In a recent discussion, Lukas Gentele, CEO and Co-Founder of Loft Labs, introduced vNode, a new commercial product designed to enhance multi-tenancy capabilities in Kubernetes environments. Building upon the foundation established by vCluster, vNode addresses the crucial challenge of secure workload isolation at the node level.

The Multi-Tenancy Spectrum

Gentele outlined the spectrum of multi-tenancy options currently available in Kubernetes:

• No multi-tenancy: Creating completely separate clusters
• Hard isolation: Using separate nodes but with a shared control plane
• Medium isolation: Using tools like node pools, vCluster, and label node selectors
• Soft isolation: Using only namespaces for workload separation

The challenge many organizations face is balancing security with cost efficiency. While separate nodes provide strong isolation, they often result in underutilization and increased costs. Conversely, namespace-based isolation may not provide sufficient security for many use cases.

vNode: Bridging the Gap

vNode was developed to provide a solution that works “seamlessly in every public cloud environment with vCluster.” The product creates virtual nodes that are automatically generated on each physical node or virtual machine within a Kubernetes cluster.

“With vCluster alone, you only get the control plane part of it isolated. Now we also help you isolate workloads on the node level, so even stronger multi-tenancy,” Gentele explained.

This approach offers significant benefits for resource utilization. Gentele mentioned that some users have even managed to “eliminate all of their VMs in their Kubernetes clusters with our virtual stack,” highlighting the potential for substantial infrastructure optimization.

Commercial Launch and Initial Reception

Unlike previous offerings, vNode is being released as a commercial product rather than open source software. At the time of the discussion, vNode was in private beta with controlled access to installations, though demos were available and pilot customers had been working with the product during its development.

Despite being announced just 24 hours prior to the conversation, Gentele reported strong interest in the private beta, not only from existing vCluster customers but also from organizations that had previously evaluated vCluster but needed “stricter multi-tenancy” capabilities.

Market Implications

The enthusiastic reception to vNode suggests there’s significant demand for enhanced multi-tenancy solutions in the Kubernetes ecosystem. Organizations are clearly looking for options that provide stronger isolation than traditional namespace-based approaches while avoiding the cost inefficiencies of completely separate nodes or clusters.

vNode appears positioned to occupy a sweet spot in the multi-tenancy spectrum, offering enhanced security without sacrificing the resource optimization benefits that make Kubernetes attractive in the first place.

As container technologies continue to evolve, solutions like vNode represent an important step toward making Kubernetes environments more secure, efficient, and cost-effective for multi-tenant deployments.

Guest: Lukas Gentele (LinkedIn)
Company: Loft Labs
Show: KubeStruck