Kubernetes virtualization startup LoftLabs Inc. today announced the launch of vNode, a new service that introduces lightweight node-level virtualization to provide secure, high-performance workload isolation within shared Kubernetes infrastructure.

Designed to redefine secure tenant isolation in Kubernetes, vNode offers a new layer of virtualization at the node level to ensure that workloads remain fully isolated, allowing platform teams to enforce stricter security boundaries while optimizing shared infrastructure.

The new offering complements LoftLabs’ vCluster, which allows customers to virtualize Kubernetes control planes, with vNode allowing platform teams to also virtualize Kubernetes nodes to achieve stricter multi-tenancy on the node-level. VNode also addresses the challenge of maintaining strong security while optimizing resource usage becomes increasingly complex by delivering strict node isolation without sacrificing the efficiency of shared infrastructure.

“VNode solves a frustrating trade-off in Kubernetes multi-tenancy,” said Chief Executive Lukas Gentele. “Organizations can either give tenants shared access to nodes, introducing security risks and limiting restrictions for tenants, or they force them onto separate, expensive nodes. Neither option is great. VNode eliminates this dilemma by enforcing strict isolation within shared nodes, keeping security high and overhead low.”

The new services work by introducing a lightweight virtualization layer that isolates workloads within shared physical nodes, avoiding the complexity of traditional virtual machine architectures and the overhead of syscall translation. The design ensures strong security boundaries while preserving high performance and resource efficiency.

The runtime sits between the Kubernetes control plane and worker nodes, enabling strict workload isolation without the need for separate machines. Doing so allows platform teams to assign secure, dedicated resources to different tenants, teams or applications within the same infrastructure.

Additionally, vNode includes support for container-based nodes running Linux 6.1+ and includes compatibility across major cloud providers, making it both Kubernetes-native and cloud-agnostic. The service empowers tenants to run privileged workloads without interference, reduces the need for redundant clusters and simplifies Kubernetes operations.

Along with the launch of vNode, LoftLabs also announced new features for its vCluster offering. The new features include Snapshot & Restore, which lets users capture the state of a virtual cluster and restore it at any time — enhancing backup, migration and disaster recovery workflows in Kubernetes environments.

Additionally, vCluster supports open-source integration with Rancher, allowing users to create, manage and update virtual clusters directly within Rancher without requiring the vCluster Platform.

LoftLabs is a venture capital-backed startup that has raised $28.6 million over two rounds, according to Tracxn. Investors in the company include Khosla Ventures, Fusion Fund, Emergent Ventures, Surface Ventures and the University of California.

Image: LoftLabs