Systems | Development | Analytics | API | Testing

Latest Posts

Firecracker MicroVMs: Lightweight Virtualization for Containers and Serverless Workloads

Deciding whether to run applications in containers or virtual machines used to entail analyzing which trade-offs you could accept in exchange for certain advantages. With Firecracker, we can leverage the benefits of both technologies. In this blog post, we are going to talk about why exactly Firecracker is setting the serverless computing world on fire and what you need to know about this emerging technology.

Escaping GKE gVisor sandboxing using metadata

GKE is a Google Cloud service that offers a managed Kubernetes cluster, the nodes of the clusters are running on Google Cloud VM instances, the control plane and network is fully managed by GKE. GKE offers a sandboxing feature (https://cloud.google.com/kubernetes-engine/docs/concepts/sandbox-pods ), based on gVisor (https://gvisor.dev/docs/ ) it protects the host kernel from untrusted code.