the OS. Virtualization The hypervisor virtualizes the hardware limiting the number of hardware dependences that you need to install on the OS Abstract the OS from the hardware Abstract Allows you to run multiple applications on the same OS Allows you to run multiple OS on the same hardware Application Operating System Physical Infrastructure Containers VMware Hypervisor VMs Docker

limited storage options more configurations VM actions limited by Pod KubeVirt Building a virtualization API for Kubernetes https://github.com/kubevirt KubeVirt Architecture KubeVirt Application Linux ü another approach to enhance container isolation gVisor is special Machine-level virtualization Rule-based execution gVisor Technology landscape DEMO

ECI ECI ECI ECI ECI ECI ECI ECI ECI ECI ECI ECI ECI • Bulti-in Security • Light-Weight Virtualization • High Density • Scale and efficiency • Optimization Alinux2 for Sandbox Storage Network

infrastructure, Smart- Edge is a completely hardware-agnostic and heterogeneous solution. It was devel- oped in recognition of the diverse range of hardware in the field—a project might run in AWS, Azure K3s comes in—helping the team ex- ecute in a range of environments, where a range of different hardware is used. But what does this mean from an opera- tional point of view? How do soldiers in the- atres

dashboards Performance test Performancetest: LOCUST ● Test as code ● Highly scalable ● Less hardware consuming Connections LOCUST: Fast Forward 3 Cluster 3 Data Centers Cluster 1U Firewall

plan for developers • Experience for users/operators • TEE as an option, en/disable based on • Hardware configurations • Biz scenarios • Solutions evaluated • Go KMS Plugin + C Go SGX Functions • C++

failure, the virtual machines on a failed host are restarted on alternate hosts. When running on hardware that supports health reporting, Pro-active failure avoidance can also be engaged. Example loss

failure, the virtual machines on a failed host are restarted on alternate hosts. When running on hardware that supports health reporting, Pro-active failure avoidance can also be engaged. Example loss

）上的Taint，并且Admission Controller应该另外添加⼀个Node的亲和性要求，Pod只能调度到标有 dedicated=groupName 的Node上。 Nodes with Special Hardware（具有特殊硬件的Node） ：在⼀⼩部分Node具有专⽤硬件（例如GPU）的集群 中，希望将不需要专⽤硬件的Pod原理这些Node，从⽽为需要使⽤专⽤硬件的Pod留出空间。这可以通过污染具有