OCI Runtime Comparison and Analysis Study

Abstract

Containers are one of the technologies required for cloud services. Because containers use resources directly on the host, they are lighter and faster than traditional virtual machines. However, it has the disadvantage of poor security and isolation. To solve this problem, security-oriented runtimes such as Kata, gVisor, and Firecracker have emerged. Each runtime is created differently, so performance and resource usage are different. In this study, performance and evaluation of each low-level runtime are conducted.