VM Isolation and Server Consolidation

Definition

Isolation separates execution environments and controls their interactions. Consolidation places workloads previously using separate physical servers onto shared hardware, commonly in separate VMs.

Three isolation needs in the lecture

KindWhat needs separationWhy one shared OS can be problematic
ConfigurationLibraries, OS versions, patchesConflicting versions and vendor certification requirements
TemporalAccess to CPU and I/O over timeA busy workload degrades another workload’s performance
SpatialState, access, and failure boundariesFailures or unwanted communication affect another service

These explain the historical one-application-per-server rule. Multicore servers hosting single-threaded applications then leave substantial resources unused.

Study example

Two services require incompatible library versions. Separate guest OSes allow each service to keep its own library set. However, if both guests share a saturated physical disk, separate configurations alone do not guarantee predictable response time.

Important rules

  • VM boundaries improve separation, but shared hardware still needs resource control.
  • The slides mention assigning different CPU cores to different VMs as one isolation mechanism.
  • CPU utilization is only one consolidation constraint: memory, disks, networking, and cache contention also matter.
  • Extra guest OSes add overhead, so packing workloads together is not free.
  • Consolidation can lower operating costs and energy consumption when it allows fewer physical servers to remain active.

Common mistakes

  • Assuming separate guests eliminate every shared-resource bottleneck.
  • Treating isolation as an absolute security guarantee independent of the hypervisor, host, or configuration.
  • Filling a server to maximum load without considering service quality or spare capacity.

Source

Fulvio Risso, Introduction to Computing Virtualization, slides 4-5, 10, 13, 16, 25-26. Lecture context: Lecture 02 - Introduction to Computing Virtualization. The worked scenario and cautions are study explanations.