{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-119-use-the-hcn-api-at-the-application-to-host-networking-boundary/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260908-119-use-the-hcn-api-at-the-application-to-host-networking-boundary/", "slug": "dse-20260908-119-use-the-hcn-api-at-the-application-to-host-networking-boundary", "url": "https://update.dsesecurity.com/updates/dse-20260908-119-use-the-hcn-api-at-the-application-to-host-networking-boundary/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260908-119-use-the-hcn-api-at-the-application-to-host-networking-boundary.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-119-use-the-hcn-api-at-the-application-to-host-networking-boundary/" }, "title": "Use the HCN API at the application-to-host networking boundary", "summary": "When should a Windows networking integration use Host Compute Network API objects?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "network-infrastructure", "label": "Networks & infrastructure", "alt": "Resilient network core with engineered blue and gold data paths.", "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-08T18:15:12+00:00", "modified_at": "2026-09-08T18:23:27+00:00", "reviewed_on": "2026-09-08", "reading_minutes": 1, "word_count": 201, "potentially_affected": "Developers integrating Windows VM or container networking with the HCN service API.", "dse_recommendation": "Document which application component owns each HCN object and which operations it may perform.", "primary_source": { "name": "Host Compute Network (HCN) service API for VMs and containers", "url": "https://learn.microsoft.com/en-us/windows-server/networking/technologies/hcn/hcn-top", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Microsoft exposes Host Compute Network as a Win32 API for managing virtual networks, endpoints, and related policies on a Windows host. The API creates, changes, deletes, and enumerates networks, endpoints, namespaces, and policies. Operations use object handles that are implemented internally as RPC context handles. Microsoft identifies developers as the API’s audience; end users do not interact with it directly. Microsoft documentation.

\n

Applicability

\n

Identify the application workflow, Windows platform, networking objects, and schema version the integration will use. Distinguish this host-platform interface from an operator’s tenant-network configuration procedure.

\n

DSE recommendation

\n

Document which application component owns each HCN object and which operations it may perform. Review object lifetimes, error handling, and cleanup with the developers responsible for the host integration. Keep a small representative configuration document and expected object inventory for the implementation review.

\n

Verification

\n

In an isolated development environment, exercise the intended create, inspect, update, and cleanup sequence. Compare the resulting objects and connectivity with the application’s expected state. Record failed operations and remaining objects explicitly, and verify that cleanup affects only the objects owned by the test workflow.

\n

Official references

\n

Microsoft Learn: Host Compute Network (HCN) service API for VMs and containers. Source reviewed September 8, 2026.

", "content_text": "Source facts\nMicrosoft exposes Host Compute Network as a Win32 API for managing virtual networks, endpoints, and related policies on a Windows host. The API creates, changes, deletes, and enumerates networks, endpoints, namespaces, and policies. Operations use object handles that are implemented internally as RPC context handles. Microsoft identifies developers as the API’s audience; end users do not interact with it directly. Microsoft documentation.\nApplicability\nIdentify the application workflow, Windows platform, networking objects, and schema version the integration will use. Distinguish this host-platform interface from an operator’s tenant-network configuration procedure.\nDSE recommendation\nDocument which application component owns each HCN object and which operations it may perform. Review object lifetimes, error handling, and cleanup with the developers responsible for the host integration. Keep a small representative configuration document and expected object inventory for the implementation review.\nVerification\nIn an isolated development environment, exercise the intended create, inspect, update, and cleanup sequence. Compare the resulting objects and connectivity with the application’s expected state. Record failed operations and remaining objects explicitly, and verify that cleanup affects only the objects owned by the test workflow.\nOfficial references\nMicrosoft Learn: Host Compute Network (HCN) service API for VMs and containers. Source reviewed September 8, 2026.", "content_markdown": "## Source facts\n\nMicrosoft exposes Host Compute Network as a Win32 API for managing virtual networks, endpoints, and related policies on a Windows host. The API creates, changes, deletes, and enumerates networks, endpoints, namespaces, and policies. Operations use object handles that are implemented internally as RPC context handles. Microsoft identifies developers as the API’s audience; end users do not interact with it directly. [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/networking/technologies/hcn/hcn-top).\n\n## Applicability\n\nIdentify the application workflow, Windows platform, networking objects, and schema version the integration will use. Distinguish this host-platform interface from an operator’s tenant-network configuration procedure.\n\n## DSE recommendation\n\nDocument which application component owns each HCN object and which operations it may perform. Review object lifetimes, error handling, and cleanup with the developers responsible for the host integration. Keep a small representative configuration document and expected object inventory for the implementation review.\n\n## Verification\n\nIn an isolated development environment, exercise the intended create, inspect, update, and cleanup sequence. Compare the resulting objects and connectivity with the application’s expected state. Record failed operations and remaining objects explicitly, and verify that cleanup affects only the objects owned by the test workflow.\n\n## Official references\n\n[Microsoft Learn: Host Compute Network (HCN) service API for VMs and containers](https://learn.microsoft.com/en-us/windows-server/networking/technologies/hcn/hcn-top). Source reviewed September 8, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260908-119-use-the-hcn-api-at-the-application-to-host-networking-boundary/", "url": "https://update.dsesecurity.com/updates/dse-20260908-119-use-the-hcn-api-at-the-application-to-host-networking-boundary/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-08" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260908-119-use-the-hcn-api-at-the-application-to-host-networking-boundary/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Use the HCN API at the application-to-host networking boundary", "item": "https://update.dsesecurity.com/updates/dse-20260908-119-use-the-hcn-api-at-the-application-to-host-networking-boundary/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260908-119-use-the-hcn-api-at-the-application-to-host-networking-boundary/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260908-119-use-the-hcn-api-at-the-application-to-host-networking-boundary/", "url": "https://update.dsesecurity.com/updates/dse-20260908-119-use-the-hcn-api-at-the-application-to-host-networking-boundary/", "headline": "Use the HCN API at the application-to-host networking boundary", "description": "When should a Windows networking integration use Host Compute Network API objects?", "abstract": "When should a Windows networking integration use Host Compute Network API objects?", "articleBody": "Source facts\nMicrosoft exposes Host Compute Network as a Win32 API for managing virtual networks, endpoints, and related policies on a Windows host. The API creates, changes, deletes, and enumerates networks, endpoints, namespaces, and policies. Operations use object handles that are implemented internally as RPC context handles. Microsoft identifies developers as the API’s audience; end users do not interact with it directly. Microsoft documentation.\nApplicability\nIdentify the application workflow, Windows platform, networking objects, and schema version the integration will use. Distinguish this host-platform interface from an operator’s tenant-network configuration procedure.\nDSE recommendation\nDocument which application component owns each HCN object and which operations it may perform. Review object lifetimes, error handling, and cleanup with the developers responsible for the host integration. Keep a small representative configuration document and expected object inventory for the implementation review.\nVerification\nIn an isolated development environment, exercise the intended create, inspect, update, and cleanup sequence. Compare the resulting objects and connectivity with the application’s expected state. Record failed operations and remaining objects explicitly, and verify that cleanup affects only the objects owned by the test workflow.\nOfficial references\nMicrosoft Learn: Host Compute Network (HCN) service API for VMs and containers. Source reviewed September 8, 2026.", "datePublished": "2026-09-08T18:15:12+00:00", "dateModified": "2026-09-08T18:23:27+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260908-119-use-the-hcn-api-at-the-application-to-host-networking-boundary/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260908-119-use-the-hcn-api-at-the-application-to-host-networking-boundary/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Use the HCN API at the application-to-host networking boundary" }, "articleSection": [ "IT", "Networks & Infrastructure" ], "keywords": [ "IT", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 201, "timeRequired": "PT1M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Host Compute Network (HCN) service API for VMs and containers", "url": "https://learn.microsoft.com/en-us/windows-server/networking/technologies/hcn/hcn-top" } } ] } }