Single-tenant Titus: VM-level isolation on a multi-tenant container platform

This blog post discusses Netflix's implementation of single-tenant Titus, a solution that provides VM-level isolation for specific workloads running on its multi-tenant container platform. While traditional shared-kernel isolation is efficient for most applications, high-demand real-time systems face performance challenges due to resource contention. Single-tenant Titus enables dedicated EC2 instances for sensitive workloads, allowing for greater isolation and improved performance by eliminating noisy neighbors. The post outlines the decision-making process, design considerations, and trade-offs involved in adopting this model, emphasizing the operational efficiency gained from isolating disruptive workloads while maintaining the benefits of managed container services.