Lucet: Safe WebAssembly Outside the Browser
summary
Lucet is an AOT compiler and runtime for running WebAssembly outside the browser, producing an ELF artifact that embeds a memory‑layout contract and uses the Cranelift backend to emit native code. It targets per‑request isolation at huge scale — a single process hosts 20,000 sandboxes and cold starts a sandbox in about 35 microseconds. Verification, linear‑memory contracts and a tiny runtime replace containers for low‑latency, multi‑tenant edge execution.
AI-written summary · about
chapters (30)
- 0:00Intro
- 0:38Why Lucet
- 3:13Isolation
- 3:40Resource Isolation
- 4:20FDIR
- 5:18Control Flow Integrity Memory Safety
- 5:57Fault Domain
- 6:13Processes vs Containers
- 7:43Native Client
- 9:27WebAssembly v8
- 11:17WebAssembly v9
- 11:36What is WebAssembly
- 12:13WebAssembly Type System
- 12:29Semantics
- 12:45Community Support
- 14:49What is Lucet
- 15:07WebAssembly
- 16:14Lucid
- 18:26Greenlift
- 21:16Compiler and Runtime
- 22:36Memory Layout
- 23:50Runtimes
- 24:09Cold Start Time
- 24:38Demo
- 25:38Multitenant systems
- 26:11Interface types
- 27:55Edge computing
- 28:45Network computing
- 30:46Lucet opensource
- 30:59computed edge
related talks
54mLucet: A Compiler and Runtime for High-Concurrency Low-Latency Sandboxing
47mSecure Sandboxing in a Post-Spectre World
22mIsolation without Taxation: Near-Zero-Cost Transitions for WebAssembly and SFI
29mThe Return of Write Once, Run Anywhere
35mModern Sandboxing: Using Web Assembly in Java
53mWebAssembly
37mBuilding a better web with WebAssembly at the edge
25mFrom Cloud to Edge computing - Unleashing the power of WebAssembly at the edge