3 ms·

How does Fly use gVisor?

• abound 1y ago
  I don't believe they do, they use Firecracker microVMs for isolation: https://fly.io/docs/reference/architecture/ https://fly.io/docs/reference/architecture/
• ericpauley 1y ago
  https://fly.io/blog/ssh-and-user-mode-ip-wireguard/ https://fly.io/blog/ssh-and-user-mode-ip-wireguard/
  • PhilippGille 1y ago
    Quote: > And, long story short, we now have an implementation of certificate-based SSH, running over gVisor user-mode TCP/IP, running over userland wireguard-go, built into flyctl.
    • tptacek 1y ago
      Also: https://fly.io/blog/our-user-mode-wireguard-year/ https://fly.io/blog/our-user-mode-wireguard-year/ https://fly.io/blog/jit-wireguard-peers/ https://fly.io/blog/jit-wireguard-peers/ This is another one of those things where the graph of our happiness about a technical decision is sinusoidal. :)
• tptacek 1y ago
  We don't.
  • jchw 1y ago
    I think they mean to say that a part of gVisor is used by Fly, because if I recall correctly flyctl did use the gVisor user mode TCP stack for Wireguard tunneling.
    • tptacek 1y ago
      Ahh, that makes sense. Ok, revised answer: yes, we do. :)