1
Let's discuss sandbox isolation
A dive into the spectrum of sandboxing and isolation, from Linux namespaces and gVisor to hardware-enforced microVMs and WebAssembly, and why picking the right boundary matters for multi-tenant workloads.
Everything, everywhere - always in progress
Visit shayon.dev → RSS feedOn Hacker News Jan 2022 – Feb 2026
Databases & Data 5Systems & Performance 2Software Engineering 2Infrastructure & DevOps 2Security & Privacy 1
A dive into the spectrum of sandboxing and isolation, from Linux namespaces and gVisor to hardware-enforced microVMs and WebAssembly, and why picking the right boundary matters for multi-tenant workloads.