Skip to Content
We annotated Google’s Zanzibar paper with extra context and SpiceDB comparisons. [Read the annotated paper]
Managed SpiceDBConceptsWorkload Isolation

Workload Isolation

Available onCloudDedicatedOpen Source (build it yourself)Enterprise (build it yourself)

Workload Isolation gives your SpiceDB deployments access to hardware that is only used by you, to guarantee performance and prevent “noisy neighbor” problems.

Control Plane

Services that are secondary to serving real-time requests run one shared workload called the control plane.

These services include:

  • AuthZed management UI and its accompanying machinery
  • Observability services for the SRE team (e.g. Prometheus, Grafana, Jaeger)
  • Compliance infrastructure

Workloads

Example Architecture Diagram

Workload Isolation Diagram

Low-latency Workloads on Kubernetes

AuthZed has presented a video to the CNCF  documenting some of the critical components to running low-latency workloads on Kubernetes. The technologies presented partially describe the implementation of Workload Isolation in AuthZed products:


Update ChannelsHTTP API Reference