Dynamically opening ports for trusted application processes hosted in containers

A system, comprising:

• a processor programmed to initiate executable operations comprising:
• identifying a port listening request dynamically generated by an application process hosted in a container;
• determining whether the application process hosted in the container is trusted;
• responsive to determining that the application process hosted in the container is trusted, dynamically selecting, a first port to be used as an external port for the application process, and communicating a port assignment to a container engine, the port assignment indicating the first port is assigned to the application process;
• mapping the first port to a second port assigned as an internal port for the application process;
• and
• opening the first port for the application process.

A computer program product comprising a computer readable storage medium having program code stored thereon, the program code executable by a processor to perform a method comprising:

• identifying, by the processor, a port listening request dynamically generated by an application process hosted in a container;
• determining, by the processor, whether the application process hosted in the container is trusted;
• responsive to determining that the application process hosted in the container is trusted, dynamically selecting, by the processor, a first port to be used as an external port for the application process, and communicating, by the processor, a port assignment to a container engine, the port assignment indicating the first port is assigned to the application process;
• mapping, by the processor, the first port to a second port assigned as an internal port for the application process;
• and
• opening, by the processor, the first port for the application process.