Interposing service mesh

A first computing device comprising:

• a processor;
• and
• a memory storing instructions that, when executed by the processor, cause the processor to:
• run a first application in a first computing environment, wherein the first application communicates with a second application running in a second computing environment via application traffic;
• implement a kernel, wherein the kernel facilitates interactions between hardware components and software components of the first computing device;
• and
• implement a service mesh, wherein the service mesh:
• interposes a call for forming a connection from the first application, wherein the call for forming a connection comprises a request for establishing a channel between the first computing environment and the second computing environment;
• and
• establishes, in response to the call for forming a connection, a secure channel between the first computing environment and the second computing environment by:
• instructing, the kernel to form a computing environment channel between the first computing environment and the second computing environment;
• performing a secure handshaking procedure with the second computing environment to obtain cryptographic parameters for use on the computing environment channel to cause the computing environment channel to be a secure channel;
• and
• establishing a kernel socket between the first application and the kernel for use with the application traffic to be sent over the secure channel;
• wherein the kernel forms the computing environment channel in response to the instructions from the service mesh.

A non-transitory computer storage medium having computer-executable instructions that, when executed by a computing system, direct the computing system to perform operations comprising:

• interposing a connection forming request, wherein the connection forming request comprises a request by a first application to form a secure connection between the first application and a second application;
• in response to the connection forming request, establishing the secure connection between the first computing environment and the second computing environment, wherein establishing the secure connection comprises:
• instructing a kernel of a first computing device of the first computing environment to establish a computing environment connection between the first computing environment and the second computing environment;
• establishing cryptographic parameters for encrypting or decrypting application traffic between the first application and the second application;
• and
• establishing a socket with the kernel for communicating the application traffic over the secure connection.