[vsupalov]

To me it reads more like Nebula is a VPN solution, with end-to-end encryption and security groups baked in.

To my understanding, a service mesh does not establish a common VPN-like network, but assumes it's there already. Nebula and service meshes both provide authentication, end-to-end encryption and role-based access control. A service mesh can do more than Nebula: it makes it possible to shift traffic between services for example apart from a "security group"-like filtering.

However, I might be mistaken. Any corrections are more than welcome.