7 ms·
I think GAE isolation nowadays is done by gVisor[1]? Looking at the doc [2] however, it seems like the old "proprietary" mechanism is still used for old (first
by flakiness 5y ago
I think GAE isolation nowadays is done by gVisor[1]?
Looking at the doc [2] however, it seems like the old "proprietary" mechanism is still used for old (first generation) runtime. Probably this post is about that version.
[1] https://cloud.google.com/blog/products/containers-kubernetes/how-gvisor-protects-google-cloud-services-from-cve-2020-14386
[2] https://cloud.google.com/appengine/docs/standard/runtimes
- prattmic 5y agoEven the first-generation runtimes no longer use this mechanism. Note https://cloud.google.com/appengine/docs/standard/java/migrating-to-java8#taking_full_advantage_of_java_8_runtime_features https://cloud.google.com/appengine/docs/standard/java/migrat...: "All standard Java classes are now available, and there is no class allowlist."
- flakiness 5y agoThat's good to know!