Service Meshes and Smart Contracts for Zero-Trust Systems

A blockchain-enabled cloud-based service mesh environment comprising:

• a network service mesh network comprising:
• a plurality of network service domains configured to communicate with each other;
• a global variable name system comprising a plurality of registered global variables;
• and
• a bulletin board server;
• and
• an application service mesh network positioned in communication with the network service mesh network, the application service mesh network comprising a plurality of applications configured to communicate with each other and a network service domain of the plurality of network service domains;
• wherein the bulletin board server is configured to update information about the plurality of registered global variables responsive to messages received from the plurality of applications by the bulletin board server;
• wherein the plurality of applications comprises at least one of a containerized network function, a virtual network function, a worker node, a server, a container, a pod, and a virtual machine;
• wherein a plurality of smart contracts record information comprising resource assignment and consumption information from the network service mesh network and the application service mesh network and a registered global variable are recorded to a blockchain network;
• and
• wherein the plurality of smart contracts is configured to be updated responsive to changes in registered global variables comprised thereby.

A blockchain-enabled cloud-based service mesh environment based on containers, comprising:

• a network service mesh network comprising:
• a plurality of network service domains configured to communicate with each other;
• a global variable name system comprising a plurality of registered global variables;
• and
• a bulletin board server;
• and
• an application service mesh network positioned in communication with the network service mesh network, the application service mesh network comprising a plurality of applications configured to communicate with each other and a network service domain of the plurality of network service domains;
• wherein the plurality of applications comprises at least one of a containerized network function, a virtual network function, a worker node, a server, a container, a pod, and a virtual machine;
• wherein at least a subset of the plurality of network service domains are managed by a Kubernetes installation;
• wherein the resource assignment and consumption information is monitored for at least one of performance constraint checks and security constraint checks;
• and
• wherein a plurality of smart contracts record information comprises network slicing information comprising network slicing information from the network service mesh network.