Відео

On-premises is better than any cloud

This is why the visor project, which we started at Google in 2014, works the way it does -- very lightweight VM.

When I clicked on the video I thought you were going to try to convince me to throw away my Tupperware.

This really has 1 million views??? O_o

Considering containers for security is same considering VMs for flexibility and performance.

I don't really understand how cloudflare proxying and cloudflare reverse proxies work then. Why do you need a VPN but neither of those do? All these things proxy traffic.

So it means we have more latency when writing right?

Is she reading a script or one of those who implement the technical part of this or both?

I've checked. My closest Taco Bells is 780km away and going there would likely get me into troubles with the NATO Allied Air Command. But I've heard NATO is providing a great service for there customers too.

All code should be in jail.

LXCs > Docker. Configure with Ansible. I like this model much better than containers. But TBH you really can't beat reproducibility with containers. You just can't

Please, do not use «firecracker» word. You should use «KVM» word. Four and a half minutes of bullshit.

Nearly every single comment contradicts the point of this video, so as an aspiring dev… not gonna keep watching!

Tjroooottt

You kinda just reinvented the wheel. You can have (and most do) both containers and virtualization. Make clusters based on trust level and deploy apps according to level of trust. The platform runs on VMs, the apps run on containers. Haven't seen a PaaS run on bare metal for more than 6 years now.

This is super sensible. Network stacks in a safe language in userspace, without legacy bloat, are a big step up.

Very interesting. Thanks for the explanation.

Interesting approach! My first instinct was to tunnel the SSH connection through websockets via the fly proxy. There seems to be a project called huproxy doing exactly this. That way you wouldn’t have to ship an entirely separate TCP/IP stack. Would genuinely be interested if you have considered this and why you didn’t do it that way.

This exactly! : DD

As a senior SRE, I disagree with the concerns you’ve raised about containers. In a well-architected Kubernetes environment, it’s possible to achieve everything you’ve mentioned using containers, and this can be done without the overhead of VMs.

Do you really understand containers? 😂😂😂

Imma let you finish but I need to subscribe first because this is another top tier video ma'am.

Cloud Run..in other words

I am split between and awe and slight worry. Awe because it is impressive to which lengths you went to make user experience smooth. Worry because there is some little voice telling me that things could start going wrong if each app implements its own tcp stack. I enjoy your videos. keep making them, please.

its overengineered. OpenSSH already has the concept of jump hosts????

Docker is a VM. Just because they try to hide it from you and don't let you control it doesn't mean their product isn't total horseshit.

Dang, that's really cool.

Oh yay, a whole 'nother network stack that receives security patching separately from the kernel. Sounds like a security nightmare TBH, no thank you

Super!

These videos are so good.

ngl I thought this was that one game

I was wondering why I don’t need WireGuard anymore! That’s awesome!

and that is... a lot of annoying comments that makes me vomit and dont want to use it

amazing content like always

And that, is developer experience done right!

Nice video! You can update link to netstack, it's 1.23 already "This repo is no longer maintained. As of Go 1.17 and its lazy module loading we no longer need it, so we now just use upstream gVisor directly."

commercial over commercial on top of commercial to promote some more commercials.

and that is... killer marketing 🔥🔥🔥

I love your content. Keep it up!

These are such cool videos!

This is so cool! Thanks for making easy to use features like this.

And that is customer service

Kernel space TCP/IP stack also means enhanced performance. How does it compare to a userspace stack where you still eventually need to reach out to kernel to send bytes?

sounds like bastion server on demand

Without the cortisol 😂 nice touch, everytime I need to think about anything kubernetes I think my brain goes "ok, cortisol time!"

This is crazy and it can be used for other applications and use cases

Yo keep up the great content.

Good

I actualy tried to play with kata on k3s with fc to test it but I couldnt get it to work, but this video inspired me to try it again, BTW you are probably runing fc on k8s BTS for scaling, am I right?

Great but I hope you make similar thing for Django app too