On: We improved the performance of a userspace TCP sta...

[parhamn]

I've already accepted this whole thread is a digression, but I keep getting pulled in. Calling out my dislike for Gvisor on a thread lauding a 5x tcp performance they found in it felt on topic to me at the time.

[tptacek → parhamn]

Ok. I'm only triggered by two things:

1. An argument that a tool using netstack is in any way tainted with gVisor's runtime costs.

2. An argument that shared-kernel multitenant is tenable and thus gVisor addresses no meaningful security concerns.

[demi56 → tptacek]

Not gonna lie am also getting 200% triggered whenever he states gVisor Syscall costs lol