Cloud workload proxy as link-local service configured to access a service proxy gateway via a link-local IP address to communicate with an external target service via a private network
Concepts and technologies disclosed herein are directed to a cloud workload proxy as link-local service. According to one aspect disclosed herein, a datacenter environment system can include an infrastructure network, a service proxy gateway attached to the infrastructure network, and a software-defined networking (“SDN”) controller. The service proxy gateway can include an infrastructure network address. The SDN controller can be configured with a link-local Internet protocol (“IP”) address to the infrastructure network address. The SDN controller can store the link-local IP address mapped to the infrastructure network address for routing packets from a workload executing in a cloud computing environment to a target service operating external to the datacenter environment system.
1. A datacenter environment system comprising:
an overlay network;
an infrastructure network;
a plurality of cloud workloads connected to the overlay network, wherein
a first cloud workload of the plurality of cloud workloads has access through the overlay network and a public network to a target service that is external to the datacenter environment system,
a second cloud workload of the plurality of cloud workloads has access through the overlay network and a private network to the target service that is external to the datacenter environment system, and
a third cloud workload of the plurality of cloud workloads does not have access through the overlay network and either the public network or the private network to the target service external to the datacenter environment system;
a processor; and
a memory comprising computer-executable instructions that, when executed by the processor, cause the processor to perform operations comprising
instantiating a service proxy gateway within the datacenter environment system, wherein the service proxy gateway is attached to the infrastructure network and comprises an infrastructure network IP address,
configuring a software-defined network controller with a link-local IP address mapped to the infrastructure IP address of the service proxy gateway, and
instantiating a first instance of a link-local service on the first cloud workload, a second instance of the link-local service on the second cloud workload, and a third instance of the link-local service on the third cloud workload, wherein the link-local service configures the first cloud workload, the second cloud workload, and the third cloud workload with access to the service proxy gateway via the link-local IP address to enable each of the first cloud workload, the second cloud workload, and the third cloud workload to communicate with the target service external to the datacenter environment system via the private network.
2. The datacenter environment system of claim 1 , further comprising a cloud computing environment comprising a plurality of hardware resources; wherein the plurality of hardware resources comprise the processor and the memory; and wherein the service proxy gateway is instantiated using at least a portion of the plurality of hardware resources.
3. The datacenter environment system of claim 2 , wherein the plurality of cloud workloads operate on at least a further portion of the plurality of hardware resources.
4. The datacenter environment system of claim 3 , wherein at least one the first cloud workload, the second cloud workload, and the third cloud workload comprises data to be sent to the target service.
5. The datacenter environment system of claim 4 , wherein the at least one of the first cloud workload, the second cloud workload, and the third cloud workload, when executed, performs operations comprising sending packets associated with the data to the service proxy gateway via the link-local IP address.
6. The datacenter environment system of claim 5 , wherein the service proxy gateway performs operations comprising forwards the packets to the target service.
7. The datacenter environment system of claim 6 , wherein the target service comprises a security service.
8. A method comprising:
instantiating, by a datacenter environment system, a service proxy gateway attached to an infrastructure network, wherein the service proxy gateway comprises an infrastructure network IP address;
configuring, by the datacenter environment system, a software-defined network controller with a link-local IP address mapped to the infrastructure IP address of the service proxy gateway; and
instantiating, by the datacenter environment system, a first instance of a link-local service on a first cloud workload of a plurality of cloud workloads, a second instance of the link-local service on a second cloud workload of the plurality of cloud workloads, and a third instance of the link-local service on a third cloud workload of the plurality of cloud workloads, wherein the first cloud workload of the plurality of cloud workloads has access through an overlay network and a public network to a target service that is external to the datacenter environment system, wherein the second cloud workload of the plurality of cloud workloads has access through the overlay network and a private network to the target service that is external to the datacenter environment system, wherein the third cloud workload of the plurality of cloud workloads does not have access through the overlay network and either the public network or the private network to the target service external to the datacenter environment system, and wherein the link-local service configures the first cloud workload, the second cloud workload, and the third cloud workload with access to the service proxy gateway via the link-local IP address to enable each of the first cloud workload, the second cloud workload, and the third cloud workload to communicate with the target service external to the datacenter environment system via the private network.
9. The method of claim 8 , wherein instantiating the service proxy gateway comprises instantiating the service proxy gateway using at least a portion of a plurality of hardware resources of a cloud computing environment.
10. The method of claim 9 , wherein the plurality of cloud workloads operate on at least a further portion of the plurality of hardware resources of the cloud computing environment.
11. The method of claim 10 , wherein at least one of the first cloud workload, the second cloud workload, and the third cloud workload comprises data to be sent to the target service.
12. The method of claim 11 , further comprising sending, by the at least one of the first cloud workload, the second cloud workload, and the third cloud workload, packets associated with the data to the service proxy gateway via the link-local IP address.
13. The method of claim 12 , further comprising forwarding, by the service proxy gateway, the packets to the target service.
14. A computer-readable storage medium having instructions stored thereon that, when executed by at least a portion of a plurality of hardware components of a cloud computing environment, cause the portion of the plurality of hardware components to perform operations comprising:
instantiating a service proxy gateway attached to an infrastructure network, wherein the service proxy gateway comprises an infrastructure network IP address;
configuring a software-defined network controller with a link-local IP address mapped to the infrastructure IP address of the service proxy gateway; and
instantiating a first instance of a link-local service on a first cloud workload of a plurality of cloud workloads, a second instance of the link-local service on a second cloud workload of the plurality of cloud workloads, and a third instance of the link-local service on a third cloud workload of the plurality of cloud workloads, wherein the first cloud workload of the plurality of cloud workloads has access through an overlay network and a public network to a target service that is external to the datacenter environment system, wherein the second cloud workload of the plurality of cloud workloads has access through the overlay network and a private network to the target service that is external to a datacenter environment system, wherein the third cloud workload of the plurality of cloud workloads does not have access through the overlay network and either the public network or the private network to the target service external to the datacenter environment system, and wherein the link-local service configures the first cloud workload, the second cloud workload, and the third cloud workload with access to the service proxy gateway via the link-local IP address to enable each of the first cloud workload, the second cloud workload, and the third cloud workload to communicate with the target service external to the datacenter environment system via the private network.
15. The computer-readable storage medium of claim 14 , wherein at least one of the first cloud workload, the second cloud workload, and the third cloud workload comprises data to be sent to the target service external to the infrastructure network.
16. The computer-readable storage medium of claim 15 , wherein the target service comprises a security service.
17. The computer-readable storage medium of claim 15 , wherein the operations further comprise sending packets associated with the data to the service proxy gateway via the link-local IP address.
18. The computer-readable storage medium of claim 17 , wherein the operations further comprise forwarding the packets to the target service.