Systems and methods for embedding service meshes into applications
In one embodiment, a method includes generating an application stack. The application stack includes an application logic module. The method also includes embedding a service mesh module into the application stack. The method further includes managing, by the service mesh module, security of a network packet while maintaining separation of memory regions between the application logic module and the service mesh module.
1. A system, comprising:
one or more processors; and
one or more computer-readable non-transitory storage media coupled to the one or more processors and comprising instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
generating an application stack, wherein the application stack comprises an application logic module that includes application code;
embedding a service mesh module into the application stack, wherein the service mesh module adds security capabilities to the application stack that are separate from the application code; and
managing, by the service mesh module, security of a network packet while maintaining separation of memory regions between the application logic module and the service mesh module.
2. The system of claim 1 , wherein:
the application stack further comprises an application platform module; and
the application platform module, the application logic module, and the service mesh module are WebAssembly (WASM)-based modules.
3. The system of claim 1 , wherein:
the application stack further comprises legacy libraries; and
the service mesh module is run in a security enclave.
4. The system of claim 1 , the operations further comprising initiating, by the service mesh module, a command-and-control center to activate an internal process that connects into a control plane.
5. The system of claim 1 , wherein:
the application logic module is managed by a developer;
the service mesh module is managed by security personnel; and
the developer and the security personnel are associated with different entities.
6. The system of claim 1 , wherein the application stack is hosted on an operating system.
7. The system of claim 6 , wherein a browser is leveraged as the operating system.
8. A method, comprising:
generating an application stack, wherein the application stack comprises an application logic module that includes application code;
embedding a service mesh module into the application stack, wherein the service mesh module adds security capabilities to the application stack that are separate from the application code; and
managing, by the service mesh module, security of a network packet while maintaining separation of memory regions between the application logic module and the service mesh module.
9. The method of claim 8 , wherein:
the application stack further comprises an application platform module; and
the application platform module, the application logic module, and the service mesh module are WebAssembly (WASM)-based modules.
10. The method of claim 8 , wherein:
the application stack further comprises legacy libraries; and
the service mesh module is run in a security enclave.
11. The method of claim 8 , further comprising initiating, by the service mesh module, a command-and-control center to activate an internal process that connects into a control plane.
12. The method of claim 8 , wherein:
the application logic module is managed by a developer;
the service mesh module is managed by security personnel and
the developer and the security personnel are associated with different entities.
13. The method of claim 8 , wherein the application stack is hosted on an operating system.
14. The method of claim 13 , wherein a browser is leveraged as the operating system.
15. One or more computer-readable non-transitory storage media embodying instructions that, when executed by a processor, cause the processor to perform operations comprising:
generating an application stack, wherein the application stack comprises an application logic module that includes application code;
embedding a service mesh module into the application stack, wherein the service mesh module adds security capabilities to the application stack that are separate from the application code; and
managing, by the service mesh module, security of a network packet while maintaining separation of memory regions between the application logic module and the service mesh module.
16. The one or more computer-readable non-transitory storage media of claim 15 , wherein:
the application stack further comprises an application platform module; and
the application platform module, the application logic module, and the service mesh module are WebAssembly (WASM)-based modules.
17. The one or more computer-readable non-transitory storage media of claim 15 , wherein:
the application stack further comprises legacy libraries; and
the service mesh module is run in a security enclave.
18. The one or more computer-readable non-transitory storage media of claim 15 , further comprising initiating, by the service mesh module, a command-and-control center to activate an internal process that connects into a control plane.
19. The one or more computer-readable non-transitory storage media of claim 15 , wherein:
the application logic module is managed by a developer;
the service mesh module is managed by security personnel; and
the developer and the security personnel are associated with different entities.
20. The one or more computer-readable non-transitory storage media of claim 15 , wherein the application stack is hosted on an operating system.