I am not sure the example makes sense at all. Default settings always not working for all apps. If you need to tune network, if that's a tuning for all apps,

I am not sure the example makes sense at all. Default settings always not working for all apps. If you need to tune network, if that's a tuning for all apps, development can be done inside net lib, all apps rebuilds and release, that's not more expensive than tuning a kernel config. If you need to tune on per app basis, then unikernel is wildly safer because of the isolation.