syzcowboy99

3 ms·

1. 1.▲
   by syzcowboy99 8mo ago

   > Ultimately, if you fork() in gVisor, that calls fork() on the host This isn't true. You can look at the code right here[1], there is no code path in gVisor that calls fork() on the host. In fact, the only syscalls gVisor is allowe
2. 2.▲
   by syzcowboy99 2y ago

   > Are you saying that the TCP stack in the kernel cannot be trusted, but a userspace kernel you maintain can(that's a bit ridiculous... Yes that’s exactly right. It’s not ridiculous. Netstack is written in a GC’d language which alon
3. 3.▲
   by syzcowboy99 2y ago

   gVisor's netstack is still much slower than the kernel's (and likely always will be). The goal of this userspace netstack is not to compete with the kernel on performance, but offer an alternative that is more portable and secure.