A service mesh is an infrastructure layer that manages service-to-service communication with features like mutual TLS, traffic splitting, and observability, typically using sidecar proxies.