delete the Dubbo Base chart:
+
+```bash
+helm delete dubbo-base -n dubbo-system
+```
+
+3. Delete the Dubbo Discovery chart:
+
+```bash
+helm delete dubbod -n dubbo-system
+```
+
+4. Delete the `dubbo-system` namespace:
+
+```bash
+kubectl delete namespace dubbo-system
+```
+
diff --git a/content/en/overview/mesh/setup/install/platform/_index.md
b/content/en/overview/mesh/setup/install/platform/_index.md
new file mode 100644
index 00000000000..56add034953
--- /dev/null
+++ b/content/en/overview/mesh/setup/install/platform/_index.md
@@ -0,0 +1,10 @@
+---
+description: Platform-specific prerequisites before installing Dubbo on
different Kubernetes platforms
+linkTitle: Platform setup
+title: Platform setup
+type: docs
+weight: 3
+---
+
+Coming soon.
+
diff --git a/content/en/overview/mesh/tasks/_index.md
b/content/en/overview/mesh/tasks/_index.md
new file mode 100644
index 00000000000..bedfcb5999c
--- /dev/null
+++ b/content/en/overview/mesh/tasks/_index.md
@@ -0,0 +1,45 @@
+---
+description: Tasks
+linkTitle: Tasks
+title: Tasks
+type: docs
+weight: 3
+no_list: true
+---
+
+Learn how to use various Dubbo features through hands-on tasks.
+
+{{< blocks/section color="white" height="auto">}}
+<div class="td-content list-page">
+ <div class="lead"></div>
+ <header class="article-meta"></header>
+ <div class="row">
+ <div class="col-sm col-md-6 mb-4">
+ <div class="h-100">
+ <h4 class="card-title">
+ <a href='{{< relref
"../../mannual/java-sdk/tasks/traffic-management" >}}'>Traffic management</a>
+ </h4>
+ <p>Learn how to configure and use traffic management
features.</p>
+ </div>
+ </div>
+ <div class="col-sm col-md-6 mb-4">
+ <div class="h-100">
+ <h4 class="card-title">
+ <a href='{{< relref
"../../mannual/java-sdk/tasks/security" >}}'>Security</a>
+ </h4>
+ <p>Learn how to configure and use security features.</p>
+ </div>
+ </div>
+ <div class="col-sm col-md-6 mb-4">
+ <div class="h-100">
+ <h4 class="card-title">
+ <a href='{{< relref
"../../mannual/java-sdk/tasks/observability" >}}'>Observability</a>
+ </h4>
+ <p>Learn how to configure and use observability features.</p>
+ </div>
+ </div>
+ </div>
+ <hr>
+</div>
+{{< /blocks/section >}}
+
diff --git a/content/en/overview/mesh/upgrade/_index.md
b/content/en/overview/mesh/upgrade/_index.md
new file mode 100644
index 00000000000..878bb8212f2
--- /dev/null
+++ b/content/en/overview/mesh/upgrade/_index.md
@@ -0,0 +1,10 @@
+---
+description: Upgrade, downgrade, and manage Dubbo across multiple control
planes
+linkTitle: Upgrade
+title: Upgrade
+type: docs
+weight: 4
+---
+
+Coming soon.
+
diff --git a/content/en/overview/what/_index.md
b/content/en/overview/what/_index.md
index 442d80ec233..e61d7a630e2 100644
--- a/content/en/overview/what/_index.md
+++ b/content/en/overview/what/_index.md
@@ -7,7 +7,7 @@ linkTitle: Introduction
no_list: true
title: Introduction to Dubbo
type: docs
-weight: 2
+weight: 1
---
diff --git a/content/zh-cn/overview/mannual/_index.md
b/content/zh-cn/overview/mannual/_index.md
index a1688cf1e5f..39745fa1e49 100755
--- a/content/zh-cn/overview/mannual/_index.md
+++ b/content/zh-cn/overview/mannual/_index.md
@@ -13,7 +13,7 @@ linkTitle: 用户手册
no_list: true
title: Dubbo SDK 用户手册
type: docs
-weight: 6
+weight: 2
---
> 本文档基于 Dubbo3 编写，由于 Dubbo3 完全兼容 2.7 版本用法，因此文档中的通用功能（除 3.x 版本特有功能外）同样适用于 2.7
> 版本用户。
diff --git a/content/zh-cn/overview/mesh/_index.md
b/content/zh-cn/overview/mesh/_index.md
new file mode 100755
index 00000000000..92917410e66
--- /dev/null
+++ b/content/zh-cn/overview/mesh/_index.md
@@ -0,0 +1,54 @@
+---
+aliases:
+ - /zh/overview/mannual/
+ - /zh/docs3-v2/
+ - /zh-cn/docs3-v2/
+always_unfold: true
+description: 关于如何在 Proxyless 模式下设置和运行 Dubbo 的说明
+linkTitle: 服务网格
+no_list: true
+title: Dubbo 服务网格
+type: docs
+weight: 3
+---
+
+> 目前服务网格处于初步实验阶段。后续标准功能将逐步完善和支持。
+
+关于如何在 Proxyless 模式下设置和运行 Dubbod 的说明。
+
+{{< blocks/section color="white" height="auto">}}
+<div class="td-content list-page">
+ <div class="lead"></div>
+ <header class="article-meta"></header>
+ <div class="row">
+ <div class="col-sm col-md-6 mb-4">
+ <div class="h-100">
+ <h4 class="card-title">
+ <a href='{{< relref "./getting-started" >}}'>入门</a>
+ </h4>
+ <p>快速、轻松地尝试 Dubbod 特性。</p>
+ </div>
+ </div>
+ <div class="col-sm col-md-6 mb-4">
+ <div class="h-100">
+ <h4 class="card-title">
+ <a href='{{< relref "./setup/install" >}}'>安装指南</a>
+ </h4>
+ <p>选择最适合您需求和平台的安装指南。</p>
+ </div>
+ </div>
+ <div class="col-sm col-md-6 mb-4">
+ <div class="h-100">
+ <h4 class="card-title">
+ <a href='{{< relref "./upgrade" >}}'>升级 Dubbod</a>
+ </h4>
+ <p>跨多个控制平面升级、降级和管理 Dubbo。</p>
+ </div>
+ </div>
+ </div>
+ <hr>
+</div>
+{{< /blocks/section >}}
+
+
+
diff --git a/content/zh-cn/overview/mesh/concepts/_index.md
b/content/zh-cn/overview/mesh/concepts/_index.md
new file mode 100644
index 00000000000..a8f4c2a37ac
--- /dev/null
+++ b/content/zh-cn/overview/mesh/concepts/_index.md
@@ -0,0 +1,44 @@
+---
+description: 核心功能
+linkTitle: 核心功能
+title: 核心功能
+type: docs
+weight: 2
+no_list: true
+---
+深入了解 Dubbo 服务网格的核心能力，帮助您系统性地理解其各组件结构及背后的抽象机制。
+
+{{< blocks/section color="white" height="auto">}}
+<div class="td-content list-page">
+ <div class="lead"></div>
+ <header class="article-meta"></header>
+ <div class="row">
+ <div class="col-sm col-md-6 mb-4">
+ <div class="h-100">
+ <h4 class="card-title">
+ <a href='{{< relref "traffic-management" >}}'>流量管理</a>
+ </h4>
+ <p>描述 Dubbo 的流量路由与控制功能。</p>
+ </div>
+ </div>
+ <div class="col-sm col-md-6 mb-4">
+ <div class="h-100">
+ <h4 class="card-title">
+ <a href='{{< relref "security" >}}'>安全</a>
+ </h4>
+ <p>描述 Dubbo 的身份认证和授权机制。</p>
+ </div>
+ </div>
+ <div class="col-sm col-md-6 mb-4">
+ <div class="h-100">
+ <h4 class="card-title">
+ <a href='{{< relref "observability" >}}'>可观测性</a>
+ </h4>
+ <p>描述 Dubbo 的遥测和监控功能。</p>
+ </div>
+ </div>
+ </div>
+ <hr>
+</div>
+{{< /blocks/section >}}
+
diff --git a/content/zh-cn/overview/mesh/concepts/observability.md
b/content/zh-cn/overview/mesh/concepts/observability.md
new file mode 100644
index 00000000000..d91d7bfa27b
--- /dev/null
+++ b/content/zh-cn/overview/mesh/concepts/observability.md
@@ -0,0 +1,8 @@
+---
+description: 描述 Dubbo 的遥测和监控功能。
+linkTitle: 可观测性
+title: 可观测性
+type: docs
+weight: 3
+---
+敬请期待
\ No newline at end of file
diff --git a/content/zh-cn/overview/mesh/concepts/security.md
b/content/zh-cn/overview/mesh/concepts/security.md
new file mode 100644
index 00000000000..f41347e318e
--- /dev/null
+++ b/content/zh-cn/overview/mesh/concepts/security.md
@@ -0,0 +1,134 @@
+---
+description: 描述 Dubbo 的认证功能。
+linkTitle: 安全
+title: 安全
+type: docs
+weight: 2
+---
+
+Dubbo 服务网格的安全功能提供了强大的身份、强大的策略、透明的 TLS 加密以及认证工具，以保护您的服务和数据。Dubbo 的安全功能使用与 Istio
相同的安全模型，但针对 Dubbo 协议和无 Sidecar 架构进行了优化。
+
+## 高层架构
+
+Dubbo 服务网格的安全架构包括两个核心组件：
+
+- **身份**：每个工作负载都有一个身份，用于标识其来源
+- **认证**：认证策略定义了服务之间如何相互认证
+
+这些组件协同工作，为您的服务网格提供安全防护。
+
+## Dubbo 身份
+
+在 Dubbo 服务网格中，每个工作负载都有一个身份，用于标识其来源。身份基于 SPIFFE 标准，使用 SPIFFE URI
格式：`spiffe://<trust-domain>/ns/<namespace>/sa/<service-account>`。
+
+### 身份格式
+
+Dubbo 身份由以下部分组成：
+
+- **信任域（Trust Domain）**：标识网格或组织边界，默认值为 `cluster.local`
+- **命名空间（Namespace）**：Kubernetes 命名空间
+- **服务账户（Service Account）**：Kubernetes ServiceAccount
+
+例如，在 `default` 命名空间中运行的服务账户 `bookinfo-productpage` 的身份为：
+`spiffe://cluster.local/ns/default/sa/bookinfo-productpage`
+
+### 信任域别名
+
+Dubbo 服务网格支持信任域别名（Trust Domain
Aliases），允许一个网格信任来自多个信任域的工作负载。这在跨集群或多租户场景中非常有用。通过 MeshConfig 中的
`TrustDomainAliases` 配置，可以为给定身份自动补全多信任域变体。
+
+## 身份和证书管理
+
+Dubbo 服务网格使用 SPIFFE 标准来管理工作负载身份和证书。每个工作负载都会自动获得一个 SPIFFE 身份，并可以获取相应的 X.509
证书用于双向 TLS 认证。
+
+### 证书颁发
+
+Dubbo 控制平面包含一个证书颁发机构（CA），用于为工作负载颁发证书。工作负载通过 Dubbo Agent 与控制平面通信，请求证书并定期轮转。
+
+### 证书存储
+
+工作负载证书存储在以下位置：
+
+- 证书链：`./etc/certs/cert-chain.pem` 或
`./var/run/secrets/workload-spiffe-uds/credentials/cert-chain.pem`
+- 私钥：`./etc/certs/key.pem` 或
`./var/run/secrets/workload-spiffe-uds/credentials/key.pem`
+- 根证书：`./etc/certs/root-cert.pem` 或
`./var/run/secrets/workload-spiffe-uds/credentials/root-cert.pem`
+
+证书可以通过 SDS（Secret Discovery Service）或文件挂载方式下发到工作负载。
+
+## 认证
+
+Dubbo 服务网格支持对等认证（Peer Authentication），用于服务到服务的认证。
+
+### 双向 TLS 认证
+
+双向 TLS 是 Dubbo 服务网格中服务到服务通信的主要认证机制。它提供了：
+
+- **强大的服务到服务认证**：内置身份和凭证管理
+- **默认安全**：工作负载之间的通信默认加密
+- **自动密钥管理**：自动密钥和证书轮转
+- **服务到服务通信加密**：无需更改应用程序代码
+
+#### 宽容模式
+
+在宽容模式（PERMISSIVE）下，服务可以同时接受明文和 mTLS 流量。这对于逐步迁移到 mTLS
非常有用，允许服务在迁移过程中同时支持两种类型的流量。
+
+#### 安全命名
+
+安全命名确保只有具有适当服务账户的工作负载才能访问服务。Dubbo 使用 SPIFFE 身份来验证服务身份，确保只有授权的服务可以相互通信。
+
+### 认证架构
+
+Dubbo 服务网格的认证架构包括：
+
+- **控制平面**：`dubbod` 负责管理认证策略和证书
+- **数据平面**：Dubbo Agent 负责执行认证策略和 TLS 握手
+- **策略存储**：认证策略存储在 Kubernetes API 服务器中
+
+### 认证策略
+
+认证策略用于指定网格、命名空间或工作负载级别的认证要求。Dubbo 支持 PeerAuthentication 策略，用于定义服务到服务的认证要求。
+
+#### 策略存储
+
+认证策略作为 Kubernetes CRD 存储在 Kubernetes API 服务器中。Dubbo 控制平面监听这些资源的变化，并将策略下发给数据平面。
+
+#### Selector 字段
+
+PeerAuthentication 策略可以使用 `selector` 字段来指定策略应用的工作负载。如果没有指定
selector，策略将应用于命名空间或网格级别的所有工作负载。
+
+#### 对等认证
+
+PeerAuthentication 策略用于配置服务到服务的认证。它支持以下 mTLS 模式：
+
+- **STRICT**：只接受 mTLS 流量
+- **PERMISSIVE**：接受明文和 mTLS 流量
+- **DISABLE**：禁用 mTLS
+
+以下示例配置了一个 PeerAuthentication 策略，要求 `default` 命名空间中的所有服务使用 STRICT mTLS：
+
+```yaml
+apiVersion: security.dubbo.apache.org/v1
+kind: PeerAuthentication
+metadata:
+ name: default
+ namespace: default
+spec:
+ mtls:
+ mode: STRICT
+```
+
+### 更新认证策略
+
+当您更新认证策略时，Dubbo 控制平面会自动将新策略下发给数据平面。策略更改会立即生效，无需重启工作负载。
+
+## 学习更多
+
+在学习了上述基本概念之后，您还可以温习下述资料：
+
+* 按照认证任务尝试使用安全策略。
+* 了解一些可用于提高网格安全性的安全策略示例。
+* 阅读常见问题，以便在出现问题时更好地解决安全策略问题。
+
+## 相关内容
+
+- [流量管理](/zh-cn/overview/mesh/concepts/traffic-management/)
+- [可观测性](/zh-cn/overview/mesh/concepts/observability/)
diff --git a/content/zh-cn/overview/mesh/concepts/traffic-management.md
b/content/zh-cn/overview/mesh/concepts/traffic-management.md
new file mode 100644
index 00000000000..c1a522d34fc
--- /dev/null
+++ b/content/zh-cn/overview/mesh/concepts/traffic-management.md
@@ -0,0 +1,128 @@
+---
+description: 描述 Dubbo 的流量路由与控制功能。
+linkTitle: 流量管理
+title: 流量管理
+type: docs
+weight: 1
+---
+在 Dubbo 服务网格中是通过 Dubbo 控制平面和 Dubbo Agent 协同工作来实现。控制平面基于 Kubernetes CRD 配置生成
gRPC xDS 配置，并通过 xDS 协议下发给 Dubbo Agent，从而实现对服务间流量的细粒度控制。
+
+## 流量管理介绍
+
+Dubbo 服务网格的流量管理模型与 Istio 保持一致，但针对 Dubbo 协议和无 Sidecar 架构进行了优化。核心组件包括：
+
+- **ServiceRoute**：定义路由规则，控制请求如何路由到服务实例
+- **SubsetRule**：定义服务子集和流量策略，如负载均衡、连接池、TLS 设置等
+- **MeshConfig**：网格级别的配置，包括默认流量策略、信任域等
+
+通过配置这些资源，您可以实现流量路由、负载均衡、故障恢复等功能，而无需修改应用程序代码。
+
+## 服务路由
+
+ServiceRoute 是 Dubbo 服务网格中用于定义路由规则的核心资源，对应 Istio 的
VirtualService。它允许您配置如何将请求路由到服务的不同版本或实例。
+
+服务路由让您能够：
+- 将流量路由到服务的不同版本（如 v1、v2）
+- 基于请求属性（如头信息、路径）进行路由
+- 配置权重路由，实现流量分割和灰度发布
+- 配置超时、重试等故障恢复策略
+
+### 服务路由示例
+
+以下示例展示了如何配置 ServiceRoute 来实现流量分割：
+
+```yaml
+apiVersion: networking.dubbo.apache.org/v1
+kind: ServiceRoute
+metadata:
+ name: provider-weights
+ namespace: grpc-app
+spec:
+ hosts:
+ - provider.grpc-app.svc.cluster.local
+ http:
+ - route:
+ - destination:
+ host: provider.grpc-app.svc.cluster.local
+ subset: v1
+ weight: 10
+ - destination:
+ host: provider.grpc-app.svc.cluster.local
+ subset: v2
+ weight: 90
+```
+
+#### hosts 字段
+
+`hosts` 字段指定了 ServiceRoute 应用到的服务。可以使用完全限定域名（FQDN）或短名称。控制平面会自动将短名称解析为 FQDN。
+
+#### 路由规则
+
+路由规则定义了如何将请求路由到目标服务。每个路由规则可以包含：
+
+- **匹配条件**：基于请求属性（如路径、头信息）进行匹配
+- **Destination**：目标服务的主机名、子集和端口
+- **权重**：流量分配的权重比例
+
+#### 路由规则优先级
+
+当多个 ServiceRoute 匹配同一个服务时，控制平面会按照配置的创建时间顺序应用规则。更具体的匹配条件会优先于通用规则。
+
+### 路由规则的更多内容
+
+ServiceRoute 支持更复杂的路由场景，包括：
+
+- **基于路径的路由**：根据请求路径将流量路由到不同的服务版本
+- **基于头信息的路由**：根据 HTTP 头信息进行路由决策
+- **委托路由**：通过 `delegate` 字段实现路由规则的组合和复用
+
+## 子集规则
+
+SubsetRule 是 Dubbo 服务网格中用于定义服务子集和流量策略的资源，对应 Istio 的
DestinationRule。它允许您将服务实例组织成逻辑子集，并为每个子集配置流量策略。
+
+### 负载均衡选项
+
+SubsetRule 支持多种负载均衡策略，通过 MeshConfig 中的 `LocalityLbSetting` 配置：
+
+- **基于地域的负载均衡**：优先将流量路由到同一地域的实例
+- **轮询（ROUND_ROBIN）**：依次将请求分发到各个实例
+- **最少连接（LEAST_CONN）**：将请求路由到连接数最少的实例
+
+### 子级规则示例
+
+以下示例展示了如何创建子集并配置流量策略：
+
+```yaml
+apiVersion: networking.dubbo.apache.org/v1
+kind: SubsetRule
+metadata:
+ name: provider-versions
+ namespace: grpc-app
+spec:
+ host: provider.grpc-app.svc.cluster.local
+ subsets:
+ - name: v1
+ labels:
+ version: v1
+ - name: v2
+ labels:
+ version: v2
+ trafficPolicy:
+ loadBalancer:
+ simple: ROUND_ROBIN
+ tls:
+ mode: ISTIO_MUTUAL
+```
+
+子集通过 Pod 标签进行匹配。在上面的示例中，带有 `version: v1` 标签的 Pod 会被分配到 `v1` 子集，带有 `version:
v2` 标签的 Pod 会被分配到 `v2` 子集。
+
+## 其他问题
+
+在 Dubbo 服务网格中，由于采用无 Sidecar 架构，Sidecar 资源的概念被 Dubbo Agent 所替代。Dubbo Agent
嵌入在应用进程中，通过 xDS 协议与控制平面通信。
+
+
+## 相关内容
+
+- [Dubbo 服务网格快速入门](/zh-cn/overview/quickstart/)
+- [安全概念](/zh-cn/overview/mesh/concepts/security/)
+- [可观测性](/zh-cn/overview/mesh/concepts/observability/)
diff --git a/content/zh-cn/overview/mesh/getting-started.md
b/content/zh-cn/overview/mesh/getting-started.md
new file mode 100644
index 00000000000..81238df29ae
--- /dev/null
+++ b/content/zh-cn/overview/mesh/getting-started.md
@@ -0,0 +1,52 @@
+---
+description: 快速尝试 Dubbo 特性
+linkTitle: 入门介绍
+title: 快速入门
+type: docs
+weight: 1
+---
+
+非常感谢 [Megan Yahya 的 KubeCon EU 2021
演讲](https://www.youtube.com/watch?v=cGJXkZ7jiDk) 提供的提案思路和相关支持
+
+Dubbo 服务网格是 2025 年研发的 Proxyless 网格模型。该模式的进程独立部署并直接通信，通过 xDS 协议与控制面直接交互。
+
+这种模式没有额外的 Proxy 转发开销，适合对性能敏感的应用，并且适用于所有部署环境。
+
+## 下载 Dubbo
+
+1. 转到 Dubbo 发布页面，下载适用于您操作系统的安装文件或自动下载并获取最新版本（Linux 或 macOS）：
+```bash
+curl -L https://dubbo.apache.org/downloadDubbo | sh -
+```
+
+2. 转到 Dubbo 包目录。
+```bash
+cd dubbo-x.xx.x
+```
+
+## 安装 Dubbo
+
+1. 使用 default 配置文件安装 Dubbo
+```bash
+dubboctl install -y
+```
+2. 给命名空间添加标签，指示 Dubbo 在部署应用的时候，自动注入 Dubbo Agent：
+```bash
+kubectl label namespace default dubbo-injection=enabled
+```
+
+{{< blocks/section color="white" height="auto">}}
+<div class="td-content list-page">
+ <div class="lead"></div>
+ <header class="article-meta"></header>
+ <div class="row justify-content-center">
+ <div class="col-sm col-md-5 mb-4">
+ <div class="h-100 text-center">
+ <a class="btn btn-lg btn-primary mb-3" href='{{< relref
"./setup/install" >}}' style="min-width: 200px; color: white;">
+ 开始使用 Proxyless 模式
+ </a>
+ </div>
+ </div>
+ </div>
+</div>
+{{< /blocks/section >}}
\ No newline at end of file
diff --git a/content/zh-cn/overview/mesh/setup/_index.md
b/content/zh-cn/overview/mesh/setup/_index.md
new file mode 100644
index 00000000000..1e3dd495d5c
--- /dev/null
+++ b/content/zh-cn/overview/mesh/setup/_index.md
@@ -0,0 +1,11 @@
+---
+description: proxyless 模式
+linkTitle: proxyless 模式
+title: proxyless 模式
+type: docs
+weight: 3
+---
+
+选择最适合您需求和平台的安装指南。
+
+
diff --git a/content/zh-cn/overview/mesh/setup/install/_index.md
b/content/zh-cn/overview/mesh/setup/install/_index.md
new file mode 100644
index 00000000000..d8fd52ac1cd
--- /dev/null
+++ b/content/zh-cn/overview/mesh/setup/install/_index.md
@@ -0,0 +1,10 @@
+---
+description: 选择最适合您需求和平台的安装方法
+linkTitle: 安装
+title: 安装
+type: docs
+weight: 1
+---
+选择最适合您需求和平台的安装方法。
+
+
diff --git a/content/zh-cn/overview/mesh/setup/install/dubboctl.md
b/content/zh-cn/overview/mesh/setup/install/dubboctl.md
new file mode 100644
index 00000000000..c932b1eeabe
--- /dev/null
+++ b/content/zh-cn/overview/mesh/setup/install/dubboctl.md
@@ -0,0 +1,43 @@
+---
+description: 使用 Dubboctl 安装
+linkTitle: Dubboctl
+title: dubboctl
+type: docs
+weight: 1
+---
+本安装指南使用命令行工具 dubboctl，它提供丰富的定制 Dubbo 控制平面以及数据平面 adapter。可以选取任意一个 Dubbo
内置的配置档，为您的特定需求进一步定制配置。
+
+dubboctl 命令通过命令行的选项支持完整的 DubboOperator API，这些选项用于单独设置、以及接收包含 DubboOperator
定制资源（CR）的 yaml 文件。
+
+## 先决条件
+开始之前，检查下列先决条件
+1. [下载 Dubbod 发行版](../../getting-started.md)
+
+## 使用配置档安装 Dubbo
+```bash
+dubboctl install -y
+```
+此命令在 Kubernetes 集群上安装 default 配置档。
+
+可以选取任意一个 dubbo 内置的配置档
+```bash
+dubboctl install --set profile=demo
+```
+可以通过在命令行传递配置档名称的方式，安装到集群。
+
+## 安装前生成清单文件
+```bash
+dubboctl manifest generate > $HOME/generated-manifest.yaml
+```
+
+## 卸载
+要从集群中完整卸载 Dubbo，运行下面命令
+```bash
+istioctl uninstall --remove -y
+```
+将移除所有 Dubbo 资源,后续版本将会支持指定文件。
+
+命名空间 dubbo-system 默认不会被移除。如果不再需要用下面命令移除该命名空间
+```bash
+kubectl delete namespace dubbo-system
+```
diff --git a/content/zh-cn/overview/mesh/setup/install/helm.md
b/content/zh-cn/overview/mesh/setup/install/helm.md
new file mode 100644
index 00000000000..d934692b43a
--- /dev/null
+++ b/content/zh-cn/overview/mesh/setup/install/helm.md
@@ -0,0 +1,50 @@
+---
+description: 使用 Helm 安装
+linkTitle: Helm
+title: Helm
+type: docs
+weight: 2
+---
+请遵循本指南使用 Helm 安装和配置 Dubbo 网格。
+
+
+## 先决条件
+
+```bash
+helm repo add dubbo https://charts.dubbo.apache.org
+helm repo update
+```
+
+## 安装步骤
+
+1. 安装 Dubbo Base Chart，它包含了集群范围的自定义资源定义 (CRD)，这些资源必须在部署 Dubbo 控制平面之前安装：
+```bash
+helm install dubbo-base dubbo/base -n dubbo-system --create-namespace
+```
+
+2. 安装 Dubbo Discovery Chart，它用于部署 dubbo 的服务：
+```bash
+helm install istiod dubbo/dubbod -n dubbo-system --wait
+```
+
+## 卸载
+
+1. 列出在命名空间 dubbo-system 中安装的所有 Dubbo Chart
+```bash
+helm ls -n dubbo-system
+```
+
+2. 删除 Dubbo Base Chart：
+```bash
+helm delete dubbo-base -n dubbo-system
+```
+
+3. 删除 Dubbo Discovery Chart：
+```bash
+helm delete dubbod
+```
+
+4. 删除命名空间 dubbo-system：
+```bash
+kubectl delete namespace dubbo-system
+```
diff --git a/content/zh-cn/overview/mesh/setup/install/platform/_index.md
b/content/zh-cn/overview/mesh/setup/install/platform/_index.md
new file mode 100644
index 00000000000..72f46b449c6
--- /dev/null
+++ b/content/zh-cn/overview/mesh/setup/install/platform/_index.md
@@ -0,0 +1,8 @@
+---
+description: 安装前对不同 Kubernetes 平台的准备工作
+linkTitle: 平台安装
+title: 平台安装
+type: docs
+weight: 3
+---
+敬请期待
\ No newline at end of file
diff --git a/content/zh-cn/overview/mesh/tasks/_index.md
b/content/zh-cn/overview/mesh/tasks/_index.md
new file mode 100644
index 00000000000..ac48dcefc21
--- /dev/null
+++ b/content/zh-cn/overview/mesh/tasks/_index.md
@@ -0,0 +1,44 @@
+---
+description: 任务
+linkTitle: 任务
+title: 任务
+type: docs
+weight: 3
+no_list: true
+---
+
+通过实际任务学习如何使用 Dubbo 的各种功能。
+
+{{< blocks/section color="white" height="auto">}}
+<div class="td-content list-page">
+ <div class="lead"></div>
+ <header class="article-meta"></header>
+ <div class="row">
+ <div class="col-sm col-md-6 mb-4">
+ <div class="h-100">
+ <h4 class="card-title">
+ <a href='{{< relref
"../../mannual/java-sdk/tasks/traffic-management" >}}'>流量管理</a>
+ </h4>
+ <p>学习如何配置和使用流量管理功能。</p>
+ </div>
+ </div>
+ <div class="col-sm col-md-6 mb-4">
+ <div class="h-100">
+ <h4 class="card-title">
+ <a href='{{< relref
"../../mannual/java-sdk/tasks/security" >}}'>安全</a>
+ </h4>
+ <p>学习如何配置和使用安全功能。</p>
+ </div>
+ </div>
+ <div class="col-sm col-md-6 mb-4">
+ <div class="h-100">
+ <h4 class="card-title">
+ <a href='{{< relref
"../../mannual/java-sdk/tasks/observability" >}}'>可观测性</a>
+ </h4>
+ <p>学习如何配置和使用可观测性功能。</p>
+ </div>
+ </div>
+ </div>
+ <hr>
+</div>
+{{< /blocks/section >}}
diff --git a/content/zh-cn/overview/mesh/upgrade/_index.md
b/content/zh-cn/overview/mesh/upgrade/_index.md
new file mode 100644
index 00000000000..6e2208210ef
--- /dev/null
+++ b/content/zh-cn/overview/mesh/upgrade/_index.md
@@ -0,0 +1,9 @@
+---
+description: 跨多个控制平面升级、降级和管理 Dubbo
+linkTitle: 升级
+title: 升级
+type: docs
+weight: 4
+---
+敬请期待
+
diff --git a/content/zh-cn/overview/notices/_index.md
b/content/zh-cn/overview/notices/_index.md
index 647a8a0dcd9..21a910959bf 100755
--- a/content/zh-cn/overview/notices/_index.md
+++ b/content/zh-cn/overview/notices/_index.md
@@ -4,7 +4,7 @@ linkTitle: "安全公告"
description: "Dubbo 安全公告"
aliases:
- /zh-cn/blog/notices/
-weight: 50
+weight: 99
type: docs
---
diff --git a/content/zh-cn/overview/reference/_index.md
b/content/zh-cn/overview/reference/_index.md
index d2c7cc2af82..549871048ed 100755
--- a/content/zh-cn/overview/reference/_index.md
+++ b/content/zh-cn/overview/reference/_index.md
@@ -6,7 +6,7 @@ linkTitle: 其他
no_list: true
title: 其他
type: docs
-weight: 7
+weight: 4
---
{{< blocks/section color="white" height="auto">}}
diff --git a/content/zh-cn/overview/what/_index.md
b/content/zh-cn/overview/what/_index.md
index fe233661ecf..7dc6f006adf 100644
--- a/content/zh-cn/overview/what/_index.md
+++ b/content/zh-cn/overview/what/_index.md
@@ -7,7 +7,7 @@ linkTitle: 介绍
no_list: true
title: Dubbo 介绍
type: docs
-weight: 2
+weight: 1
---
diff --git a/package.json b/package.json
index d6f4d3f59d0..9a7cd963b06 100644
--- a/package.json
+++ b/package.json
@@ -13,7 +13,7 @@
},
"homepage": "https://dubbo.apache.org";,
"devDependencies": {
- "autoprefixer": "^10.4.21",
+ "autoprefixer": "^10.4.22",
"postcss": "^8.5.6",
"postcss-cli": "^11.0.1"
}
