from Hacker News

Introducing Network Containers

by pkcsecurity on 10/1/15, 5:26 PM with 2 comments

  • by bpolverini on 10/1/15, 7:04 PM

    This is bomb. Interesting to see someone borrowing a page from microkernels to bring the networking stack into userspace.

    Hopefully, technologies like this create a renaissance for protocol design. ZT does the heavy lifting in terms of security and routing, and devs are just left with a flat network that can be optimized for the particular application. We've already had some pretty big wins using ZT to do this for encrypting links between our own microservices -- it'll be even nicer when we can do this at the container-level, without any additional Linux kernel hackery.