Dynamic, load-based, auto-scaling network security microservices architecture

1. A computer-implemented method comprising:

selecting a first security microservice of a first level of a hierarchy of security microservices, the first security microservice accepting serviced data from a second security microservice of a second lower-level of the hierarchy of security microservices;

configuring the second security microservice of the second lower-level of the hierarchy of security microservices to remove the first security microservice from load balancing decisions to the first level of the hierarchy;

moving the first security microservice to another server;

configuring data plane connectivity to the first security microservice to reflect a change to the another server; and

configuring the second security microservice of the second lower-level of the hierarchy to include the first security microservice in load balancing decisions to the second lower-level of the hierarchy.

2. The computer-implemented method of claim 1 , wherein the first security microservice was created by an existing microservice.

3. The computer-implemented method of claim 2 , wherein the existing microservice is a configuration microservice.

4. The computer-implemented method of claim 2 , wherein the first security microservice of the first level of the hierarchy and the second security microservice of the second lower-level of the hierarchy communicate over a backplane.

5. The computer-implemented method of claim 4 , wherein the first security microservice is configured to use the data plane.

6. The computer-implemented method of claim 5 , wherein there exists, prior to the moving of the first security microservice to the another server, a microservice of a same hierarchy level as the first security microservice.

7. The computer-implemented method of claim 1 , wherein the load balancing decisions utilize information from a third security microservice of a third higher-level of the hierarchy than the first level of the hierarchy.

8. The computer-implemented method of claim 7 , wherein data plane connectivity is configured through communication on a backplane.

9. The computer-implemented method of claim 1 , wherein a backplane and data plane comprise managed networks.

10. A non-transitory computer-readable medium storing instructions, which when executed by a processor cause the processor to perform a method, the method comprising:

selecting a first security microservice of a first level of a hierarchy of security microservices, the first security microservice accepting serviced data from a second security microservice of a second lower-level of the hierarchy of security microservices;

configuring the second security microservice of the second lower-level of the hierarchy of security microservices to remove the first security microservice from load balancing decisions to the first level of the hierarchy;

moving the first security microservice to another server;

configuring data plane connectivity to the first security microservice to reflect a change to the another server; and

configuring the second security microservice of the second lower-level of the hierarchy to include the first security microservice in load balancing decisions to the second lower-level of the hierarchy.

11. The non-transitory computer-readable medium of claim 10 , wherein the first security microservice was created by an existing microservice.

12. The non-transitory computer-readable medium of claim 11 , wherein the existing microservice is a configuration microservice.

13. The non-transitory computer-readable medium of claim 11 , wherein the first security microservice of the first level of the hierarchy and the second security microservice of the second lower-level of the hierarchy communicate over a backplane.

14. The non-transitory computer-readable medium of claim 13 , wherein the first security microservice is configured to use the data plane.

15. The non-transitory computer-readable medium of claim 14 , wherein there exists, prior to the moving of the first security microservice to the another server, a microservice of a same hierarchy level as the first security microservice.

16. The non-transitory computer-readable medium of claim 10 , wherein the load balancing decisions utilize information from a third security microservice of a third higher-level of the hierarchy than the first level of the hierarchy.

17. The non-transitory computer-readable medium of claim 16 , wherein data plane connectivity is configured through communication on a backplane.

18. An apparatus comprising:

a hardware processor to execute instructions; and

memory coupled to the processor, the memory to store the instructions which when executed by the processor cause:

selecting a first security microservice of a first level of a hierarchy of security microservices, the first security microservice to accept serviced data from a second security microservice of a second lower-level of the hierarchy of security microservices,

configuring the second security microservice of the second lower-level of the hierarchy of security microservices to remove the first security microservice from load balancing decisions to the first level of the hierarchy,

moving the first security microservice to another server,

configuring data plane connectivity to the first security microservice to reflect a change to the another server, and

configuring the second security microservice of the second lower-level of the hierarchy to include the first security microservice in load balancing decisions to the second lower-level of the hierarchy.

19. The apparatus of claim 18 , wherein the first security microservice of the first level of the hierarchy and the second security microservice of the second lower-level of the hierarchy communicate over a backplane.

20. The apparatus of claim 18 , wherein

the load balancing decisions utilize information from a third security microservice of a third higher-level of the hierarchy than the first level of the hierarchy.