4 ms·
But it's not just process isolation. You also isolate the entire OS, so you can tune your TCP stack to match this application without affecting the others. If y
by baruch 12y ago
But it's not just process isolation. You also isolate the entire OS, so you can tune your TCP stack to match this application without affecting the others. If you go deeper than that you can even give access to the hardware and thus reduce latencies where you care for it and still provide sensible isolation between the different applications.
In the shallowest mode it is just process separation at the deep end it gives you a lot more than that.
- bobland 12y agoI don't know for sure with Mirage, but OSv does not provide process isolation since everything is running in kernel memory.
- baruch 12y agoPresumably you'd run one application inside such an image and between two images you do have isolation.
- bobland 12y agoCorrect, and it's fair to say that the application pretty much is the image - if the application exits, the VM shuts down. Configuration can be kept out of the image with cloud-init, and I basically treat all images as immutable. The majority of my experience has been using OSv, running Akka, and it's yielding excellent results. Image sizes are small (<200MB), easy enough to upload to AWS and create a new AMI in a few minutes. Boot time to a running application is a few seconds. The only possibly downside is that OSv (as yet) doesn't support paravirtualisation, only HVM.