39 ms·
> Is there a similar priced way to run Go or Rust with similarly fast cold starts and low latency? A binary?
by ori_b 4y ago
> Is there a similar priced way to run Go or Rust with similarly fast cold starts and low latency?
A binary?
- oneplane 4y agoI tried to find the "A binary" service but no cloud offering seems to have it. You always have to wrap it in a container, VM or external runtime to do that.
- ledgerdev 4y agoIf you don't care about isolation... to do so requires a VM to securely isolate and that is a significant startup time and resource usage over a wasm module.
- ori_b 4y agoYou could run it in a very simple container, unshare(1) style. This adds no measurable overhead to binary startup time. https://man7.org/linux/man-pages/man1/unshare.1.html https://man7.org/linux/man-pages/man1/unshare.1.html
- ledgerdev 4y agoContainers do not provide sufficient isolation to run untrused binaries. That's why aws built and uses firecracker for lambda.
- ori_b 4y agoVMs are also full of side channels. Depending on how much isolation is a concern, you need to own the host. I don't trust VMs particularly more than containers in this respect: Containers have a lot of attack surface, but VMs also have a lot of complicated in the code in the kernel, in addition to having complicated emulated device drivers and a large silicon-based attack surface.