> Under no circumstances should CloudFlare or anyone else be running multiple isolates in the same OS process. That depends on your scenario. In our case, all

> Under no circumstances should CloudFlare or anyone else be running multiple isolates in the same OS process. That depends on your scenario. In our case, all the JavaScript code is ours so we're not worried about it trying to exploit bugs and escape into native. Running multiple Isolates / Contexts gives us isolation on the JS side but also lots of sharing (the v8::Platform object and several other globals are shared in the process). Of course, if you're running untrusted JavaScript code what you're saying makes sense (though I wouldn't go as far as Firecracker, low-rights sandbox processes a-la Chrome do the job).