2 ms·
gVisor does more than filtering, they basically reimplemented the syscalls in an application kernel. At least with seccomp the performance overhead is minimal.
by encryptluks2 5y ago
gVisor does more than filtering, they basically reimplemented the syscalls in an application kernel. At least with seccomp the performance overhead is minimal.
- remram 5y agoHow does gVisor fair against KVM and other hardware-accelerated VM solutions (firecracker)?