What are the best approaches to OS virtualization?

Question

5

Options
Considered

7

User
Recs.

Apr 1, 2019

Last
Updated

Here’s the Deal

5 Options Considered

Best approaches to OS virtualization	Price	Last Updated
-- Hypervisor + Container	-	Dec 17, 2015
-- Hypervisor + Unikernel	-	Dec 17, 2015
-- Type 1 Hypervisor	-	Apr 1, 2019
-- Container	-	Apr 1, 2019
-- Type 2 Hypervisor	-	Apr 1, 2019

See Full List

I Recommend...

Built By the Slant team

Find the best product instantly.

Lustre recommends the best products at their lowest prices – right on Amazon.

4.7 star rating

Add to Chrome

Try it now - it's free

score 2 · Answer 1

Hypervisor + Container

Top Pro

Lightweight

Containers are based on shared operating systems. This makes them very lightweight and efficient because they don't have to virtualize any hardware, instead they rest on top of a single Linux instance. See More

Top Con

Not secure

Containers are not very secure. They are practically sharing so much of their underlying OS that it can't be fully secured. See More

Top Pro

For-purpose hypervisors with accompanying hardware are being developed

LXD, a hypervisor that is focused entirely on containers is being developed by Ubuntu. This new hypervisor will provide an added layer of security that is needed for containers. But what's more is that this won't simply be a security approach. Work is being done to make hardware that will provide isolation of the containers at the chip level. See More

See All

Built by Slant

Find the best product
instantly.

Stop wasting time searching endlessly. Lustre recommends the best products at their lowest prices – right on Amazon.

4.7 star rating

Add to Chrome - It's Free Try now - it's free

score 2 · Answer 2

Hypervisor + Unikernel

Top Pro

Unikernels allow for advanced security measures

Since it's possible to spin up a lot of unikernels with little cost they can be used to delay, confuse and trap the intruder. See More

Top Con

Pivoting is expensive

Top Pro

Quick boot times

Hypervisors boot faster than a typical Linux kernel + userspace. Which is a great benefit when you have to boot a lot of VM instances. See More

Top Con

Increased development time

Not a lot of core peaces yet. See More

Top Pro

Significantly reduced attack surface

In addition to security benefits provided by a hypervisors the fact that only certain parts of certain libraries of an OS are used mean that only the essential components can be targeted not the cruft that comes with a full-fledged OS. See More

Top Con

Useful only in specialized cases

Generally anything that requires a local disk (with some rare exceptions) won't be good fits for Unikernels. See More

Top Pro

Unavoidable functionality can be added to networking

Between the hypervisor's management domain and an unprivileged domain unavoidable functionality such as encryption, filtering or tunneling can be implemented. The added latency is almost unnoticeable. See More

Top Pro

Small overhead and increased performance

Unikernels are built to run only the necessary processes with only the necessary parts of necessary libraries in order to vastly increase performance. They reduce the memory footprint, the need for disk space and computational burden. See More

See All

score 1 · Answer 3

Type 1 Hypervisor

Top Pro

Can run multiple operating systems

Hypervisors can emulate hardware separately for each host allowing them to run multiple operating systems. See More

Top Con

Considerable overhead

Depending on the host hypervisor may take up anywhere from 3% of the hosts memory and cpu resources up to 35%. Low density, performance, scalability. While some issues are mitigated with new hardware features such as VT-D, the overhead is considerable. In certain specialized cases many of these issues can be sidestepped via the use of unikernels. Unikernels are specialized, lightweight operating systems for hypervisors. They are built to run only the necessary processes with only the necessary parts of necessary libraries in order to vastly increase performance. They reduce the memory footprint, the need for disk space and computational burden. Additionally they further reduce the attack surface. See More

score 1 · Answer 4

Container

Top Pro

High portability

The whole stack can be easily packed and moved. See More

Top Con

Security concerns

Since containers are run using shared resources, if any container is compromised, the host is compromised as well. Many of the security concerns can be alleviated by running containers within hypervisors. See More

Top Pro

Fast startup times enable a highly flexible infrastructure

New containers can be quickly spun up based on changing need. See More

Top Con

Limited to one kernel and OS

All containers on a host will have the same kernel and OS. See More

Top Pro

High density

Two to six times more virtual environments can be created via containers as compared to hypervisors for the same hardware cost since containers don't need to emulate hardware and repeating OS elements for each guest OS. See More

Top Pro

Dynamic resource allocation

Containers can be assigned, for example, more memory during runtime. See More

See All

Answer 5

Type 2 Hypervisor

Top Pro

Ease of use

By running on hosts operating system, type-2 hypervisors can be installed and set up the same way any other software is installed. See More

Top Con

Very high overhead

Very low density, performance, scalability. Additional performance hit from OS layer. See More

Top Pro

Lots of flexibilty of what hypervisors on what OSs are run

Hosts hardware can run multiple OSs and multiple type-2 hypervisors can be run side by side on each of the operating systems. See More

Top Pro

Can run multiple operating systems

Hypervisors can emulate hardware separately for each host allowing them to run multiple operating systems. See More

See All

What are the best approaches to OS virtualization?

5 Options Considered

Hypervisor + Container

My Recommendation for Hypervisor + Container

My Recommendation for Hypervisor + Container

Lightweight

Not secure

For-purpose hypervisors with accompanying hardware are being developed

Hypervisor + Unikernel

My Recommendation for Hypervisor + Unikernel

My Recommendation for Hypervisor + Unikernel

Unikernels allow for advanced security measures

Pivoting is expensive

Quick boot times

Increased development time

Significantly reduced attack surface

Useful only in specialized cases

Unavoidable functionality can be added to networking

Small overhead and increased performance

Type 1 Hypervisor

My Recommendation for Type 1 Hypervisor

My Recommendation for Type 1 Hypervisor

Can run multiple operating systems

Considerable overhead

Container

My Recommendation for Container

My Recommendation for Container

High portability

Security concerns

Fast startup times enable a highly flexible infrastructure

Limited to one kernel and OS

High density

Dynamic resource allocation

Type 2 Hypervisor

My Recommendation for Type 2 Hypervisor

My Recommendation for Type 2 Hypervisor

Ease of use

Very high overhead

Lots of flexibilty of what hypervisors on what OSs are run

Can run multiple operating systems

Don't see your favorite option? Add it.

One sec!