Automatic, security-induced relocation of at least one container instance

An apparatus for automatic, security-induced relocation of at least one container instance in an orchestrated environment, which comprises more than one guest computer, managed by an orchestration device, comprising the orchestration device and a monitoring device, which are configured in such a way as to carry out the following:

• the orchestration device launching the container instance on a first guest computer that comprises security functions in accordance with a first security level,
• receiving a security alarm message comprising at least one criticality parameter, which indicates a security state of the orchestrated environment, from a monitoring device in the orchestration device;
• the orchestration device determining a second security level, different from the first security level, for the container instance based on a relocation policy depending on the criticality parameter;
• and
• the orchestration device relocating the container instance to a second guest computer in the orchestrated environment, which comprises security functions in accordance with the second security level, wherein the orchestration device receives information about the security state in the guest computers of the orchestrated environment and the executed container instance dynamically by the security alarm message and the criticality parameter indicates a measure of this security state.