Direct communication between applications in a cloud computing environment
AssigneeVerizon Patent and Licensing Inc.
InventorMarc J. Cochran
Life of this patent
Estimating the term…
Abstract
A device receives traffic destined for a first application, and the traffic is received from a second application via a virtual machine and an indirect connection. The device determines, based on the traffic, whether the second application is a known and trusted neighbor of the first application, and establishes a direct connection between the first application and the second application, when the second application is a known and trusted neighbor of the first application. The device also applies traffic rules to the direct connection, and enables the traffic to be directly and securely communicated between the first application and the second application via the direct connection.
Claims20
A method, comprising:
- receiving, by a device, traffic destined for a first application,
- the traffic being received from a second application via a virtual machine and an indirect connection;
- determining, by the device and based on the traffic, whether the second application is a known and trusted neighbor of the first application;
- establishing, by the device, a direct connection between the first application and the second application, when the second application is a known and trusted neighbor of the first application;
- applying, by the device, traffic rules to the direct connection,
- the traffic rules including a rule to drop particular traffic received from the virtual machine, via the indirect connection, when the particular traffic includes an address associated with the second application and when the direct connection between the first application and the second application is established;
- and
- enabling, by the device, the traffic to be directly and securely communicated between the first application and the second application via the direct connection.
A device, comprising:
- a processor to:
- receive traffic destined for a first application,
- the traffic being received from a second application via a virtual machine and an indirect connection,
- determine, based on the traffic, whether the second application is a trusted neighbor of the first application,
- create a direct connection between the first application and the second application, when the second application is a trusted neighbor of the first application,
- utilize traffic rules for the direct connection,
- the traffic rules including a rule to drop particular traffic received from the virtual machine, via the indirect connection, when the particular traffic includes an address associated with the second application and when the direct connection between the first application and the second application is established, and
- enable the traffic to be directly and securely communicated between the first application and the second application via the direct connection.
A non-transitory computer-readable medium, comprising:
- one or more instructions that, when executed by one or more processors of a device, cause the one or more processors to:
- receive traffic destined for a first application, the traffic being received from a second application via a virtual machine and an indirect connection,
- determine, based on the traffic, whether the second application is a known and trusted neighbor of the first application,
- establish a direct connection between the first application and the second application, when the second application is a known and trusted neighbor of the first application,
- apply traffic rules to the direct connection,
- the traffic rules including a rule to drop particular traffic received from the virtual machine, via the indirect connection, when the particular traffic includes an address associated with the second application and when the direct connection between the first application and the second application is established, and
- enable the traffic to be directly and securely communicated between the first application and the second application via the direct connection.
Dependencies are inferred from the claim text.