News for hackers. Stuff that matters.
Re:The Impending Cloud Reshuffle by loosescrews on Thursday December 02, 2021 @04:50AM (#29414268)
I think one thing that articles like this miss is that not all cloud services run, themselves, in VMs. For example, most of Google's don't. While virtualization has improved a lot, it wouldn't be possible to replicate many of Google's cloud offerings with competitive performance and cost on Google's Compute Engine. Cloud Storage, BigQuery, serverless (Cloud Run, App Engine, Cloud Functions), Spanner, Bigtable, and Firestore all come to mind.

One big challenge for cloud workloads is multi-tenancy. If you want to run arbitrary untrusted code on the cloud, your only option is something like gVisor (which isn't exactly a compromise-free solution). Nested virtualization is not secure and will likely even preform worse.

Re:The Impending Cloud Reshuffle by markgavalda on Thursday December 02, 2021 @05:35AM (#29414523)
I agree, however I really like what https://firecracker-microvm.github.io/ is doing to change the above.
Re:The Impending Cloud Reshuffle by loosescrews on Thursday December 02, 2021 @06:19AM (#29414784)
Can you elaborate on how Firecracker is changing the situation?

My claim is that it isn't possible to build services on top of GCE/EC2 that compete with 1st party cloud offerings in important ways.

The problems with nested virtualization are mostly in silicon and to some extent in kvm. Firecracker doesn't really have much to do with it as the VMM isn't the problem.

You could use Firecracker to build your own GCE/EC2 competitor on bare metal, but that solves a different problem.

Re:The Impending Cloud Reshuffle by cthalupa on Thursday December 02, 2021 @10:05AM (#29417007)
You can get bare metal instances without a hypervisor on EC2