Abstract: Various embodiments disclosed herein provide techniques for messaging among message groups associated with agents executing on nodes of a mesh network. A messaging application executing on a node of the mesh network receives content for a first message from an agent executing on the first node, the first message being for a first message group; and transmits a composite message to a second messaging application executed by a second node of the mesh network, the composite message including the first message and a second message for a second message group.

Abstract: Various embodiments disclosed herein provide techniques for messaging among message groups associated with agents executing on nodes of a mesh network. A messaging application executing on a node of the mesh network receives a request from an agent executing on the first node to join a message group; verifies that a policy permits the agent to join the message group; adds the agent to the message group; receives, from the agent, content for a message for the message group; and transmits the message to a second messaging application of a second node of the mesh network for delivery to an agent that is executing on the second node and that is included in the message group. In various embodiments, the messaging application receives, from another node of the mesh network, a second message for the message group, and delivers content from the second message to the agent.

Abstract: Various embodiments disclosed herein provide techniques for managing encryption keys at nodes in a mesh network. In various embodiments, a method includes, while in a key failure detection time period associated with a first key, detecting, by a node in a mesh network, a decryption failure using the first key; in response to detecting the decryption failure using the first key, incrementing, by the node, a failure count for the first key; and in response to determining that the failure count is at least a threshold count and a key update time period has been entered, transmitting, by the node to a key management service, a request for an update to the first key.

Abstract: Various embodiments disclosed herein provide techniques for managing encryption keys at nodes in a mesh network. In various embodiments, a method includes receiving, by a first node in a network, a first message from a second node; determining, by the first node, that a first key usable by the first node to decrypt the first message is outdated based on a comparison of a first key version identifier associated with the first key and a second key version identifier associated with a second key, where the second key was used to encrypt the first message, and the second key version identifier is received from the second node with the first message; and in response to determining that the first key is outdated, transmitting, by the first node to a key management service, a first request for an updated version of the first key to replace the first key.

Abstract: Various embodiments disclosed herein provide techniques for messaging among agents executing on nodes a mesh network. In various embodiments, a method includes receiving, by a messaging application executing on a node of a mesh network, content for a message from an agent executing on the node; verifying, by the messaging application, that a policy permits delivery of the message; and transmitting, by the messaging application, the message to another messaging application executing on another node of the mesh network.

Abstract: Techniques are directed to controlling access to resources on a message bus of a network communication device. The techniques may include, by the network communication device, processing a message bus access policy file uniquely corresponding to a process. The message bus access policy file may include a certificate securely associating the message bus access policy file with the process. The techniques may further include, by the network communication device, based at least in part on the processing the message bus access policy file, exposing one or more resources of the network communication device to the process on the message bus, in a manner corresponding to at least one resource access permission indication contained within the message bus access policy file.

Abstract: Techniques are directed to controlling access to resources on a message bus of a network communication device. The techniques may include, by the network communication device, processing a message bus access policy file uniquely corresponding to a process. The message bus access policy file may include a certificate securely associating the message bus access policy file with the process. The techniques may further include, by the network communication device, based at least in part on the processing the message bus access policy file, exposing one or more resources of the network communication device to the process on the message bus, in a manner corresponding to at least one resource access permission indication contained within the message bus access policy file.

Abstract: Techniques are directed to controlling access to resources on a message bus of a network communication device. The techniques may include, by the network communication device, processing a message bus access policy file uniquely corresponding to a process. The message bus access policy file may include a certificate securely associating the message bus access policy file with the process. The techniques may further include, by the network communication device, based at least in part on the processing the message bus access policy file, exposing one or more resources of the network communication device to the process on the message bus, in a manner corresponding to at least one resource access permission indication contained within the message bus access policy file.

Abstract: Techniques are directed to controlling access to resources on a message bus of a network communication device. The techniques may include, by the network communication device, processing a message bus access policy file uniquely corresponding to a process. The message bus access policy file may include a certificate securely associating the message bus access policy file with the process. The techniques may further include, by the network communication device, based at least in part on the processing the message bus access policy file, exposing one or more resources of the network communication device to the process on the message bus, in a manner corresponding to at least one resource access permission indication contained within the message bus access policy file.