Secure and efficient management of microservices

A processing system, comprising:

• a memory comprising computer-executable instructions;
• and a processor configured to execute the computer-executable instructions and cause the processing system to:
• receive, from a first client device, a first request to call a target service Application Programming Interface (API), wherein:
• a first body of the first request is encrypted, and
• the first request comprises a first Uniform Resource Locator (URL) path comprising a first identifier mapped to a target URL corresponding to the target service API;
• generate a decrypted first request by decrypting the first request to call the target service API;
• determine the target service API based on the first identifier;
• generate a transformed first request by applying one or more transforms to the decrypted first request according to one or more first configured request transformation rules, including one or more of:
• transforming the first URL path of the decrypted first request to a second URL path of the decrypted first request;
• transforming a first header of the decrypted first request to a second header of the decrypted first request;
• transforming the first body of the decrypted first request to a second body of the decrypted first request;
• or
• transforming a first cookie of the decrypted first request to a second cookie of the decrypted first request;
• and
• send the transformed first request to the target service API.

A method, comprising:

• receiving, from a client device, a request to call a target service Application Programming Interface (API);
• retrieving, from a data repository, a first structured configuration data comprising service mapping data and a second structured configuration data comprising transformation rule data;
• parsing the request to call the target service API to determine a plurality of portions of the request, wherein the request comprises one or more of:
• a first Uniform Resource Locator (URL) comprising:
• a base URL that is not encrypted, and
• a URL path comprising an identifier associated with the target service API,
• a header,
• a body, or
• a cookie,
• wherein the URL path and the body are encrypted;
• generating a second URL by rewriting at least a portion of the first URL based on the service mapping data, wherein the second URL is associated with the target service API;
• generating a decrypted request by decrypting the URL path of the request and the body of the request;
• determining the target service API based on the identifier;
• identifying one or more applicable transformation rules of the transformation rule data, applicable for the request, based on at least one of the determined portions of the request;
• generating a transformed request by transforming, based on the identified one or more applicable transformation rules, one or more of:
• the URL path, the header, the body, or the cookie;
• and
• sending the transformed request to the target service API based on the second URL.