5 ms·

Frankly I don't see this working unless Windows Server has MUCH better support for IO and Network prioritisation than it does today. You can set a process's CP

Frankly I don't see this working unless Windows Server has MUCH better support for IO and Network prioritisation than it does today. You can set a process's CPU schedule, you can also set it to a "background" priority which reduces both its CPU and IO to the lowest, but you don't really have fine-tune control of how much IO/Network a process has (irrespective of CPU). This means on Windows in general it is very easy for a single process to run away with all of the machine's IO and there isn't a lot you can do about it except killing the process (I've seen backup clients, anti-virus scanners, etc do this). It wouldn't be as big of a problem on Linux because first off the IO scheduler seems to be better, but even if it wasn't you can go in and manually configure a process's maximum throughput in a bunch of different ways. If Windows didn't support this then what is stopping a single Windows-Docker container from stealing all of the system's IO or network capacity?

monstermonster 12y ago
The recommended way of doing this is to use Hyper-V and multiple VMs. Windows VMs start very fast on Hyper-V. That gives you virtual LAN bandwidth control, "Storage QoS" (IOPS limits), partitioning, affinity and CPU limits. Not only that you have virtual SAN and network fabric. It's pretty awesome! If you utilise it by deploying your app to a .wim file and then use wim2vhd and fart it at a Hyper-V host, docker already exists on Windows so I'm not sure what all the fuss is. Yes we do this.
- UnoriginalGuy 12y ago
  Because running a Hyper-V virtual machine is significantly more resource intensive than running a true Docker container. Hyper-V and similar are great. They aren't as good as containers however. You gain more security with Hyper-V but even assuming full hardware support it is still an expensive thing to be doing. On a normal desktop machine you can run maybe 2-4 virtual machines (depending on a lot of factors). On that same machine you would want to see 4-10 containers each container doing one "thing" and one thing only.
  - krakensden 12y ago
    > Because running a Hyper-V virtual machine is significantly more resource intensive than running a true Docker container. I suspect that no one really cares. CPUs are pretty cheap. The problem that docker solves is "0 dependency single-step installs, and reliable rollbacks" not "VMs are too slow". This is true on Linux too, btw- linux containers are still pretty feeble from a security perspective, without draconian seccomp sandboxing.
    - derefr 12y ago
      No: the problem is that VMs are too slow, and therefore you need to spread them out over more machines, and therefore VMs are too expensive. Otherwise, why not just make every container a full EC2 instance? All the analogous tech to Docker has existed in the AWS+OpenStack ecosystem for a decade; it's just that nobody is willing to pay $50/mo per container. An entire huge company (Heroku) lives off the profit margin that is created by paying for VMs, then selling containers at VM prices.
      - nickstinemates 12y ago
        I agree with both of you, for different reasons. The infrastructure benefits are completely there in terms of driving up utilization/density of the hardware you're buying. I feel (and know!) there will be a lot of optimization on making this happen. On the other hand, there are some insecure multi-tenancy concerns for which VMs still offer better isolation. That's ok, because Docker is not about virtualization, it's about a platform for distributed applications. Thus, finding the right/secure/optimal/? place to run your container should be straightforward and intuitive. That's the direction we're looking to take the industry.
      - krakensden 12y ago
        > the problem is that VMs are too slow, and therefore you need to spread them out over more machines, and therefore VMs are too expensive I think what you really mean is that you can't control the overcommit policy on AWS. Otherwise, if VMs were too slow, why would you be running on AWS at all? > Otherwise, why not just make every container a full EC2 instance? A lot of people have full EC2 instances running a single container. Or full machines. If you want to upgrade your database software, atomic, full system rollback looks pretty enticing, especially if your database machines are huge, hugely expensive, and you don't have that many spares.
- omh 12y ago
  Unfortunately you need a Windows license per VM. I guess that at many places you'd just buy datacenter edition, but that's a bit too much for small businesses.
  - monstermonster 12y ago
    Yes we have datacentre edition and VL stuff. Small business: Use azure.
  - teepo 12y ago
    Or just use Windows Datacetner Ed on your hypervisor. Most cloud providers have that as an option. It's like $200 a month and you can run as many VMs as your hardware will support.
  - peschkaj 12y ago
    If you're using Hyper-V, you get an unlimited number of guests if you've purchased Windows Server Enterprise Edition. Last I checked, it's not even that expensive of an upgrade.

monstermonster 12y ago

The recommended way of doing this is to use Hyper-V and multiple VMs. Windows VMs start very fast on Hyper-V. That gives you virtual LAN bandwidth control, "Storage QoS" (IOPS limits), partitioning, affinity and CPU limits. Not only that you have virtual SAN and network fabric. It's pretty awesome! If you utilise it by deploying your app to a .wim file and then use wim2vhd and fart it at a Hyper-V host, docker already exists on Windows so I'm not sure what all the fuss is. Yes we do this.

UnoriginalGuy 12y ago
Because running a Hyper-V virtual machine is significantly more resource intensive than running a true Docker container. Hyper-V and similar are great. They aren't as good as containers however. You gain more security with Hyper-V but even assuming full hardware support it is still an expensive thing to be doing. On a normal desktop machine you can run maybe 2-4 virtual machines (depending on a lot of factors). On that same machine you would want to see 4-10 containers each container doing one "thing" and one thing only.
- krakensden 12y ago
  > Because running a Hyper-V virtual machine is significantly more resource intensive than running a true Docker container. I suspect that no one really cares. CPUs are pretty cheap. The problem that docker solves is "0 dependency single-step installs, and reliable rollbacks" not "VMs are too slow". This is true on Linux too, btw- linux containers are still pretty feeble from a security perspective, without draconian seccomp sandboxing.
  - derefr 12y ago
    No: the problem is that VMs are too slow, and therefore you need to spread them out over more machines, and therefore VMs are too expensive. Otherwise, why not just make every container a full EC2 instance? All the analogous tech to Docker has existed in the AWS+OpenStack ecosystem for a decade; it's just that nobody is willing to pay $50/mo per container. An entire huge company (Heroku) lives off the profit margin that is created by paying for VMs, then selling containers at VM prices.
    - nickstinemates 12y ago
      I agree with both of you, for different reasons. The infrastructure benefits are completely there in terms of driving up utilization/density of the hardware you're buying. I feel (and know!) there will be a lot of optimization on making this happen. On the other hand, there are some insecure multi-tenancy concerns for which VMs still offer better isolation. That's ok, because Docker is not about virtualization, it's about a platform for distributed applications. Thus, finding the right/secure/optimal/? place to run your container should be straightforward and intuitive. That's the direction we're looking to take the industry.
    - krakensden 12y ago
      > the problem is that VMs are too slow, and therefore you need to spread them out over more machines, and therefore VMs are too expensive I think what you really mean is that you can't control the overcommit policy on AWS. Otherwise, if VMs were too slow, why would you be running on AWS at all? > Otherwise, why not just make every container a full EC2 instance? A lot of people have full EC2 instances running a single container. Or full machines. If you want to upgrade your database software, atomic, full system rollback looks pretty enticing, especially if your database machines are huge, hugely expensive, and you don't have that many spares.
omh 12y ago
Unfortunately you need a Windows license per VM. I guess that at many places you'd just buy datacenter edition, but that's a bit too much for small businesses.
- monstermonster 12y ago
  Yes we have datacentre edition and VL stuff. Small business: Use azure.
- teepo 12y ago
  Or just use Windows Datacetner Ed on your hypervisor. Most cloud providers have that as an option. It's like $200 a month and you can run as many VMs as your hardware will support.
- peschkaj 12y ago
  If you're using Hyper-V, you get an unlimited number of guests if you've purchased Windows Server Enterprise Edition. Last I checked, it's not even that expensive of an upgrade.