Zero-trust dynamic discovery

A system, comprising:

• a processor;
• and
• a memory including instructions that when executed by the processor provide a discovery service in a software defined network, the discovery service configured to:
• identify a plurality of endpoints, including targets and initiators, connected to a software defined network, wherein the targets are provided on the software defined network according to a network addressable memory standard that lacks a native discovery service;
• group the targets into a plurality of target groups and the initiators into a plurality of initiator groups;
• and
• in response to receiving a discovery request from a given initiator grouped in a given initiator group of the plurality of initiator groups, return addressing information for a target group of the plurality of target groups associated with the given initiator group in a security policy configuration for the software defined network.

A storage device including computer readable instructions that when executed by a processor enable performance of an operation comprising:

• identifying a plurality of endpoints, including targets and initiators, connected to a software defined network, wherein the targets are provided on the software defined network according to a network addressable memory standard that lacks a native discovery service;
• grouping the targets into a plurality of target groups and the initiators into a plurality of initiator groups;
• and
• in response to receiving a discovery request from a given initiator grouped in a given initiator group of the plurality of initiator groups, returning addressing information for a target group of the plurality of target groups associated with the given initiator group in a security policy configuration for the software defined network.