Method and apparatus for bidirectional message routing between services running on different network nodes

A system for facilitating bi-directional message routing between services running on a different nodes in a computer cluster, the system comprising:

• one or more processors;
• and
• one or more memory units having instructions stored thereon, which when executed by the one or more processors, cause the system to:
• receive, from a service at a first node, a message wrapped in a routing envelope, wherein the routing envelope includes a name associated with a service at a second node to which the message is to be sent;
• determine an ephemeral identifier (EPH ID) associated with the second node based on the name of the service at the second node;
• and
• transmit the routing envelope containing the message to the second node using the EPH ID associated with the second node.

A computer-implemented method for bi-directional message routing between services running on a controller node and a particular node of a plurality of nodes in a computer cluster, the method comprising:

• initiating, by the particular node, a secure virtual private network (VPN) tunnel with the controller node in the computer cluster;
• wherein the VPN includes at least a firewall configured to reject any requests received by the particular node to initiate a network session;
• initiating, by the particular node, a bi-directional network session with the controller node over the VPN tunnel;
• transmitting, by the particular node, via the VPN tunnel to the controller node, a current ephemeral identifier (EPH ID) associated with the particular node.