4 ms·
Seriously curious, don’t Firecracker VMs already run on EC2 instances under the hood when they host Lambda and Fargate?
by raw_anon_1111 9mo ago
Seriously curious, don’t Firecracker VMs already run on EC2 instances under the hood when they host Lambda and Fargate?
- otterley 9mo agoUnfortunately I'm not at liberty to dive deep into those details. I will say that Firecracker can be used on bare metal EC2 instances, whether you're a public customer or AWS itself. :-)
- raw_anon_1111 9mo agoI guess I should have peeked at the source code when I was there…
- rescbr 9mo agoNo need, at least when I was there when the day was still one, before the pandemic. And well, Firecracker is open source. A few of the best technical presentations that I've watched were at a pre-SKO event. Nitro, Graviton and Firecracker. Great engineering pieces, the three of them.
- wmf 9mo agoSince I don't work for AWS I'm allowed to say that at the scale of millions/billions of microVMs you're better off running them on bare metal instances to avoid the overhead of nested virtualization.
- otterley 9mo agoI used to work for AWS and I’m allowed to say the same thing. ;-)
- raw_anon_1111 9mo agoIf I remember correctly, Firecracker VMs don’t have the same security guarantees as EC2 instances. I think I remember that AWS doesn’t put multiple accounts lambdas either on the same bare metal server or VM. I can’t remember which
- yencabulator 9mo agoThere is no way a random small account running a single serverless function gets a whole bare metal server dedicated to them.