I am just astounded by how some people who love "virtualization" keep making the same mistakes. Are you even listening?
> Practice also. XEN is a great tool for 'duplicating' a machine in an > entererprise environment (IME running 'user level' tools for hundreds or > thousands of users). Separating applications is invaluable, and the ^^^^^^^^^^ Who said it actually seperates? > ability to do a machine restore in minutes, using the most recent data > from a local SAN is also a major advantage. > > Nobody in the XEN (or VM) world in their right mind would put a VM on the > 'Net without significant protection (an OBSD PF machine, perhaps), and > I'm certainly not suggesting that. > > Remember that there is more than one world from a technology standpoint! > The vast majority of the SME marketspace (where we operate) is heavily > infiltrated with MS crap; OTOH, OBSD is the only choice for public > servers, or as a front-end to other OSs. The virtualization space > will have to mature significanty, if ever, to meet the security standards > of OBSD. > > In the meantime, virtualization provides a great solution for those > applications that benefit from running separately & isolated, while ^^^^^^^^^^^^^^^^^^^^^ You believe it does seperation and isolation? > maximizing h/w utilization. This, it does do. But the people who want to maximize hw utilization are trying to lie to themselves about the security aspects. You can't run more code and then have less failures.