Abstract: A data packet associated with a data request is analyzed at a load balancing node of a cloud service. The cloud service comprises a plurality of computing nodes. A computing node included in the plurality of computing nodes is selected to service the data request, based at least in part on a determination via from an analysis that the selected computing node is associated with a workload associated with the data request. The data packet associated with the data request is provided to the selected computing node. The computing node selects a workload from one or more workloads hosted by the computing node to handle the data request.

Abstract: One or more security groups associated with a cloud provider are determined. One or more network polices associated with a container-orchestrator system are determined. One or more network security policies are generated based on the one or more determined security groups associated with the cloud provider and the one or more determined network policies associated with the container. The one or more network security policies are distributed to one or more VM instances of a cloud network. The one or more VM instances are configured to enforce network security based on the one or more network security policies.

Abstract: One or more security groups associated with a cloud provider are determined. One or more network polices associated with a container-orchestrator system are determined. One or more network security policies are generated based on the one or more determined security groups associated with the cloud provider and the one or more determined network policies associated with the container. The one or more network security policies are distributed to one or more VM instances of a cloud network. The one or more VM instances are configured to enforce network security based on the one or more network security policies.

Abstract: Metadata associated with a workload is received. The workload is one of a plurality of workloads hosted on a host. A caused to generate one or more flow events associated with the workload. The one or more flow events generated by the host are processed to generate one or more corresponding scalable network flow events. A flow log comprising the one or more corresponding scalable network flow events is forwarded to a flow log receiver. The flow log receiver is configured to store the one or more corresponding scalable network flow events in a flow log store.