The core scheduler provides a strong inter-virtual machine barrier against cache side-channel attacks eg Spectre variants. This guide explains how to use it
https://ift.tt/2GwQAIy