Loading…
Shanghai, China
June 24–26, 2019
Click here for more information and registration

Simultaneous translation will be provided for all keynote and breakout sessions.
我们将为所有主题演讲和分组会议提供同声传译服务。

To view the Chinese version of this schedule please go here.
请点击此处查看中文版本。

Venue + Sponsor Showcase Map
场馆 + 赞助商展示区地图
Back To Schedule
Tuesday, June 25 • 11:45 - 12:20
From Secure Container to Secure Service - Xu Wang & Fupan Li, Ant Financial

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.
In KubeCon NA 2018, we did a quantitive comparison between Kata containers and gVisor, in which we showed the reasonable CPU/Networking performance for Kata, the performance penalty on filesystem storage, the memory consumption of Kata, and the syscall overhead of gVisor, etc.

After the event, Kata Containers released 1.5 with lightweight hypervisors (Nemu and FireCracker) support. And the virtio-fs for filesystem sharing has been introduced, which could provide better POSIX compatibility and performance. Together with the seamless containerd integration with shimv2, it looks like we may have a more product ready secure sandbox support for Kubernetes in 2019.

While security is an end-to-end topic, what we want is a secure service and the container runtime security is only part of it. In this presentation, the speakers will introduce the work in Ant Finanicial on both secure containers and ServiceMesh on top of it.

Speakers
avatar for Xu Wang

Xu Wang

Senior Staff Engineer, Ant Financial
Xu Wang is a senior staff engineer at Ant Financial and an initial member of Kata Containers Architecture Committee. He was the CTO and Cofounder of hyper.sh and created hypervisor-based open source container runtime runV (secure as VM, fast as container). runV merged with clear containers... Read More →
FL

Fupan Li

Developer, Ant Financial
Fupan is an active Kata Containers developer in hyper.sh, and he wrote the containerd shimv2 support for Kata. Before joining hyper.sh, he worked in WindRiver for 10 years.

from secure container to sercure service v1(1) pdf
Tuesday June 25, 2019 11:45 - 12:20 CST
619
  KC+CNC - Runtimes