Linked by Thom Holwerda on Sat 2nd Feb 2013 01:47 UTC, submitted by rohan_p
Permalink for comment 551276
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.
Features
Linked by Thom Holwerda on 05/18/13 21:33 UTC
Linked by David Adams on 05/16/13 4:23 UTC
Linked by Thom Holwerda on 05/11/13 21:41 UTC
Linked by Thom Holwerda on 05/08/13 14:22 UTC
Linked by Thom Holwerda on 05/02/13 15:28 UTC
Linked by Thom Holwerda on 04/29/13 21:06 UTC
Linked by Thom Holwerda on 04/24/13 22:24 UTC
Linked by Thom Holwerda on 04/18/13 11:21 UTC
Linked by Thom Holwerda on 04/16/13 9:29 UTC
Linked by Thom Holwerda on 04/15/13 22:44 UTC
More Features »
Sponsored Links



Member since:
2007-03-26
The issue isn't with the network breaking out, but services. VMs still borrow services from the host environment (see the example posted below). Once you've gained shell access to the host, it doesn't really matter if the network is sandboxed because you're gaining root on the host without having to touch the host's NATing.
Cetainly, it was bad of me not to cite any evidence:
https://www.youtube.com/watch?v=hCPFlwSCmvU
What makes you say this? Now I don't know the particulars of VBox (I'm a KVM user myself), but in general within a VM the networking is completely sandboxed as well. The virtual network traffic cannot just jump onto the host's network stack unless they're bound somehow.
Not all hardware supports extensions and paravirtualisation will always perform faster than hardware emulation. Which is where containers come into their own: you're using the host hardware and kernel but everything else is sandboxed.
You can even do snapshots and a number of other VM-centric tools with containers too.
Don't get me wrong, VMs do have their place too - I'm not trying to argue that containers are the holy grail of virtualisation (though technically not virtualisation), but I honestly do think containers are a massively underrated and overlooked tool
Edited 2013-02-03 12:37 UTC