security isolation

Sub-Millisecond VM Sandboxes via Copy-on-Write

Starting a Docker container takes about 500 milliseconds. A Firecracker microVM takes about 125 milliseconds. A V8 isolate takes about 5 milliseconds. But a...