Etienne PerotandgVisor bot 8031c48662 gvisor.dev: Add Production Guide page. ...

This page does not document anything new, but it aims to be a
central document to list all the steps and considerations
necessary to run gVisor in a production environment.

This includes:

- How to make the decision to use sandboxing at all or not
  (which security benefits sandboxing bring, how to think
   about them).
- How to make the decision about which components to sandbox.
- What the security/performance tradeoffs are.
- How to minimize the performance impact.
- How to configure gVisor for best performance.

Also includes a crude comparative diagrams of various ways
to organize a typical production stack.

PiperOrigin-RevId: 466491023

2022-08-09 15:47:11 -07:00

306 KiB

740x1094px

Raw Permalink History