Linux userfaultfd is fascinating and seems like a slam dunk when running a large fleet of mostly homogenous VMs. For a kernel feature that's been around for over a decade it's surprising how little content there is out there about how it's used in practice, so great to see this post.
Kernel clearly seems to be winning against vanilla firecraker, but im curious how it compares to other browser infra providers that also use firecraker?
firecracker is an obvious place to start because it offers best-in-class support fast cold starts and hard isolation. we can't speak to what exactly the other browser infra providers are doing, but based on public benchmarks we're up to 5.8x faster