> Cloudflare runs a sandboxed V8 runtime in-process with its Nginx servers Maybe nitpicking, but that's not quite right. The Workers Runtime is a separate proc

> Cloudflare runs a sandboxed V8 runtime in-process with its Nginx servers Maybe nitpicking, but that's not quite right. The Workers Runtime is a separate process from nginx and is inside a heavy second-layer sandbox separating it from the rest of the system. Multiple Workers Runtime instances exist on each machine to serve different tiers of customers, and each instance may additionally create further subprocesses to provide extra sandboxing adaptively. Here's a diagram: https://blog.cloudflare.com/mitigating-spectre-and-other-security-threats-the-cloudflare-workers-security-model/#architecturaloverview https://blog.cloudflare.com/mitigating-spectre-and-other-sec... (In that diagram, the "Inbound/Outbound HTTP Proxy" boxes are, at least at present, nginx, but the big middle box is a new server architecture written from scratch.)