Abstract: Concepts and technologies disclosed herein are directed to a cloud workload proxy as link-local service. According to one aspect disclosed herein, a datacenter environment system can include an infrastructure network, a service proxy gateway attached to the infrastructure network, and a software-defined networking (“SDN”) controller. The service proxy gateway can include an infrastructure network address. The SDN controller can be configured with a link-local Internet protocol (“IP”) address to the infrastructure network address. The SDN controller can store the link-local IP address mapped to the infrastructure network address for routing packets from a workload executing in a cloud computing environment to a target service operating external to the datacenter environment system.

Abstract: A universal security agent deployed on a computing endpoint includes one or both of a base agent and a security agent plugin module. The base agent loads the security agent plugin module and, in response, receives plugin tasks from the security agent plugin module for registration. The base agent schedules the received plugin tasks based on a policy and/or a system access information associated with the security agent plugin module. Further, the base agent executes the plugin tasks based on the scheduling. The base agent controls system access requests generated during the execution of the plugin tasks based on the policy associated with the security agent plugin module. Additionally, the base agent monitors and logs system access information associated with the security agent plugin module.

Abstract: Concepts and technologies disclosed herein are directed to a cloud workload proxy as link-local service. According to one aspect disclosed herein, a datacenter environment system can include an infrastructure network, a service proxy gateway attached to the infrastructure network, and a software-defined networking (“SDN”) controller. The service proxy gateway can include an infrastructure network address. The SDN controller can be configured with a link-local Internet protocol (“IP”) address to the infrastructure network address. The SDN controller can store the link-local IP address mapped to the infrastructure network address for routing packets from a workload executing in a cloud computing environment to a target service operating external to the datacenter environment system.

Abstract: A universal security agent deployed on a computing endpoint includes one or both of a base agent and a security agent plugin module. The base agent loads the security agent plugin module and, in response, receives plugin tasks from the security agent plugin module for registration. The base agent schedules the received plugin tasks based on a policy and/or a system access information associated with the security agent plugin module. Further, the base agent executes the plugin tasks based on the scheduling. The base agent controls system access requests generated during the execution of the plugin tasks based on the policy associated with the security agent plugin module. Additionally, the base agent monitors and logs system access information associated with the security agent plugin module.