04 / 47
Resource Isolation & Jails
Keeping tenants off each other on shared infrastructure — per-user filesystem jails, cGroup CPU and memory limits, and database governors that stop one account starving the rest of the node or reaching their neighbours' files.
Products in this layer
Market Share →
Switching cost. Isolation is wired into account provisioning and the panel; swapping it means rebuilding how every tenant is created and limited.