Resource Isolation

Doris provides two complementary layers of resource isolation: node-level physical isolation, and logical isolation within a single process. Choose the right mechanism based on your deployment architecture and isolation requirements.

Physical Isolation

Resource Group

In the integrated storage-compute architecture, divide BE nodes into isolated node groups by tagging them, supporting read-write separation and multi-tenant scenarios.

Compute Group

In the storage-compute separation architecture, create and manage named compute groups to achieve hard isolation between different workloads at the compute layer.

Logical Isolation

Workload Group

Limit CPU, memory, and I/O resources for queries or user sessions within a single BE process, with no additional nodes required.

Bind Workload Group to Compute Group

Bind a Workload Group to a specified Compute Group, combining physical and logical resource control for fine-grained multi-tenant isolation.