NanoVisor: Modernizing Container Runtime with Architecture Refactor for Superior Performance

Explore a groundbreaking conference talk on NanoVisor, a cutting-edge container runtime that addresses performance challenges in gVisor. Learn about the optimized userspace network stack that accelerates microservices hot paths and the lightweight hypervisor enabling direct host kernel syscall access. Discover how the implementation of a read-only file system and file-based tmpfs eliminates gofer processes without compromising security. Gain insights into NanoVisor's superior performance compared to runc for Redis, Nginx, and RPC benchmarks, as well as its comparable performance on fs benchmarks. Understand its potential as a millisecond-level FaaS engine and how it surpasses existing container runtimes while enhancing security with a reduced seccomp list.

NanoVisor: Modernizing Container Runtime with an Architecture Refactor..- Jianfeng Tan & Tianyu Zhou