The Cisco ACE module and appliance deliver very advanced hardware virtualization.  Each virtual Application Controller Engine is called a context, which is configured by naming it, assigning VLAN interfaces, and defining resource restrictions.

context name
 allocate-interface vlan vlan or range
 member resource-class-name

The resource controls are defined at its most basic by placing a percentage cap on usage of all system resources by using the all keyword for type and setting max equal-to-min.

resource-class name
 limit-resource type minimum percent maximum {equal-to-min|unlimited}    

Other resource types can be controlled individually with keywords “acl-memory, buffer , conc-connections, mgmt-connections, proxy-connections, rate {bandwidth | connections | inpsect-conn | mac-miss | mgmt-traffic | ssl-connections | syslog}, regexp, sticky, and xlates.

 It is best to keep the “Admin” context only for definining system management and resources.  ACE comes with 5 contexts and can be licensed for more.  Up to 100 resource classes may be configured.