Secure and Fast MicroVM for Serverless Computing

Explore Firecracker, an open-source virtualization technology designed for secure, multi-tenant containers and serverless computing in this conference talk from GOTO Amsterdam 2019. Dive into the foundations of Firecracker, its minimal device model, and its interactions with Kubernetes, Docker, and Kata containers. Learn about the design decisions that led to improved performance, security, and utilization. Discover how Firecracker serves as the building block for AWS Lambda and AWS Fargate. Gain insights into Firecracker's architecture, Lambda worker architecture, and isolation techniques. Examine efficient workload allocation strategies and the AWS Container Services landscape. Understand Firecracker's integration with open-source projects and its impact on Fargate EC2 resource usage. Watch a live demonstration showcasing the capability to launch thousands of Firecracker microVMs, and grasp the potential of this technology for serverless computing environments.

Intro
What is Firecracker?
What kind of runtimes do we need for serverless?
Firecracker design principles
Firecracker architecture
Lambda worker architecture
Lambda Isolation using Firecracker
Allocate Workloads: pack server with one workload
More efficient pack server with many workloads
Most efficient: placement optimization
AWS Container Services landscape
Fargate EC2 resource usage with warm pool
Fargate EC2 resource usage with Firecracker
firecracker-containerd
Firecracker and containerd architecture
Firecracker integration with open source projects