4 ms·
Just as an aside both the use-cases of MTU being the wrong size (GCP, which I mentioned in the article) and adding syn cookies are both direct problems that we'
by eyberg 5y ago
Just as an aside both the use-cases of MTU being the wrong size (GCP, which I mentioned in the article) and adding syn cookies are both direct problems that we've had to diagnose and fix in Nanos. The latter cause the tcp/ip stack we chose didn't have syn cookies to begin with.
We were able to use tcpdump in that situation as well to test and verify the problem was solved and didn't require it to be in the guest.
All of these problems I wouldn't expect an average user to fix regardless though.
- toast0 5y ago> All of these problems I wouldn't expect an average user to fix regardless though. I wouldn't expect an average user to run a unikernel. I'd expect those running unikernels in production to be people who really need the performance, and those who really need the performance are going to be running up against weird issues all the time, and need to have at least a couple people on staff who can solve weird issues. When you have that kind of scale, one in a million events are frequent. I also don't necessarily understand the desire to run a unikernel in a hypervisor; might it be better to run a regular kernel on bare metal, or the unikernel on bare metal (yeah, it's harder to develop and probably debug the unikernel that way, but performance!). Maybe isolation is a bigger deal to some people than me.