4 ms·

woo, hadn't heard about firecracker

• mrkurt 6y ago
  It's seriously the bomb.
• tptacek 6y ago
  Firecracker is f'ing awesome. I have a lot of notes to write up about it. I know this isn't how products actually succeed in the real world, but I'll be honest and say that Kurt had me at Fly with "WireGuard and Firecracker". (For the unfamiliar reader: Firecracker is a micro-vm system that sits sort of in between a fully virtualized host, like an EC2 instance, and a container like Docker; you get the security isolation of a hypervisor but the speed/simplicity of Docker. It's the engine that powers AWS Lambda and Fargate. The Usenix paper is a pretty great read, and the code [it's all in Rust] is simple and easy to follow.) https://www.usenix.org/system/files/nsdi20-paper-agache.pdf https://www.usenix.org/system/files/nsdi20-paper-agache.pdf
  • AlphaSite 6y ago
    It’s fairly similar in concept to: https://vmware.github.io/vic/ https://vmware.github.io/vic/ for vsphere Disclaimer: interned with the team
    • tptacek 6y ago
      Say more, if you can! I'm not at all familiar with that project. Thanks!
  • daxfohl 6y ago
    Do you use it like Kata Containers where each pod is in its own VM?