Re:The Impending Cloud Reshuffle
by markgavalda on Thursday December 02, 2021 @05:35AM
(#29414523)
I agree, however I really like what https://firecracker-microvm.github.io/ is doing to change the above.
Re:The Impending Cloud Reshuffle
by loosescrews on Thursday December 02, 2021 @06:19AM
(#29414784)
Can you elaborate on how Firecracker is changing the situation?
My claim is that it isn't possible to build services on top of GCE/EC2 that compete with 1st party cloud offerings in important ways.
The problems with nested virtualization are mostly in silicon and to some extent in kvm. Firecracker doesn't really have much to do with it as the VMM isn't the problem.
You could use Firecracker to build your own GCE/EC2 competitor on bare metal, but that solves a different problem.
One big challenge for cloud workloads is multi-tenancy. If you want to run arbitrary untrusted code on the cloud, your only option is something like gVisor (which isn't exactly a compromise-free solution). Nested virtualization is not secure and will likely even preform worse.