[falcolas]

I don't care for the tone of this article, but there are a lot of valid points here.

The natted networking is problemmatic, the file system is slow (particularly with many image layers), and to get good performance, you have to give up all of the isolation abilities.

To get good network performance, you have to use net=host; to get good disk performance, you have to mount and write to host volumes. To increase visibility, you have to use host pids.

I have a lot of hope that Docker will get more performance to go with the awesome isolation. It's a useful tool in the proper circumstances, but it requires a lot of forethought and information to use well.