Securing end-to-end virtual machine traffic

A non-transitory computer-readable medium storing instructions, the instructions comprising:

• one or more instructions that, when executed by one or more processors in a device, cause the one or more processors to:
• receive a packet from a remote endpoint that is destined for a local endpoint,
• the local endpoint being local to the device,
• the local endpoint being a local virtual machine,
• the remote endpoint being remote from the device,
• the remote endpoint being a remote virtual machine, and
• the packet being received via an underlying tunneling network between the device and another device hosting the remote endpoint;
• decrypt the packet using security information associated with a secure session between the remote virtual machine and the local virtual machine;
• and
• provide the packet toward the local endpoint after decrypting the packet.

A device, comprising:

• one or more memories;
• and
• one or more processors, communicatively coupled to the one or more memories, to:
• receive a packet from a remote endpoint that is destined for a local endpoint,
• the local endpoint being local to the device,
• the local endpoint being a local virtual machine,
• the remote endpoint being remote from the device,
• the remote endpoint being a remote virtual machine, and
• the packet being received via an underlying tunneling network between the device and another device hosting the remote endpoint;
• decrypt the packet using security information associated with a secure session between the remote virtual machine and the local virtual machine;
• and
• provide the packet toward the local endpoint after decrypting the packet.