What is a technical difference between Dedicated and Standard SKU for Container Instances?

Lukasz Olczak 21 Reputation points
2020-09-04T17:56:39.54+00:00

Hi,

I would like to learn what is a technical difference between Dedicated and Standard SKU for Container Instances.
According to the documentation, Dedicated SKU provides workload level isolation. Does it mean that Standard SKU is oversold and resources are only guaranteed for Dedicated SKU?
Next, the docs also say that Dedicated SKU provides an isolated and dedicated compute environment for securely running containers. Does it mean that Standard SKU is not secure? What is the difference in isolation between containers for both SKU if they both guarantee hypervisor-level security? Does it mean that Standard SKU uses type 2 hypervisor and isolation between containers is on the OS level and Dedicated SKU isolates on the hardware level? Can I compare the sandboxing level of Dedicated vs. Standard as Xen vs. KVM or type 1 vs type 2 hypervisor?

Thanks in advance.

Best regards,
Lukasz

Azure Container Instances
Azure Container Instances
An Azure service that provides customers with a serverless container experience.
670 questions
Accepted answer
  1. prmanhas-MSFT 17,901 Reputation points Microsoft Employee
    2020-09-17T07:25:54.24+00:00

    @ukaszOlczak-9799 Firstly, apologies for the delay in responding on this and any inconvenience this issue may have caused.

    With dedicated SKU the back end Virtual Machine which will host the container instance will be placed on a Host Compute resource (on a Microsoft internal subscription and not visible to customer) that will be reserved only for that particular Virtual Machine and no other Virtual Machines will be provisioned on it.

    For Standard SKU there might be other Virtual Machines provisioned on the same Host Compute Resource.

    You can refer to this document as well for more information.

    Dedicated container run on top of Dedicated Machine that provide physical isolation.

    If you have requirement specific to dedicated hosts do let me know so I can connect you with our team internally.

    Hope it helps!!!

    Please 'Accept as answer' if it helped, so that it can help others in the community looking for help on similar topics

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest