nderjung

7 ms·

31.
by nderjung 3y ago
Hi! I'm Alex, I'm a maintainer of Unikraft, AMA! :)
32.
KraftCloud: The Only Cloud Platform Cold-Starting in Under 20ms(kraft.cloud)
5 points by nderjung 3y ago|0 comments
33.
KraftCloud: The Only Cloud Platform Cold-Starting in Under 20ms(kraft.cloud)
7 points by nderjung 3y ago|0 comments
34.
Tales of Open Source: Vfscore(unikraft.org)
3 points by nderjung 3y ago|0 comments
35.
by nderjung 3y ago
Hi, we at Unikraft are hiring for this role exactly! We’re a “deep-tech” early-stage startup looking for someone to join our team and lead our frontend efforts. You can read more about the role at: https://unikraft.io/docs&#
36.
KraftKit v0.5 – Package unikernels into OCI archives(github.com)
3 points by nderjung 4y ago|0 comments
37.
Unikraft Releases v0.12.0 (Epimetheus)(unikraft.org)
3 points by nderjung 4y ago|0 comments
38.
KraftKit – Build and use highly customized and ultra-lightweight unikernel VMs(github.com)
3 points by nderjung 4y ago|0 comments
39.
Unikraft unikernel SDK releases v0.10.0 (Phoebe)(unikraft.org)
1 points by nderjung 4y ago|0 comments
40.
Unikraft unikernel SDK releases v0.9.0 (Hyperion)(unikraft.org)
1 points by nderjung 4y ago|0 comments
41.
by nderjung 4y ago
We put a lot of effort and consideration into the architecture of Unikraft[0][1], its elegance towards modularity and abstraction is the reason why I joined the team to help develop it. :) [0]: https://unikraft.org/ [1]: h
42.
by nderjung 5y ago
I think it can benefit both parties -- underprovisioning for a smaller bill and then increasing when demands need it so as to prevent degregation in QoS. That said, if load increases exponentially high it can induce high costs. Some cloud
43.
by nderjung 5y ago
Yes you're right, it's a simple network-like protocol allowing you to mount a path on the host OS to the Unikraft unikernel VM similar to a container volume. In addition, Unikraft's abstract APIs[0] allow for more block devi
44.
by nderjung 5y ago
It really depends on your usecase here. If the many application processes rely on the same OS libraries, versioned language runtimes (e.g. same python version), kernel version, etc. AND you trust the OS then it may make sense. However, un
45.
by nderjung 5y ago
It works both ways with Unikraft, either bring an existing application and let it run with the added performance/security (and think it's on Linux) or write your application with our performance-oriented APIs[0][1]. [0]: https:&#
46.
by nderjung 5y ago
We're working hard on adding SMP support to Unikraft which is planned for the next release. The PR you have linked has all the details about the on-going work!
47.
by nderjung 5y ago
The application code is compiled along with kernel code so you can think of unikernels as a single-process VM, there's nothing else running other than the application so it boots straight to `main()`. Unikraft just facilitates the ru
48.
by nderjung 5y ago
1. We build unikernels using the 'kraft container' which is Docker/OCI image[0][1] which has the necessary build tools to build Unikraft unikernels. We plug this into Concourse CI which builds thousands of combinations of Un
49.
by nderjung 5y ago
Thanks for the feedback, we're in the process of adding a security section[0] which will detail more on the on-goings, but we'll work on adding more highlights on the main page. I need to highlight we have separate research[1][2]
50.
by nderjung 5y ago
It's possible to run Unikraft unikernels via kubernetes with minimal interference to the ecosystem, check out the talk at CNCF: https://www.youtube.com/watch?v=cV-xawN9_cg We'll be launching managed kubernetes sup
51.
by nderjung 5y ago
Unikraft is based on a small trusted compute base, meaning there is nothing else running with a unikernel, no ssh, no daemons, no Linux, etc. Towards increasing security, however, we have just introduced native support for Rust[0] in Unikr
52.
by nderjung 5y ago
It's possible to create an IPSec + firewall based on the Click Modular Router[0] and run this on top of Unikraft[1]. [0]: https://github.com/kohler/click/wiki/IPsecEncap (and other IPSec* elements) [1]:
53.
by nderjung 5y ago
Hi @edsiper2, if you are running into any problems I'm happy to help, we can chat directly on the Unikraft Discord server: https://bit.ly/UnikraftDiscord
54.
Unikraft is a fast, secure and open-source Unikernel Development Kit(unikraft.org)
192 points by nderjung 5y ago|65 comments
55.
by nderjung 5y ago
This is true, but the same principle applies to EC2 instance. We also tried renting an m3.medium and installed Debian+NGINX on one and Unikraft+NGINX on another and experienced the same cost savings with, in addition, twice the performance
56.
by nderjung 5y ago
Whoops :) Yes I am affiliated, I can't update my comment but I'll make sure to indicate this if/when I write a comment which discusses anything about Unikraft.
57.
by nderjung 5y ago
It's really cool work the folks at CloudFlare are working on. The trade-off there though is that it's still a process isolated by the OS and so relies on OS-level security via the use of syscalls. Even if context-switching is re
58.
by nderjung 5y ago
There are many ways to debug unikernels in production, particularly, we have in-kernel monitoring (e.g. ability to enable fine-grain memory, scheduling, and resource monitors. These work also any included libraries). You can also produce
59.
by nderjung 5y ago
We are launching a pricing page in the next month as we are gearing up for launch :) One example of recieving a 50% cost saving is from Amazon Machine Images (AMIs). We compared the cheapest official NGINX AMI available on the Amazon Marke
60.
by nderjung 5y ago
One way to reduce compute costs significantly is by using a much lighter stack . Typical deployments to the cloud are based on the traditional OS model, and more often than not are a container-in-a-VM solution to deploy some service. The

More ›