Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> If one writes Go or Rust, there are much better ways to run them than targeting WASM

Is there a similar priced way to run Go or Rust with similarly fast cold starts and low latency?

I think this is the real selling point of isolates; inefficient if you want to run a postgres server but perfect for low latency edge stuff.

There is the usual argument that on premise/dedicated servers scales way better that people expect, nonetheless the trend seems to be a move towards smart CDNs...



> Is there a similar priced way to run Go or Rust with similarly fast cold starts and low latency?

I keep hearing good things about Firecracker in that regard (https://firecracker-microvm.github.io/).


> Is there a similar priced way to run Go or Rust with similarly fast cold starts and low latency?

A binary?


I tried to find the "A binary" service but no cloud offering seems to have it. You always have to wrap it in a container, VM or external runtime to do that.


If you don't care about isolation... to do so requires a VM to securely isolate and that is a significant startup time and resource usage over a wasm module.


You could run it in a very simple container, unshare(1) style. This adds no measurable overhead to binary startup time. https://man7.org/linux/man-pages/man1/unshare.1.html


Containers do not provide sufficient isolation to run untrused binaries. That's why aws built and uses firecracker for lambda.


VMs are also full of side channels. Depending on how much isolation is a concern, you need to own the host.

I don't trust VMs particularly more than containers in this respect: Containers have a lot of attack surface, but VMs also have a lot of complicated in the code in the kernel, in addition to having complicated emulated device drivers and a large silicon-based attack surface.


Google Cloud Functions and Cloud Run are good options, I prefer Run which runs arbitrary containers

'FROM scratch' for a binary only container




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: