End-to-end transactional microsegmentation

A system comprising:

• one or more processors;
• and
• one or more non-transitory computer-readable media storing instructions that, when executed, caused the one or more processors to perform operations comprising:
• receiving a protocol data unit that is traversing a communication path through a network between a client device and a workload, the protocol data unit associated with a communication transaction between the client device and the workload;
• determining that the protocol data unit includes a first metadata tag associated with a first layer in a communication reference model, the first metadata tag associated with a first segmentation ecosystem applying a microsegmentation policy along a first portion of the communication path;
• and
• converting the first metadata tag into a second metadata tag associated with a second layer in the communication reference model, the first and second layers being different layers in the communication reference model, the converting including embedding the second metadata tag within a second layer of the protocol data unit to enable a second segmentation ecosystem to apply the microsegmentation policy to the protocol data unit along a second portion of the communication path.

A non-transitory computer-readable medium storing instructions that, when executed, cause one or more processors to perform operations comprising:

• receiving a protocol data unit that is traversing a communication path through a network between a client device and a workload, the protocol data unit associated with a communication transaction between the client device and the workload;
• determining that the protocol data unit includes a first metadata tag associated with a first layer in a communication reference model, the first metadata tag associated with a first segmentation ecosystem applying a microsegmentation policy along a first portion of the communication path;
• and
• converting the first metadata tag into a second metadata tag associated with a second layer in the communication reference model, the first and second layers being different layers in the communication reference model, the converting including embedding the second metadata tag within a second layer of the protocol data unit to enable a second segmentation ecosystem to apply the microsegmentation policy to the protocol data unit along a second portion of the communication path.