# Netflix Titus Adds Single-Tenant VM Isolation for Containers Netflix introduces single-tenant Titus mode to enhance performance isolation for high-throughput streaming workloads. - **Source:** [InfoQ](https://brifing.si/source/68ac18af-a4f3-4f7c-9c2c-44d4af8f89dd) - **Published:** 2026-10-30 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/c7cfeda9-1770-497d-9688-d41a8773b84a ## Single-Tenant Titus Implementation Netflix has introduced a single-tenant mode for its Titus container platform, allowing specific tasks to run exclusively on dedicated EC2 instances. While the platform team continues to manage host patching, this architecture provides strict performance isolation. It specifically targets high-throughput streaming workloads where neighbor interference previously caused significant checkpoint recovery delays. ## Limitations of Multi-Tenant Sharing Despite using cgroups, seccomp, and traffic shaping, Netflix found that shared hardware resources like memory bandwidth and last-level cache remained vulnerable to contention. A single container flooding the host with small packets could starve neighbors by exhausting kernel CPU. Predictive pinning and eBPF detection proved insufficient to fully close these performance gaps. ## Rejection of Alternative Solutions Netflix evaluated microVMs like Firecracker and Kata but rejected them due to the lack of nested virtualization support on existing instance types. Additionally, gVisor introduced unacceptable I/O overhead, and running standard containers on EC2 would have shifted patching responsibilities to application teams. Netflix prioritized performance isolation over security-focused hostile tenant defense. ## Federation and Resource Allocation The Titus federation layer manages eligibility through an allowlist controlled by the Compute team. The autoscaler selects the smallest EC2 instance capable of meeting the task's CPU, memory, and GPU requirements. To ensure exclusivity, Netflix employs pod anti-affinity, non-preemptible priority classes, and node taints, while disabling defragmentation to prevent task relocation. ## Addressing Launch Latency Challenges The primary trade-off for this isolation is increased launch latency, as fresh instances require tens of seconds to boot. Netflix maintains a small warm pool for latency-sensitive services but avoids metal instances to optimize costs. Long-term strategies include implementing lazy image pulling via stargz or SOCI and utilizing CRIU for checkpoint restoration. ## Efficiency and Resource Utilization Moving sensitive workloads to dedicated hosts eliminates the need for disruption budgets and anti-affinity spreading that previously left shared hosts underutilized. However, fixed overhead from sidecars can consume a significant percentage of resources on smaller instances. Netflix continues to refine bin-packing to minimize gaps created by discrete EC2 instance sizes. ## Current Adoption and Future Roadmap Early adopters include managed Apache Flink, streaming data connectors, and various edge services. Netflix is simultaneously improving the shared fleet using eBPF-based departure time shaping and cache partitioning via Intel RDT and AMD PQoS. The ultimate goal is a unified Compute API that automatically selects between shared or dedicated placement. ## Industry Context and Recommendations Netflix’s approach aligns with broader industry trends like GKE Sandbox and Azure Pod Sandboxing, though those focus on security rather than performance. For teams managing shared Kubernetes platforms, Netflix suggests using dedicated node pools with taints and anti-affinity. This pattern is recommended specifically for large, long-running, and disruption-sensitive workloads. ## Sources covering this story - https://www.infoq.com/news/2026/10/netflix-titus-kubernetes-microvm/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=global — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._