Private communication service in a public cloud environment

1. A computer-implemented method for setting up a private communication link to a service offered by a producer in a public cloud environment, the method comprising:

monitoring the public cloud environment for one or more metadata tags associated with a corresponding one or more services offered by one or more producers;

responsive to the monitoring, extracting metadata from an identified first metadata tag associated with a service offered by a producer;

configuring a producer-side private link service to a private communication link for accessing the service based on the extracted metadata, wherein the producer-side private link service is located within a logical boundary surrounding the producer in the public cloud environment; and

exposing a second metadata tag associated with the private communication link in the public cloud environment,

thereby enabling a requesting consumer to request for and obtain access the service offered by the producer through the private communication link.

2. The computer-implemented method of claim 1 , wherein the monitoring comprises monitoring for at least one of:

a new metadata tag; and

a metadata tag with updated field values.

3. The computer-implemented method of claim 1 , wherein the monitoring is performed periodically at a prespecified frequency.

4. The computer-implemented method of claim 1 , wherein extracting metadata from the identified first metadata tag comprises extracting field values from the identified first metadata tag, the field values comprising one or more of:

name of the service;

scope of exposure of the service; and

parameters of an active probe test for the service.

5. The computer-implemented method of claim 4 , wherein configuring the producer-side private link service to the private communication link for accessing the service based on the extracted metadata comprises:

creating a private domain name server (DNS) record based on the name of the service; and

configuring a private DNS based on created record so that using the name of the service will reference one of:

the producer; and

a network load balancer attached to the producer.

6. The computer-implemented method of claim 1 , wherein exposing a second metadata tag associated with the private communication link comprises:

creating a tag with metadata information comprising one or more of:

name of the service;

scope of exposure of the service; and

parameters of an active probe test for the service; and

display the created tag in the public cloud environment.

7. A computer-implemented method for setting up a private communication link to access a service by a consumer in a public cloud environment, the method comprising:

monitoring the public cloud environment for one or more metadata tags associated with a corresponding one or more private communication links to services offered by one or more producers;

responsive to the monitoring, extracting metadata from an identified metadata tag associated with a private communication link to a service offered by a producer; and

configuring a consumer-side private link endpoint to the private communication link based on the extracted metadata, wherein the consumer-side private link endpoint is located within a logical boundary surrounding the consumer in the public cloud environment,

thereby enabling the consumer to request and obtain access to the service offered by the producer through the private communication link.

8. The computer-implemented method of claim 7 , wherein the monitoring comprises monitoring for at least one of:

a new metadata tag; and

a metadata tag with updated field values.

9. The computer-implemented method of claim 7 , wherein the monitoring is performed periodically at a prespecified frequency.

10. The computer-implemented method of claim 7 , wherein extracting metadata from the identified metadata tag associated with the private communication link to the service offered by the producer comprises extracting field values from the identified metadata tag, the field values comprising one or more of:

name of the service;

scope of exposure of the service; and

parameters of an active probe test for the service.

11. The computer-implemented method of claim 10 , wherein configuring the consumer-side private link endpoint to the private communication link based on the extracted metadata comprises:

creating a private domain name server (DNS) record based on the name of the service; and

configuring a private DNS based on created record so that using the name of the service will reference the consumer-side private link endpoint to the private communication link.

12. The computer-implemented method of claim 10 , wherein configuring the consumer-side private link endpoint to the private communication link based on the extracted metadata comprises configuring an active probe test based on the extracted metadata.

13. The computer-implemented method of claim 12 , wherein the configured active probe test obtains telemetry data comprising one or more of:

jitter statistics;

success and failure rate in consumer-side private link endpoint creation; and

latency statistics.

14. A non-transitory computer readable storage medium for storing instructions that when executed by a computer processor cause the computer processor to perform steps for setting up a private communication link to a service offered by a producer in a public cloud environment, the steps comprising:

monitoring the public cloud environment for one or more metadata tags associated with a corresponding one or more services offered by one or more producers;

responsive to the monitoring, extracting metadata from an identified first metadata tag associated with a service offered by a producer;

configuring a producer-side private link service to a private communication link for accessing the service based on the extracted metadata, wherein the producer-side private link service is located within a logical boundary surrounding the producer in the public cloud environment; and

exposing a second metadata tag associated with the private communication link in the public cloud environment,

thereby enabling a requesting consumer to request for and obtain access the service offered by the producer through the private communication link.

15. The computer readable storage medium of claim 14 , wherein the monitoring comprises monitoring for at least one of:

a new metadata tag; and

a metadata tag with updated field values.

16. The computer readable storage medium of claim 15 , wherein extracting metadata from the identified first metadata tag comprises extracting field values from the identified first metadata tag, the field values comprising one or more of:

name of the service;

scope of exposure of the service; and

parameters of an active probe test for the service.

17. The computer readable storage medium of claim 14 , the steps further comprising steps for setting up a private communication link to access a service by a consumer in the public cloud environment, the steps comprising:

monitoring the public cloud environment for one or more metadata tags associated with a corresponding one or more private communication links to services offered by one or more producers;

responsive to the monitoring, extracting metadata from an identified metadata tag associated with a private communication link to a service offered by a producer; and

configuring a consumer-side private link endpoint to the private communication link based on the extracted metadata, wherein the consumer-side private link endpoint is located within a logical boundary surrounding the consumer in the public cloud environment,

thereby enabling the consumer to request and obtain access to the service offered by the producer through the private communication link.

18. The computer readable storage medium of claim 17 , wherein extracting metadata from the identified metadata tag associated with the private communication link to the service offered by the producer comprises extracting field values from the identified metadata tag, the field values comprising one or more of:

name of the service;

scope of exposure of the service; and

parameters of an active probe test for the service.

19. A computer system comprising:

a computer processor; and

a non-transitory computer readable storage medium for storing instructions that when executed by a computer processor cause the computer processor to perform steps for setting up a private communication link to a service offered by a producer in a public cloud environment, the steps comprising:

monitoring the public cloud environment for one or more metadata tags associated with a corresponding one or more services offered by one or more producers;

responsive to the monitoring, extracting metadata from an identified first metadata tag associated with a service offered by a producer;

configuring a producer-side private link service to a private communication link for accessing the service based on the extracted metadata, wherein the producer-side private link service is located within a logical boundary surrounding the producer in the public cloud environment; and

exposing a second metadata tag associated with the private communication link in the public cloud environment,

thereby enabling a requesting consumer to request for and obtain access the service offered by the producer through the private communication link.

20. The computer system of claim 19 , wherein the non-transitory computer readable storage medium for storing instructions that when executed by a computer processor cause the computer processor to perform further steps for setting up a private communication link to access a service by a consumer in the public cloud environment, the steps comprising:

monitoring the public cloud environment for one or more metadata tags associated with a corresponding one or more private communication links to services offered by one or more producers;

responsive to the monitoring, extracting metadata from an identified metadata tag associated with a private communication link to a service offered by a producer; and

configuring a consumer-side private link endpoint to the private communication link based on the extracted metadata, wherein the consumer-side private link endpoint is located within a logical boundary surrounding the consumer in the public cloud environment,

thereby enabling the consumer to request and obtain access to the service offered by the producer through the private communication link.