Systems and methods providing a multi-cloud microservices gateway using a sidecar proxy

A server for enabling end-to-end secured connectivity and global reachability in a constellation of microservices, the server comprising:

• at least one processor;
• and
• a computer readable storage device storing instructions which, when excused by the at least one processor, cause the at least one processor to perform operations comprising:
• deploying a first agent in connection with a first microservice in a first cloud computing environment, the first microservice being of a first type;
• gathering, by the first agent, reachability candidate information comprising endpoint-related information of other microservices different from the first agent and required by the first microservice, to yield first reachability candidate information;
• receiving, based on the first reachability candidate information, a registration of the first microservice and authenticating the first microservice;
• deploying a second agent in connection with a second microservice in a second cloud computing environment, the second microservice being of a second type, wherein the first cloud computing environment differs from the second cloud computing environment;
• gathering, by the second agent, reachability candidate information comprising endpoint-related information of other microservices different from the second agent and required by the second microservice, to yield second reachability candidate information;
• receiving, based on the second reachability candidate information, a registration of the second microservice and authenticating the second microservice;
• receiving a first verifiable identity document from the first agent;
• transmitting, from the server, a first valid certificate at the first agent based on the first verifiable identity document to yield a first authentication;
• receiving a second verifiable identity document from the second agent;
• transmitting, from the server, a second valid certificate at the second agent based on the second verifiable identity document to yield a second authentication;
• receiving, based on the first authentication and at the first agent, a first constellation IP address for the first microservice;
• and
• receiving, based on the second authentication and at the second agent, a second constellation IP address for the second microservice, where the server enables microservice discovery and distributes constellation IP addresses to authorized agents such that end-to-end secured connectivity and global reachability is available between the first microservice of the first type and the second microservice of the second type.

A set of cloud computing environments comprising:

• a first cloud computing environment comprising:
• at least one first processor;
• and
• a first computer readable storage device storing instructions which, when excused by the at least one first processor, cause the at least one first processor to perform operations comprising:
• deploying a first agent in connection with a first microservice in the first cloud computing environment, the first microservice being of a first type;
• gathering, by the first agent, reachability candidate information comprising endpoint-related information of other microservices different from the first agent and required by the first microservice, to yield first reachability candidate information;
• registering, based on the first reachability candidate information, the first microservice at a server, wherein the server authenticates the first microservice;
• transmitting a first verifiable identity document from the first agent to the server;
• receiving, from the server, a first valid certificate at the first agent based on the first verifiable identity document to yield a first authentication;
• and
• receiving, based on the first authentication and at the first agent, a first constellation IP address for the first microservice;
• and
• a second cloud computing environment comprising:
• at least one second processor;
• and
• a second computer readable storage device storing instructions which, when excused by the at least one second processor, cause the at least one second processor to perform operations comprising:
• deploying a second agent in connection with a second microservice in the second cloud computing environment, the second microservice being of a second type, wherein the first cloud computing environment differs from the second cloud computing environment;
• gathering, by the second agent, reachability candidate information comprising endpoint-related information of other microservices different from the second agent and required by the second microservice, to yield second reachability candidate information;
• registering, based on the second reachability candidate information, the second microservice at the server, wherein the server authenticates the second microservice;
• transmitting a second verifiable identity document from the second agent to the server;
• receiving, from the server, a second valid certificate at the second agent based on the second verifiable identity document to yield a second authentication;
• and
• receiving, based on the second authentication and at the second agent, a second constellation IP address for the second microservice, wherein the server enables microservice discovery and distributes constellation IP addresses to authorized agents such that end-to-end secured connectivity and global reachability is available between the first microservice of the first type and the second microservice of the second type.