A Love Letter to Isolation

on YouTube ↗31m

" summary

Isolation is presented as the core resilience mechanism and the claim is that the Wasm Component Model delivers stronger, cheaper isolation than containers by giving each library its shared-nothing memory per component, explicit capability grants, and near‑native call performance (FFI instead of RPC). Example: unsafe C libs like ImageMagick run in separate component instances that can be ephemeral per-request instances and killed on failure, reducing attack surface and supply‑chain blast radius while keeping low overhead.

AI-written summary · about

" chapters (6)

1. 0:00Introduction
2. 1:46Isolation unsung hero
3. 10:12Isolation in biology tech
4. 16:05Modularity superpower
5. 23:25WebAssembly component model
6. 27:36Summary

" related talks

• 29mIsolation without ContainersTyler McMullen · LISA18
• 32mIsolation without ContainersTyler McMullen · Strange Loop 2018
• 20mIsolation without ContainersTyler McMullen · SREcon18 Asia/Australia
• 28mThe WASI OS - Isolation with Communication, Wasm styleDan Gohman · WasmCon 2023
• 34mContainers vs. WebAssembly: What's the Difference and Which Should I Use?Shivay Lamba, Daniel Lopez, Saiyam Pathak, Kate Goldenring · Wasm I/O 2023
• 34mPlaying Safely in the...Luke Wagner, Ralph Squillace, Bailey Elizabeth Hayes, Ram Iyengar · WasmCon 2024
• 31mYour Containers Aren’t Alone: Demystifying Container IsolationMarina Moore · Open Source Summit Europe 2025
• 30mKeynote: What is a Component (and Why)?Luke Wagner · WasmCon 2023