Zero trust packet routing using virtual network interface cards

A system, comprising:

• one or more networks that include virtual network interface cards (VNICs);
• a policy that specifies how a flow of traffic is enforced between different endpoints within the one or more networks, wherein the policy includes one or more layer 4 rules and one or more layer 7 rules and wherein the rules reference tags associated with resources of the one or more networks;
• one or more processors;
• and
• non-transitory computer-readable medium storing a set of instructions, the set of instructions when executed by the one or more processors cause processing to be performed comprising:
• identifying from the policy, a ZPR statement that specifies a connection between a first virtual network interface card (VNIC) and an endpoint;
• generating, based on the ZPR statement, one or more network security group (NSG) rules;
• and
• distributing at least one of the one or more NSG rules to a first NSG associated with the first VNIC.

A computer-readable medium comprising instructions that when executed, cause one or more processors to perform operations including:

• accessing a ZPR policy that specifies how a flow of traffic is enforced between endpoints within the one or more networks, wherein the policy includes one or more layer 4 rules and one or more layer 7 rules;
• identifying from the ZPR policy, a ZPR statement that specifies a connection between a first virtual network interface card (VNIC) and an endpoint;
• generating, based on the ZPR statement, one or more network security group (NSG) rules;
• and
• distributing at least one of the one or more NSG rules to a first NSG associated with the first VNIC.