Microsoft Technology Licensing, LLC

Akash Baid

Ronald Mark Parker

Michael Anthony Brown

Yamini Sridaran

Mark Libby

Haibo Qian

Nitish Malhotra

Nan Luo

Vinay M Cherian

Srinivasan Muralidharan

Vinay Cherian

The present disclosure relates to methods and systems for configuring service mesh networking resources for dynamically discovered external entities. The methods and systems create custom resource objects for services provided by the external entities and dynamically create service mesh network resources for the custom resource objects. The methods and systems enable communications with the external entities using the service mesh network resources.

Configuring service mesh networking resources for dynamically discovered peers or network functions

Techniques are disclosed for providing a native general-purpose controller for reconciling desired states for resources across a plurality of clusters in a cloud computing environment. An indication is received of one or more custom resources of the cloud computing environment. An API is instantiated at each of the clusters that are to be accessed. In response to receiving an indication that a desired state of one of the objects does not match a current state of the one object, a message is sent that indicates an action to reconcile the desired state with the current state. A message is received that indicates that the action to reconcile the desired state with the current state has been completed.

Controller for off-cluster operations

Techniques are disclosed for providing a native general-purpose controller for reconciling desired states for resources across a plurality of Kubemetes clusters in a cloud computing environment. An indication is received of one or more custom resources of the cloud computing environment. An API is instantiated at each of the Kubemetes clusters that are to be accessed. In response to receiving an indication that a desired state of one of the objects does not match a current state of the one object, a message is sent that indicates an action to reconcile the desired state with the current state. A message is received that indicates that the action to reconcile the desired state with the current state has been completed.

Embodiments disclosed herein relate to systems and methods for separately managing control and data plan contexts for a secure connection during a standby node switchover scenario. Primary and standby nodes for a secure connection can both maintain a data plane context for a secure connection such as IPSec. In the event that the primary node becomes inactive, the standby node can immediately begin processing data plane traffic using the data plane context for the secure connection maintained at the standby node. Control plane information necessary for programming and activating a control plane context can be stored until needed. During a switchover, the standby node can retrieve the control plane information and activate the control plane context after it has begun processing the data plane traffic.

Growing community of inventors

Boston, MA, United States of America

Akash Baid