US 12,335,233 B2
Securing metrics for a pod
Alex John Hockey, London (GB); and James Warren Turner, London (GB)
Assigned to MICROSOFT TECHNOLOGY LICENSING, LLC, Redmond, WA (US)
Filed by MICROSOFT TECHNOLOGY LICENSING, LLC, Redmond, WA (US)
Filed on Jun. 23, 2022, as Appl. No. 17/847,356.
Claims priority of application No. 2206224 (GB), filed on Apr. 28, 2022.
Prior Publication US 2023/0353535 A1, Nov. 2, 2023
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/0236 (2013.01) [H04L 63/0428 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method for securing metrics relating to a pod orchestrated by a container orchestration platform implementing a service mesh, wherein a sidecar proxy container is installed in the pod along with network routing rules to redirect application traffic via the sidecar proxy container, the metrics secured prior to transmission of the metrics to a metrics collection service, the method comprising:
receiving a secure request having an IP address of the pod;
forwarding the secure request to a container of the pod identified by the IP address;
receiving an unsecure request having the IP address of the pod;
redirecting, via the sidecar proxy container, the unsecure request to an internal router;
examining, by the internal router, content of the received unsecure request;
based on the examining, determining, by the internal router, whether the received unsecure request includes a request for metrics information;
passing, by the internal router, the received unsecure request to an original destination of the received unsecure request within the pod identified by the IP address when the received unsecure request does not include a request for metrics information; and
rejecting, by the internal router, the received unsecure request when the received unsecure request includes a request for metrics information.