3 ms·
Sure they do for "serverless workloads"
by qaq 3y ago
Sure they do for "serverless workloads"
- johncolanduoni 3y agoI can’t find specific documentation that indicates that AWS deploys firecracker with core isolation (though I would be pretty surprised if they didn’t given their documented caution around shared-core VMs). Google uses gVisor with Linux Core Scheduling to prevent this for GKE sandbox, but I can’t find any documentation that they do the same for Cloud Functions. In any case ”don’t use serverless functions” is a very far goalpost from “move back to the data center”.
- qaq 3y agoThat is not the only possible vulnerability.