Blog/Infrastructure/The Case for Single-Tenant Database Infrastructure

The Case for Single-Tenant Database Infrastructure

M
Marcus Webb
July 8, 20256 min read

How most "managed" databases actually work

The majority of managed database services — including the most popular cloud offerings — run your database on shared infrastructure. Your PostgreSQL instance shares physical CPU, memory bandwidth, network interfaces, and sometimes storage I/O with databases belonging to other customers. The cloud provider allocates resources using virtualization and throttling mechanisms designed to create the appearance of isolation.

For most workloads, most of the time, this works. But databases are not most workloads.

The noisy neighbor problem is real

Database performance is unusually sensitive to resource contention. A PostgreSQL query plan that takes 8ms under normal conditions can take 200ms when a neighboring tenant on the same physical host is running a bulk export, a vacuum cycle, or a large analytical query. This variability does not show up in your average latency metrics — it shows up in your P99 and P999, which is where users actually feel it.

We have reviewed performance data from dozens of teams migrating to Aureus from shared cloud database services. The most consistent finding is not that average latency improves — it does, but modestly. The finding is that latency variance collapses. P99 drops by 60–80% not because the database is fundamentally faster, but because the unpredictable spikes caused by shared resource contention are eliminated.

For applications where latency consistency matters — checkout flows, real-time dashboards, API endpoints with SLAs — this is the difference between a good user experience and an unreliable one.

Security isolation is not just a compliance checkbox

In a multi-tenant environment, your database shares kernel memory, network interfaces, and I/O subsystems with other tenants. Modern virtualization has strong isolation properties, but "strong" is not "absolute." The history of cloud security includes a non-trivial list of side-channel vulnerabilities — Spectre, Meltdown, and their descendants — that exploit the physical proximity of co-located workloads.

For databases containing financial records, health data, or any PII, the theoretical attack surface of shared infrastructure is a real consideration. Single-tenant dedicated hardware eliminates this class of risk entirely. There is no co-tenant. There is no shared kernel. The physical machine running your database belongs exclusively to your workload.

Predictability enables better capacity planning

When you own the hardware allocation, resource availability is deterministic. The CPU available to your database at 3pm is the same CPU available at 3am. There is no burst credit system that runs out during your peak load window. There is no "noisy neighbor throttle" that kicks in when a co-tenant spikes.

This predictability changes how we think about capacity planning. We size clusters based on actual workload requirements, not on workload requirements plus a safety buffer for shared-resource variance. Customers typically need 20–30% less raw compute on dedicated infrastructure than they provisioned on shared cloud services — because that buffer was compensating for contention, not genuine headroom requirements.

The cost equation

Single-tenant dedicated infrastructure has historically been more expensive than shared cloud services at equivalent nominal specs. This gap has narrowed significantly as dedicated server hardware has become commoditized, and in many configurations has inverted entirely — purpose-built dedicated infrastructure for database workloads can be substantially cheaper per unit of sustained performance than cloud database services, which carry significant margins and cross-subsidy the cost of shared-resource management.

The teams that have found the largest cost reductions after moving to Aureus are typically those who were over-provisioned on shared infrastructure to absorb variance — running at 20% average utilization to handle 80% spikes. On dedicated infrastructure with predictable resources, they run leaner.

What this means for you

Every Aureus cluster runs on dedicated infrastructure. Your database does not share compute, memory, or I/O with any other customer. This is a deliberate architectural choice, not a premium tier — it is the baseline for all clusters from S through L.

If you are currently on a shared cloud database service and experiencing latency variance, P99 issues, or unexplained performance degradation during peak windows, the root cause is often multi-tenancy. We are happy to review your performance data and help you understand whether the infrastructure model is contributing to the problem.