Abstract: Provided is a method for securing network traffic flow in a multi-service containerized application, including: obtaining, with one or more processors, a composition record defining a multi-service containerized application; analyzing, with one or more processors, the composition record to look for one or both of network traffic patterns and network traffic flow; adding, with one or more processors, to the composition record a configured firewall container definition of a network traffic enforcement container that upon execution of the multi-service containerized application is communicatively coupled between a first container and a second container of the multi-service containerized application, wherein the first container and the second container are configured to communicate with each other across a first virtualized network; and converting, with one or more processors, the first virtualized network between the first container and the second container into a second virtualized network and a third virtualiz

Abstract: Provided is a method for a method of transforming service definitions in a multi-service containerized application, including: receiving input, with one or more processors, relating to creation and laying out of a plurality of icons on a canvas, wherein the plurality of icons represent a plurality of containers of a multi-service containerized application; receiving input, with one or more processors, relating to at least one pair of the plurality of containers being communicatively coupled with each other, wherein a visual representation of the coupling of the containers is displayed on the canvas in association with corresponding icons; and saving, with one or more processors, the multi-service containerized application with an assigned name to a catalog, wherein the containers are service components of the multi-service containerized application, and wherein the containers provide isolated user space instances on one or more kernels.

Abstract: Provided is a method for a method of transforming service definitions in a multi-service containerized application, including: receiving input, with one or more processors, relating to creation and laying out of a plurality of icons on a canvas, wherein the plurality of icons represent a plurality of containers of a multi-service containerized application; receiving input, with one or more processors, relating to at least one pair of the plurality of containers being communicatively coupled with each other, wherein a visual representation of the coupling of the containers is displayed on the canvas in association with corresponding icons; and saving, with one or more processors, the multi-service containerized application with an assigned name to a catalog, wherein the containers are service components of the multi-service containerized application, and wherein the containers provide isolated user space instances on one or more kernels.

Abstract: Provided is a method for securing network traffic flow in a multi-service containerized application, including: obtaining, with one or more processors, a composition record defining a multi-service containerized application; analyzing, with one or more processors, the composition record to look for one or both of network traffic patterns and network traffic flow; adding, with one or more processors, to the composition record a configured firewall container definition of a network traffic enforcement container that upon execution of the multi-service containerized application is communicatively coupled between a first container and a second container of the multi-service containerized application, wherein the first container and the second container are configured to communicate with each other across a first virtualized network; and converting, with one or more processors, the first virtualized network between the first container and the second container into a second virtualized network and a third virtualiz