8.5.1 Prevent virtual machines from taking over resources - Num CPU Shares

Information

NOTE: Update NUM_CPU_SHARES to the appropriate value for the local environment.

Solution

Use shares or reservations to guarantee resources to critical VMs.
Use limits to constrain resource consumption by virtual machines that have a
greater risk of being exploited or attacked, or that run applications that are known
to have the potential to greatly consume resources.

See Also

https://workbench.cisecurity.org/files/902

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-6

Plugin: VMware

Control ID: 0699b5c0e8eaf2442e3e3935c96979228897fc8ff1b2ffcfc6b10bb8656f82a8