InfiniBand Kubernetes delivers bare-metal speed for AI workloads. vCluster Platform adds fully isolated tenant clusters on top, without sacrificing GPU performance or network throughput.
High-performance fabrics demand infrastructure that keeps pace without compromising tenant security.
Standard Kubernetes isolation mechanisms add latency and overhead, negating the raw throughput advantages InfiniBand networking provides.
Tenants can see platform internals they should not, including cluster-wide agents and other tenants' nodes and pods.
Provisioning full physical clusters per tenant destroys the economics of shared InfiniBand fabric and GPU infrastructure.
vCluster Platform virtualizes the Kubernetes control plane itself, running CNCF-certified tenant clusters as lightweight processes directly on bare metal. Every tenant gets their own API server, etcd, and RBAC, while InfiniBand networking and GPU hardware remain fully shared and unthrottled.
A complete stack from bare metal provisioning through tenant cluster orchestration to kernel-native workload isolation on high-performance fabrics.
Each tenant gets fully dedicated physical nodes with their own CNI and CSI configuration. No workloads from other tenants share the same hardware, preserving InfiniBand fabric integrity and GPU performance.
Tenant Kubernetes control planes run as lightweight pods on the host cluster, each with a dedicated API server, etcd, and scheduler. Spins up in seconds with near-zero overhead on the underlying InfiniBand fabric.
Hardware-enforced VLANs, VXLANs, VRFs, ACLs, and DPU policies deliver per-tenant network boundaries without sacrificing the low-latency, high-bandwidth characteristics of InfiniBand Kubernetes environments.
vNode (currently in private beta) uses seccomp, cgroups, namespaces, and AppArmor to isolate each workload at the kernel level. No hypervisor overhead means bare metal GPU and InfiniBand throughput are preserved across tenant boundaries.
vMetal handles PXE boot, OS installation, machine registration, and network automation for GPU servers. Provisions InfiniBand-connected GPU racks from zero to production-ready Kubernetes without manual intervention.
This isn’t a side project. Behind every vCluster deployment is 5+ years of deep K8s engineering, security hardening, and battle-tested infrastructure work at massive scale.
Talk to our team about your stack
Deploy vCluster on your infra in minutes
Go live with a hyperscaler-grade tenant experience in days
vCluster virtualizes the Kubernetes control plane itself rather than inserting a hypervisor between workloads and hardware. Each tenant gets their own dedicated API server and etcd running as lightweight processes, while the underlying InfiniBand fabric and GPU hardware remain directly accessible. Private Nodes assign dedicated physical servers per tenant, and vNode (currently in private beta) adds kernel-native workload isolation using seccomp and cgroups without introducing VM overhead. The result is full tenant separation with minimal to no measurable impact on InfiniBand throughput or GPU performance.
Yes. vCluster Standalone runs as a single binary directly on bare metal Linux with no external Kubernetes dependency. There is no need for k3s, kubeadm, or k0s as a base layer. This is particularly relevant for InfiniBand Kubernetes deployments where the base infrastructure is GPU racks rather than a pre-existing managed cluster. vMetal handles the full provisioning path from PXE boot and OS install through to CNCF-certified tenant clusters.
vCluster Platform offers a flexible isolation spectrum. Shared Nodes place multiple tenants on the same physical hardware with namespace and resource quota boundaries. Dedicated Nodes assign specific GPU nodes per tenant, eliminating noisy-neighbor contention on high-performance fabrics. Private Nodes give each tenant fully dedicated physical servers with their own CNI and CSI. vNode (currently in private beta) adds kernel-native workload isolation on top of any of these configurations. AI cloud providers typically use Dedicated or Private Nodes for InfiniBand workloads.
Yes. Every tenant cluster created by vCluster is a fully CNCF-conformant Kubernetes distribution with 100 percent API compatibility. Tenants receive full cluster-admin access and can install their own CRDs, configure RBAC, and deploy any Kubernetes-native tooling without affecting neighboring tenants or the host cluster. This is relevant for AI teams who have built workflows on standard Kubernetes APIs and need compatibility guarantees on InfiniBand-backed GPU infrastructure.
vCluster powers more than 100,000 GPU nodes across 50 or more GPU clouds and Fortune 500 customers. Named customers include CoreWeave and Nscale. Boost Run launched a managed Kubernetes offering in less than 45 days using vCluster. Lintasarta launched Indonesia's leading GPU cloud in 90 days with more than 170 tenant clusters. vCluster is also named in the NVIDIA DGX SuperPOD reference architecture and in SemiAnalysis ClusterMax evaluation criteria.
Yes. Through the Netris integration, vCluster Platform automates VLANs, VXLANs, VRFs, ACLs, and DPU policies to enforce per-tenant network boundaries at the hardware level. This ensures that even on a shared InfiniBand fabric, network traffic between tenants is strictly isolated. The network automation is part of the full provisioning flow managed by vMetal, so tenant network configuration happens automatically as part of bare metal node lifecycle management.
See how GPU cloud providers deploy tenant isolation on bare metal without sacrificing performance.
