CODEWITHSUNDEEP
cloud-foundry
Ben McCann
Ben McCann

Reputation: 19014

How does cloud foundry handle process isolation?

Let's say that I setup my own cloud using the open source cloud foundry implementation provided on cloudfoundry.org. Will each app that I deploy be run as a separate user? Or is there any of VMWare's virtualization technology in use here? E.g. would each app run in a separate virtual machine or anything like that? How can I configure the memory, cpu, and disk resource limits for each app?

Upvotes: 2

Views: 988

Answers (2)

Ben McCann
Ben McCann

Reputation: 19014

I asked this on the mailing list. Here's the response I got:

If your DEA is configured to run in secure mode, then each app runs as its own user and process isolation is used to protect them. We are moving toward a model of using linux cgroups http://en.wikipedia.org/wiki/Cgroups when on linux, using the warden cgroup wrappers that are already in our source tree.

VM based isolation for a single app is pretty heavy weight, but we have long term plans to provide this for apps that need/desire it. (As opposed to the warden/cgroup work which is a near term project)

Upvotes: 4

Ali Moghadam
Ali Moghadam

Reputation: 1270

Since this is related to the open source for cloud foundry, you can try asking your question on https://groups.google.com/a/cloudfoundry.org/group/vcap-dev

You should get a quick response there!

Upvotes: 0

Related Questions