ZONESOS-level virtualization
Zones run workloads on the host kernel with hard isolation and no guest OS to boot, patch, or pay for in memory.
NETWORKINGA real IP per container
Every zone gets its own network stack and addresses on the fabric. No port mapping, no overlay, no NAT between services.
ZFSStorage built into the OS
Copy-on-write snapshots, clones, checksums, and compression are part of the operating system. Images provision as clones in seconds.
DTRACEObserve production safely
DTrace instruments the kernel and applications on a live host with zero overhead when disabled, so you can ask questions of production instead of guessing.
RESOURCE CONTROLSFair share, enforced
CPU, memory, disk I/O, and network limits are enforced by the kernel per zone, which keeps one noisy tenant from starving the rest.
KVM / BHYVEHardware VMs when you need them
Linux, Windows, and BSD guests run in KVM or bhyve virtual machines inside zones, so they inherit the same isolation, storage, and resource model.