Abstract: According to one aspect disclosed herein, a cloud-native firewall system can receive, from a client operating in a first network, a request for access to a service operating in a second network. In response, the cloud-native firewall system can retrieve, from a service registry, metadata associated with the service. The cloud-native firewall system can execute, based at least in part upon the metadata, a policy rule to determine whether to allow/deny the client access to the service. The metadata can include a dynamic IP address and a port number associated with a system that provides, at least in part, the service. The metadata can further include an authentication type and an authentication provider. If the cloud-native firewall system determines to allow access to the service, the cloud-native firewall can forward the request to the service for processing. Otherwise, the cloud-native firewall system can block access to the service.

Abstract: Dynamic registration of listener resources for cloud services is disclosed. Example methods disclosed herein for cloud service listener registration include registering, at a registry server, information identifying listener resources for processing client requests associated with respective cloud services, the cloud services including a first cloud service. Some example methods also include providing first information to a client in response to a request to provide listener information for a first cloud service. In some such examples, the first information identifies a first listener resource registered for processing client requests associated with the first cloud service.

Abstract: Dynamic registration of listener resources for cloud services is disclosed. Example methods disclosed herein for cloud service listener registration include registering, at a registry server, information identifying listener resources for processing client requests associated with respective cloud services, the cloud services including a first cloud service. Some example methods also include providing first information to a client in response to a request to provide listener information for a first cloud service. In some such examples, the first information identifies a first listener resource registered for processing client requests associated with the first cloud service.