Shielded VMs use verification on hardware IDs and chips to defend against Linux bootkits and rootkits and provides self-healing security features such as integrity monitoring and healing.
It uses Secure Boot, Virtual trusted platform module(vTPM)-enabled Measured Boot, and Integrity monitoring.
| Product | Access GCP Services | Any Language | Scaling | Scale to Zero | Background threads | Background Processes | Modify the Runtime | Websockets | Write to Disk |
|---|---|---|---|---|---|---|---|---|---|
| Standard | 🔴 | 🔴 | 🟢 | 🟢 | 🟢 | 🔴 | 🔴 | 🔴 | Java: /tmp |
| Flexible | 🟢 | 🟢 | 🟢 | 🔴 | 🟢 | 🟢 | 🟢 | 🟢 | 🟢 |
| Product | Unlimited Runtime | preemptive delete | preemptive pause | SLA Coverage | Cost Reduction | Migrate to Standard VM | Restart on Event | Live Migration |
|---|---|---|---|---|---|---|---|---|
| Preemptible VMs | 🔴 | 🔴 | 🟢 | 🔴 | 🟢 | 🔴 | 🔴 | 🔴 |
| Spot VMs | 🟢 | 🟢 | 🟢 | 🔴 | 🟢 | 🔴 | 🔴 | 🔴 |
When it comes to designing a cloud for business use-cases, there are a few key considerations that need to be taken into account.
