Serverless Functions Made Confidential and Efficient with Split Containers
summary
CoFunc implements a split container architecture that runs multiple confidential serverless functions inside one CVM by pairing each confidential instance with a shadow container on the host and using a tiny microkernel plus library OS (≈20k LOC) inside the CVM. Prototype runs on AMD SEV and Intel TDX, boots and attests via prewarm + cycle-fork stages, shares memory to cut cached-CVM memory and speeds startup up to 60× on SEV and 215× on TDX versus Kata-CVM, with under 14% overhead vs an optimized non‑confidential container.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:58Confidential containers challenges
- 3:51Serverless function needs
- 4:53Split container architecture
- 7:43Resource isolation
- 9:30Library OS and microkernel
- 11:16Boot optimization
- 13:02Kofunk performance
- 14:49Overhead and memory efficiency
- 15:54Summary
related talks
50mConfidential Containers: Why, How, and Where Are We?- 50mConfidential Containers: Why, How, and Where Are We?
18mWallet: Confidential Serverless Computing
38mConfidential Containers Explained
27mTrust No One: Bringing Confidential Computing to Containers
25mOne Size Fits None: Lightweight Workload-Specialized Confidential Containers
49mCloud Native Confidential: Isolating Kubernetes Pods with Confidential Computing
38mCloud native Confidential: Isolating Kubernetes Pods with Confidential Computing