Hacker News Reader

If you just want to run some CPU bound code as fast as possible, virtualisation has low overhead.

But if you are doing a lot of communication between the script and the host system, I'm not sure virtualisation does so well?

View on HN

No, as the author of TinyKVM, the overheads of entering and leaving KVM is not the same order of magnitude as SFI. TinyKVM requires 2-3 microseconds to enter and leave, which is the lowest I ever managed to get while it still being robust and dependable sandbox. For some, that might seem really low, but keep in mind that libriscv which is the backbone of RVScript has 3 nanoseconds overhead.

Thanks!

Reply on news.ycombinator.com