Hypervisor agnostic bidirectional secure channel for guest agent transport

A computer readable medium, embodied in a non-transitory computer readable medium, the non-transitory computer readable medium having stored thereon a sequence of instructions which, when stored in memory and executed by a processor causes the processor to perform a set of acts for providing a connection between a guest virtual machine and a service virtual machine, the acts comprising:

• providing access to a driver code function that serves to establish a listening port on the service virtual machine without providing a listening port on the guest virtual machine;
• receiving, by the service virtual machine, a request from the guest virtual machine to initiate a remote procedure call socket between the service virtual machine and the guest virtual machine;
• indicating, in data structures of the remote procedure call socket, that the remote procedure call socket is to be used for remote procedure calls from the service virtual machine to the guest virtual machine rather than from the guest virtual machine to the service virtual machine;
• formatting a first instance of an authority certificate by encoding into the first instance, at least a portion of identifying information received from the request from the guest virtual machine;
• and
• providing, to the guest virtual machine, the first instance of the authority certificate.

A system for providing a connection between a guest virtual machine and a service virtual machine comprising:

• a storage medium having stored thereon a sequence of instructions;
• and
• a processor or processors that execute the instructions to cause the processor or processors to perform a set of acts, the acts comprising,
• providing access to a driver code function that serves to establish a listening port on the service virtual machine without providing a listening port on the guest virtual machine;
• receiving, by the service virtual machine, a request from the guest virtual machine to initiate a remote procedure call socket between the service virtual machine and the guest virtual machine;
• indicating, in data structures of the remote procedure call socket, that the remote procedure call socket is to be used for remote procedure calls from the service virtual machine to the guest virtual machine rather than from the guest virtual machine to the service virtual machine;
• formatting a first instance of an authority certificate by encoding into the first instance, at least a portion of identifying information received from the request from the guest virtual machine;
• and
• providing, to the guest virtual machine, the first instance of the authority certificate.