Network management using secure mesh command and control framework

A system comprising:

• a first target client machine of a set of target client machines supported by a first host machine, the first target client machine comprising:
• a memory to store an access control list;
• and
• a processor operatively coupled to the memory, the processor to:
• receive, by the processor, first command data from the first host machine, wherein the host machine receives the first command data from a network server operatively coupled to a plurality of host machines comprising the first host machine;
• execute the first command data;
• receive a request from a second target client machine of the set of target client machines, the request for the first target client machine to execute second command data received from the second target client machine, wherein the request comprises a security credential;
• authenticate, by the processor of the first target client machine, the second target client machine by determining that the security credential associated with the second target client machine is signed by a common certificate authority associated with the first host machine;
• establish a secure channel between the first target client machine and the second target client machine operatively coupled to the first target client machine;
• determine that the second target client machine is listed on the access control list as authorized to initiate execution of the second command data on the first target client machine;
• and
• execute the second command data in response to determining that the second target client machine is authorized to initiate execution of the second command data on the first target client machine.

A non-transitory computer readable medium comprising instructions that, when executed by a processor, cause the processor to:

• receive, by the processor of a first target client machine of a set of target client machines supported by a first host machine, first command data from the first host machine, wherein the first host machine receives the first command data from a network server operatively coupled to a plurality of host machines comprising the first host machine;
• execute, by the processor of the first target client machine, the first command data;
• receive, by the processor of the first client machine, a request from a second target client machine of the set of target client machines, the request for the first client machine to execute second command data received from the second target client machine, wherein the request comprises a security credential;
• authenticate, by the processor of the first target client machine, the second target client machine by determining that the security credential associated with the second target client machine is signed by a common certificate authority associated with the first host machine;
• establish a secure channel between the first target client machine and the second target client machine operatively coupled to the first target client machine;
• determine, by the processor of the first target client machine, that the second target client machine is listed on an access control list of the first target client machine as authorized to initiate execution of the second command data on the first target client machine;
• and
• execute, by the processor of the first target client machine, the second command data in response to determining that the second target client machine is authorized to initiate execution of the second command data on the first target client machine.