click
unikraft
| click | unikraft | |
|---|---|---|
| 4 | 2 | |
| 726 | 18 | |
| - | - | |
| 4.2 | 2.4 | |
| almost 2 years ago | 11 months ago | |
| C++ | C | |
| GNU General Public License v3.0 or later | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
click
-
Unikraft is a fast, secure and open-source Unikernel Development Kit
It's possible to create an IPSec + firewall based on the Click Modular Router[0] and run this on top of Unikraft[1].
[0]: https://github.com/kohler/click/wiki/IPsecEncap (and other IPSec* elements)
[1]: https://github.com/unikraft/app-click
It could make for an interesting tutorial with a full Click-based IPSec router though! :)
-
Ask HN: How are you using unikernels?
Many unikernel projects were ahead of their time. For example ClickOS [0] is ~7 years old but all its ideas still sound innovative. Someone could build an entire business on top of network function virtualization, using unikernels as an efficient sandboxing mechanism.
I’m not sure why unikernels have not caught on widely. I suspect their time has yet to come for some applications, but at least for NFV and sandboxing, I would bet on solutions using eBPF or XDP with WASM for sandboxing.
[0] https://github.com/kohler/click
-
Signed Char Lotte
Source: https://github.com/kohler/click/blob/6fa978f0188bd0b8a266f65...
Context: This is the source code of the Click Modular Router, a system for implementing packet processing logic with a graph-like DSL. Both primitives, and certain complex logic, are implemented in C++; however, as this has to be able to run as a Linux kernel module, it can't use the C++ standard library, and has its own stdlib.
- Want to borrow that e-book from the library? Sorry, Amazon won’t let you. - Its monopoly is stopping public libraries from lending e-books and audiobooks from Mindy Kaling, Dean Koontz, Dr. Ruth Westheimer, Trevor Noah, Andy Weir, Michael Pollan and a whole lot more
unikraft
-
Ask HN: Examples of Microkernels?
It seemed to be in a similar space to Genode when I had a brief look. Is it clear how it compares?
A system that claims to allow you to configure it in microkernel and other modes might be interesting for comparison of the approaches, but I've only noticed it via a local connexion: https://project-flexos.github.io/
-
Unikraft is a fast, secure and open-source Unikernel Development Kit
Thanks for the feedback, we're in the process of adding a security section[0] which will detail more on the on-goings, but we'll work on adding more highlights on the main page.
I need to highlight we have separate research[1][2] which will make its way upstream soon which aims to provide hardening between internal libraries (e.g. isolating the network stack or scheduler) using gates like Intel MPK or separate hardware-accelerated services.
[0]: https://github.com/unikraft/docs/pull/32
[1]: https://project-flexos.github.io/
[2]: https://github.com/project-flexos/unikraft
What are some alternatives?
unikraft - A next-generation cloud native kernel designed to unlock best-in-class performance, security primitives and efficiency savings.
FreeRTOS-Kernel - FreeRTOS kernel files only, submoduled into https://github.com/FreeRTOS/FreeRTOS and various other repos.
nanos - A kernel designed to run one and only one application in a virtualized environment
qubes-mirage-firewall - A Mirage firewall VM for QubesOS
docs - The front page and documentation for the Unikraft Open-Source Project.
pykraft - Python library for configuring and building unikernels
app-click - Click Modular Router on Unikraft
hermitux - A binary-compatible unikernel
app-llama2-c - Llama 2 Everywhere (L2E)