virtualization and containerization

Virtualization

The process of creating Virtual Machines (VM) on a single physical machine

Virtual Machines (VM)

Software based computer that runs its own OS and application

Hypervisor

A software that creates and manages VMs

Type 1 hypervisor

Type 1 hypervisor runs directly on hardware “bare metal”

Type 2 Hypervisor

Type 2 Hypervisor runs directly within the “hosting” OS

Server-based application

Programs that run on a central serve, while users access them from their devices

Client-based applications

Programs that run locally on users device

Containerization

Is a method of virtualization where applications run in lightweight, isolated containers on the same OS

Benefits of containerization

• share host OS

• Faster than VMs

• Resources are lightweight

• Isolation weaker

• Same OS

Benefits of virtualization

• Different OS

• Slower than containerization

• Resources are heavier

• Isolation is strong

VDI (virtual desktop Infrastructure)

A technology where users’s desktop environment runs on a server and the user access it remotely from their devices

Sandbox virtualization

Is an isolated environment used to safely run and test programs without affecting the main system

Hyper-converged Infrastructure (HCI)

Combines CPU, storage, and networking into a single system managed through software

Application virtualization

Allows applications to run in an isolated environment without being fully installed in the users device

Cross-platform virtualization.

Allows to run an Os or application designed for one platform on a different platform

Emulation

the process of using a software to imitate one hardware system on a different system

Requirements for virtualization

CPU (VT-x, AMD-v)

System Memory (RAM)

Storage

Network

VM Escape

Is a security exploit where a program or attacker breaks out of a VM and gains access to the hypervisor

VM hopping

A security attack where a attacker moves from one VM to another VM on same host

Sandbox escape

Is a security exploit where a program or attacker break out of a sandbox environment and gains access access to the Hypervisor

VM sprawl

Is a uncontrolled creation and growth of too many VMs, making them hard to manage