--- title: Netflix Found a Faster Way to Load Containers | daily.dev description: Netflix engineers discovered that migrating from Docker to containerd with User Namespace isolation caused severe container startup slowdowns at scale. Each... canonical: https://daily.dev/posts/netflix-found-a-faster-way-to-load-containers-1ezpxbpep twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Netflix Found a Faster Way to Load Containers | daily.dev og:description: Netflix engineers discovered that migrating from Docker to containerd with User Namespace isolation caused severe container startup slowdowns at scale. Each... og:url: https://daily.dev/posts/netflix-found-a-faster-way-to-load-containers-1ezpxbpep og:image: https://api.daily.dev/og/posts/1EzpXbPep.png og:image:alt: Netflix Found a Faster Way to Load Containers og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Netflix Found a Faster Way to Load Containers **[Cloud Native Now](https://daily.dev/sources/cloudnativenow)** · 5 min read · 0 upvotes · 0 comments ## Summary Netflix engineers discovered that migrating from Docker to containerd with User Namespace isolation caused severe container startup slowdowns at scale. Each container required idmap mounts for every image layer, generating O(n) kernel system calls and massive global lock contention. The problem was amplified on older Intel Xeon r5.metal AWS instances using a mesh CPU cache architecture, which struggled with cache-line contention compared to newer distributed-cache AMD EPYC or 7th-gen Intel instances. The fix, contributed upstream to containerd, leverages Linux kernel 6.3's recursive bind mount (rbind) support to reduce mount operations from O(n) to O(1) per container. This change was merged into containerd v2.2.0. Netflix also rerouted workloads away from the problematic r5.metal instances as a hardware-level mitigation. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Mount Mayhem at Netflix: Scaling Containers on Modern CPUs](https://daily.dev/posts/mount-mayhem-at-netflix-scaling-containers-on-modern-cpus-ckvvan6ve) · Netflix TechBlog · 50 upvotes · 1 comments - [Netflix Uncovers Kernel-Level Bottlenecks While Scaling Containers on Modern CPUs](https://daily.dev/posts/netflix-uncovers-kernel-level-bottlenecks-while-scaling-containers-on-modern-cpus-bfs33g6uj) · InfoQ · 3 upvotes · 0 comments - [Kubernetes finally lands user namespace support, but shared kernel problem remains](https://daily.dev/posts/kubernetes-finally-lands-user-namespace-support-but-shared-kernel-problem-remains-9xddjusia) · The New Stack · 4 upvotes · 0 comments --- Tags: [#linux](https://daily.dev/tags/linux), [#kubernetes](https://daily.dev/tags/kubernetes), [#containers](https://daily.dev/tags/containers), [#netflix](https://daily.dev/tags/netflix) [View this post on daily.dev](https://daily.dev/posts/netflix-found-a-faster-way-to-load-containers-1ezpxbpep) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Netflix Found a Faster Way to Load Containers","url":"https://daily.dev/posts/netflix-found-a-faster-way-to-load-containers-1ezpxbpep","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/netflix-found-a-faster-way-to-load-containers-1ezpxbpep"},"datePublished":"2026-03-17T14:53:47.179Z","dateModified":"2026-03-17T14:54:12.297Z","description":"Netflix engineers discovered that migrating from Docker to containerd with User Namespace isolation caused severe container startup slowdowns at scale. Each...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f1f5a0bc270a5f14e97a4d32ff7fda27?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f1f5a0bc270a5f14e97a4d32ff7fda27?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Cloud Native Now","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Cloud Native Now","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/8acc1ecd93ce4299b615252f32d78de5","url":"https://daily.dev/sources/cloudnativenow"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/netflix-found-a-faster-way-to-load-containers-1ezpxbpep","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"linux,kubernetes,containers,netflix","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Cloud Native Now","item":"https://daily.dev/sources/cloudnativenow"},{"@type":"ListItem","position":3,"name":"Netflix Found a Faster Way to Load Containers"}]} ```