云代工厂如何处理流程隔离？ [英] How does cloud foundry handle process isolation?

问题描述

假设我使用 cloudfoundry.org 上提供的开源云铸造实现来设置自己的云。我部署的每个应用程序都将以单独的用户身份运行吗？还是在这里使用VMWare的任何虚拟化技术？例如。每个应用程序都将在单独的虚拟机或类似的虚拟机中运行吗？如何为每个应用程序配置内存，CPU和磁盘资源限制？

Let's say that I setup my own cloud using the open source cloud foundry implementation provided on cloudfoundry.org. Will each app that I deploy be run as a separate user? Or is there any of VMWare's virtualization technology in use here? E.g. would each app run in a separate virtual machine or anything like that? How can I configure the memory, cpu, and disk resource limits for each app?

推荐答案

我在邮件列表上问了这个。这是我得到的答复：

如果您的DEA配置为在安全模式下运行，然后每个应用程序均以其自己的用户身份运行，并使用进程隔离来保护他们。我们正在朝着使用Linux cgroups http://en.wikipedia.org/wiki/Cgroups在Linux上时，使用源代码树中已经存在的warden cgroup包装器。

If your DEA is configured to run in secure mode, then each app runs as its own user and process isolation is used to protect them. We are moving toward a model of using linux cgroups http://en.wikipedia.org/wiki/Cgroups when on linux, using the warden cgroup wrappers that are already in our source tree.

单个应用程序基于VM的隔离非常繁重，但是我们有长期计划为需要/期望它的应用程序提供此隔离。 （与看门人/ cgroup的工作是一个近期项目相反）

VM based isolation for a single app is pretty heavy weight, but we have long term plans to provide this for apps that need/desire it. (As opposed to the warden/cgroup work which is a near term project)

这篇关于云代工厂如何处理流程隔离？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！