Multi-tenancy in Cloud Foundry

[rosh...@gmail.com]

Does Cloud Foundry support multi-tenancy? More specifically, if I offerred a shared multi-tenant public PaaS using Cloud Foundry, and 1000's of indepent tenants consure the service, does Cloud Foundry ensure tenant isolation? Each tenant could be a single developer, or a company with a team of developers.

[Dr Nic Williams]

Yes. For example, the key authors of Cloud Foundry run it as a multi-tenant service at https://run.pivotal.io/.

[Cornelia Davis]

Short answer - yes, absolutely.

Slightly longer short answer, this is built in from the ground up.  Cloud Foundry has two main things that support multi-tenancy.  First they have two abstractions, "organizations" and "spaces" on which policies, including access policies, are assigned.  On our public offering at run.pivotal.io, Acme company would get an Acme-org and Beta company would get their own org, say Beta-org.  Each company can give access to their devops, can assign their own domains (i.e. Acme would have a domain like cloud.acme.com, Beta: cloud.beta.com, to which apps are deployed), etc.

The second thing is that when apps are deployed into the PaaS they are deployed into completely isolated linux containers that we call wardens.

And there's so much more.  

Cornelia

On Thu, Feb 27, 2014 at 10:17 AM, <rosh...@gmail.com> wrote:

Does Cloud Foundry support multi-tenancy? More specifically, if I offerred a shared multi-tenant public PaaS using Cloud Foundry, and 1000's of indepent tenants consure the service, does Cloud Foundry ensure tenant isolation? Each tenant could be a single developer, or a company with a team of developers.

To unsubscribe from this group and stop receiving emails from it, send an email to vcap-dev+u...@cloudfoundry.org.