DevOps Articles

Google Investigates a New Approach for Workload Isolation

There’s a delicate balance between isolating workloads based on security requirements while still optimizing for compute and resource efficiency. Google Senior Staff Reliability Engineer https://www.linkedin.com/in/mczapinski/ and Google Site Reliability Engineering Manager https://www.linkedin.com/in/rainer-wolafka-6465a38b/ are investigating the way to overcome “the limitations of machine isolation.”

Workload Security Rings (WSR) classifies the workloads by security requirements and then isolates and enforces each class at the machine boundary. This methodology still keeps sensitive and untrusted workloads on separate machines but introduces a new mid-level class between the two.

Czapiński and Wolafka are incredibly confident that Workload Security Rings provide a solution to the tradeoff of balancing compute requirements and security.