> The problem I have with it is the level that it is done at. Using OS level virtualization (lxc) seems somewhat messy, because now you have to have a whole add

> The problem I have with it is the level that it is done at. Using OS level virtualization (lxc) seems somewhat messy, because now you have to have a whole addition layer of proxies and indirection for any networked services. Nonsense. You can have LXC containers work at directly at ethernet-level with each container having it's own regular network IP, just like a regular VM.[1] Just because the default is to create an internal network doesn't mean LXC is limited to this only. And then all the problems you mention go away. You get the hygenic benfits of a VM without the resource-related cost. [1] Simple example on setting this up on Debian: https://wiki.debian.org/LXC/SimpleBridge https://wiki.debian.org/LXC/SimpleBridge