NanoVisor: Modernizing Container Runtime with an Architecture Refactor..
Talkat ContainerCon @ OSS EU 2023 · on Tuesday, 2023-09-19· at 15:40· Room 0A (Floor 0), Abandoibarra Etorb., 4, 48011 Bilbao, Bizkaia, Spain·
summary
NanoVisor refactors gVisor into a userspace network stack plus a lightweight hypervisor and filesystem changes to cut syscall and emulation overhead: CR3 register writes are avoided, syscall pre-routing bypasses Sentry, device pass-through reduces host kernel trips, and gofer processes are eliminated with a read-only rootfs plus file-backed tmpfs. Evaluation shows 0.5 to 1x better than runc on Redis/Nginx/RPC, comparable fs performance, 7 ms cold start with <1 MB memory per FaaS instance, and a much smaller seccomp surface.
AI-written summary · about
chapters (6)
- 0:00Introduction to gVisor
- 2:46Architecture and history
- 7:16Evaluation and challenges
- 12:09Performance optimizations
- 24:36Production implementation
- 31:34Summary and Q&A
related talks
36mMitigating Noisy Neighbours: Advanced Container Resource Management
30mBeyond Orchestration: The Cloud Native Runtimes Ecosystem for Performance and Security
25mGoing green with native: efficient, sustainable software
21mNVMe Emulation Performance Optimization
49mBuilding native images for fun and profit
29mThere is no container
42mExtending Container Performance Isolation: Regulating Memory Bandwidth & Cache in the Kernel
43mLinux Container Performance Analysis