KVM and Container Performance and Isolation

Deep Dive

KVM vs Container -- ?

KVM vs Container -- CPU

KVM vs Container -- Memory

KVM vs Container -- Network

OPEN CLOUD COMPUTING

X86 Privilege Rings

Ring 3

Ring 2

Ring 1

Ring 0

Least-trusted level

Most-trusted level

OPEN CLOUD COMPUTING

X86 Architecture

OPEN CLOUD COMPUTING

Linux Process memory structure

OPEN CLOUD COMPUTING

KVM shadow page table

OPEN CLOUD COMPUTING

Intel EPT

OPEN CLOUD COMPUTING

Container technology

mnt pid net ipc uts user device? not yet

cgroup cpuset

OPEN CLOUD COMPUTING

Container security