3 ms·
Or (dare I say) look into EKS. Kubernetes can spin up containers faster than ECS in my experience (as of ~1 year ago). Seems like the ECS control plane just has
by nijave 4y ago
Or (dare I say) look into EKS. Kubernetes can spin up containers faster than ECS in my experience (as of ~1 year ago). Seems like the ECS control plane just has more latency (even with EC2 instead of Fargate)
- shalabhc 4y agoIs EKS safe for multi-tenant use? When we looked it appeared unsafe if we want to run our users code next to each other because of possible isolation issues.
- nijave 4y agoI guess that depends on your use case and risk profile. Linux containers are a pretty well established isolation mechanism and you can potentially add some additional safety with per-tenant dedicated nodepools. If pods have added privileges or there is a really low risk tolerance, maybe that's not enough isolation. Sounds like you can change the container runtime with EKS (not sure if that impacts AWS support) so you could use gVisor or runvm https://www.verygoodsecurity.com/blog/posts/secure-compute-part-2 https://www.verygoodsecurity.com/blog/posts/secure-compute-p...