Dynamic and transparent application program interface (api) endpoint host redirection

A method of application program interface (API) endpoint host redirection, comprising:

• with an intelligent domain name system (DNS) engine (IDE) associated with a containerized service within a pod of a mesh network:
• snooping a DNS query from the containerized service;
• identifying within the DNS query, an API endpoint name;
• snooping a DNS response associated with the DNS query;
• identifying an Internet protocol (IP) address associated with the API endpoint name;
• transmitting the API endpoint name and the IP address to a controller;
• receiving, from the controller, a list of safe API endpoint hosts with no known security vulnerabilities based on security data obtained from at least one security service;
• caching, at the IDE, the list of safe API endpoint hosts including safe IP addresses;
• intercepting a subsequent DNS request from the containerized service;
• and
• transmitting to the containerized service, via the IDE, IP addresses of safe API endpoint hosts within the list of safe API endpoint hosts.

A system comprising:

• a processor;
• and
• a non-transitory computer-readable media storing instructions that, when executed by the processor, causes the processor to perform operations comprising:
• with an intelligent domain name system (DNS) engine (IDE) associated with a containerized service within a pod of a mesh network:
• snooping a DNS query from the containerized service;
• identifying within the DNS query, an application program interface (API) endpoint name;
• snooping a DNS response associated with the DNS query;
• identifying an Internet protocol (IP) address associated with the API endpoint name;
• transmitting the API endpoint name and the IP address to a controller;
• receiving, from the controller, a list of safe API endpoint hosts with no known security vulnerabilities based on security data obtained from at least one security service;
• caching, at the IDE, the list of safe API endpoint hosts including safe IP addresses;
• intercepting a subsequent DNS request from the containerized service;
• and
• transmitting to the containerized service, via the IDE, IP addresses of safe API endpoint hosts within the list of safe API endpoint hosts.