Systems and methods for hardware-based security for inter-container communication

A method, comprising:

• receiving, at a device communicatively coupled to a processor subsystem, an inter-process communication from a container via an endpoint of the device, wherein the endpoint is assigned for access by the container executing on the processor subsystem such that the endpoint appears to the container as a logical hardware adapter, and wherein the inter-process communication is intended for a target container;
• analyzing the inter-process communication to determine if the container has permissions for communicating the inter-process communication to the target container;
• and
• communicating the inter-process communication to the target container responsive to determining that the container has permissions for communicating the inter-process communication to the target container.

An article of manufacture comprising:

• a non-transitory computer-readable medium;
• and
• computer-executable instructions carried on the computer-readable medium, the instructions readable by a processor, the instructions, when read and executed, for causing the processor to:
• receive, at a device communicatively coupled to a processor subsystem, an inter-process communication from a container via an endpoint of the device, wherein the endpoint is assigned for access by the container executing on the processor subsystem such that the endpoint appears to the container as a logical hardware adapter, and wherein the inter-process communication is intended for a target container;
• analyze the inter-process communication to determine if the container has permissions for communicating the inter-process communication to the target container;
• and
• communicate the inter-process communication to the target container responsive to determining that the container has permissions for communicating the inter-process communication to the target container.