Thread

5x faster Edge Functions: V8 isolates to Firecracker MicroVMs

229 points · 106 comments · jbott

CodesInChaos · 1790803842 · focus · HN ↗
> When the MicroVM boots up and the JavaScript server begins to listen on a port, we take a snapshot of the MicroVM. [...] we start a new MicroVM from that snapshot.
That sounds scary, since forked RNG states can lead to catastrophic failures in UUID generators or cryptography.
1. ameliaquining · 1790804748 · focus · HN ↗
  Firecracker has existing solutions to this, which I assume they're using: <a href="https://github.com/firecracker-microvm/firecracker/blob/main/docs/snapshotting/random-for-clones.md" rel="nofollow">https://github.com/firecracker-microvm/firecracker/blob/main...
  1. tybit · 1790806690 · focus · HN ↗
    You’d hope so, though it’s not unheard of to get this wrong. Fastly managed to snapshot guest seeds and use them at runtime for RNG in their WASM snapshots a few years ago <a href="https://nvd.nist.gov/vuln/detail/cve-2022-39218" rel="nofollow">https://nvd.nist.gov/vuln/detail/cve-2022-39218
  2. CodesInChaos · 1790929063 · focus · HN ↗
    The problem is that this can not not only happen in the kernel, but in any use mode application or library.
  3. [deleted] · 1791058403 · focus · HN ↗
    [deleted]
2. [deleted] · 1790814140 · focus · HN ↗
  [deleted]

Unofficial Hacker News client; not affiliated with Y Combinator.