Envoy for multi-tenant compute infrastructure

A non-transitory computer-readable medium comprising instructions that when executed by one or more processors causes the one or more processors to perform operations comprising:

• establishing a connection to a data management and storage (DMS) system to provide the DMS system access to one or more virtual machines of a tenant of a multi-tenant cloud compute infrastructure, wherein:
• the one or more virtual machines are operably connected to a virtual network of the tenant, wherein the virtual network is hosted by the multi-tenant cloud compute infrastructure;
• the multi-tenant cloud compute infrastructure restricts access by the DMS system to the virtual network of the tenant and to an infrastructure network connecting physical machines including a physical machine that hosts the one or more virtual machines of the tenant;
• and
• the infrastructure network and the virtual network use different network layers and share a physical layer;
• interfacing with the multi-tenant cloud compute infrastructure using a virtualization protocol to generate a snapshot of a first virtual machine of the one or more virtual machines of the tenant;
• storing the snapshot of the first virtual machine of the tenant in a data store of computing resources provided by the multi-tenant cloud compute infrastructure;
• and
• sending the snapshot of the first virtual machine to the DMS system.