Cells: A Self-Hosting Virtual Infrastructure Service

We describe the design and implementation of Cells, a novel multi-tenanted virtual infrastructure service. Cells has the unique property of being self-hosting: it operates its own management system within one of the tenant virtual infrastructures that it manages and therefore benefits from the same security, flexibility and scalability as other tenant services. Cells is also differentiated by its declarative interface for infrastructure configuration, and its fine-grained control of network and storage connections within and between tenant infrastructures.