FaaS from the Inside — isolated V8 and Other Creatures
summary
The talk examines how to build a secure sandbox for running JavaScript by using an isolated V8 instance, using Atlassian Forge (their FaaS for Jira and Confluence extensions) as a concrete example. It covers sandboxing techniques and restrictions applied to execute user code safely on shared cloud resources.
AI-written summary · about
chapters (9)
- 0:00Introduction to FaaS
- 3:52Security needs in FaaS
- 7:30Client code isolation challenges
- 11:32V8 isolation and instances
- 16:40Security and isolation mechanisms
- 26:12Code execution in isolated context
- 31:17API and external data access
- 35:47Summary and sandbox security
- 40:37Conclusion and Q&A
related talks
12mFaaS Platform Engineering with Wasm
20mIsolation without Containers
47mSecure Sandboxing in a Post-Spectre World
38mWhy, and how you need to sandbox AI-Generated Code?
35mModern Sandboxing: Using Web Assembly in Java
29mJavaScript's Journey to the Edge
48mDon't Trust Anything! Real-world Uses For WebAssembly
01h 07mThe V8 Sandbox: From Compiler Correctness to Runtime Containment