4 ms·

I mentioned this in another comment thread, but we use gVisor to enforce isolation. https://gvisor.dev/users/ https://gvisor.dev/users/ It's also used by Googl

I mentioned this in another comment thread, but we use gVisor to enforce isolation. https://gvisor.dev/users/ https://gvisor.dev/users/ It's also used by Google Kubernetes Engine, OpenAI, and Cloudflare among others to run untrusted code.

yegle 2y ago
And Google's own serverless offerings (App Engine, Cloud Run, Cloud Functions) :-) Disclaimer: I'm an SRE on the GCP Serverless products.
- ekzhang 2y ago
  Neat, thanks for sharing! Glad to know we're in good company here.