Loft Labs has launched vNode, a new solution that introduces lightweight node-level virtualization for Kubernetes, enabling strict tenant isolation while maintaining the efficiency of shared infrastructure. The product is designed to help platform teams securely scale multi-tenant environments without the performance tradeoffs of traditional virtualization methods.

vNode enhances security by creating virtualized Kubernetes nodes that sit between the control plane and worker nodes. This provides dedicated, isolated runtime environments per tenant—allowing secure workload execution, including privileged workloads, without the need for separate physical or virtual machines.

The release complements vCluster, LoftLabs’ 2021 product that virtualizes Kubernetes control planes, creating a robust two-layer virtualization stack. Together, vNode and vCluster provide end-to-end workload and node isolation for organizations seeking scalable, secure multi-tenancy in Kubernetes.

As organizations grow, optimizing shared infrastructure without compromising on security becomes increasingly complex. “vNode addresses that head-on,” said the company.

Key benefits of vNode include:

• Strong tenant isolation: Prevents cross-tenant interference.
• Privileged workload support: Enables use cases like Docker-in-Docker.
• High performance: Avoids microVM overhead and slow syscall translation.
• Kubernetes-native and cloud-agnostic: Works on Linux 6.1+ with any containerd-based node.

The launch also comes alongside major updates to vCluster:

• Snapshot & Restore: Enables full state backups and recoveries.
• Rancher Integration for OSS users: Lets users manage vClusters directly in Rancher without needing vCluster Platform.

With the addition of vNode, LoftLabs’ portfolio now includes:

• vCluster – Virtual Kubernetes clusters for scalable multi-tenancy
• DevPod – Containerized dev environments for cloud-native workflows
• vNode – Secure virtual node runtime for isolated workloads

LoftLabs is currently offering early access to the private beta of vNode.