Tag
tenant-isolation
- Aug 28, 2025 What CPU Quotas Cannot Bound: Cache, Bandwidth, and SMT Contention Between Tenants Fair-share scheduling accounts for time, not for shared microarchitectural state; the resources that leak between co-tenants and the placement choices that limit the leak. cloud infrastructure
- Jan 17, 2025 Authorization Models for Multi-Tenant Data Isolation How tenant identity must be bound into every query and token, why row-level filtering fails when it is optional, and what isolation guarantees separate deployments actually provide. security
- Mar 5, 2024 Tenant Isolation in an Internal Platform: Which Boundary Does the Work Namespaces, service accounts, resource quotas, and network policy each stop a different class of interference. Choosing the wrong one leaves a gap that looks like isolation but is only naming. virtualization