Methods and systems are disclosed for secure bi-directional message routing between services running on a different nodes in a computer cluster. According to some embodiments, a multi-tenant computer cluster is accessed online via a controller. The controller, acting as central management system, may establish secure independent connections with each of the many nodes. Messages from the controller to any given node, and vice versa, are wrapped in a routing envelope and transferred over an independent and secure virtual private network tunnel. This allows the plurality of nodes to be centrally managed and utilized as a cluster while not being allowed to communicate with each other.