Stream: git-wasmtime

Topic: wasmtime / issue #2867 [Question] Is wasmtime suitable to...


view this post on Zulip Wasmtime GitHub notifications bot (May 05 2022 at 16:35):

alexcrichton commented on issue #2867:

This is a pretty old issue at this point, and for anyone still wondering the answer is "yes"

view this post on Zulip Wasmtime GitHub notifications bot (May 05 2022 at 16:35):

alexcrichton closed issue #2867:

I'm developing a plugin system for a database system in production to run untrusted user code as UDF similar to the one mentioned in [1].

I noticed that compared to Google's V8 js engine mentioned in the above-mentioned paper, wasmtime has a focus to be used in the environment outside of a browser. Thus, I'm more interested in embedding wasmtime than V8 in my application.

I noticed that there does not seem to be well-known industrial usage of wasmtime (compared to V8's use in Chromium and Cloudflare edge workers), but it seems to have experienced a fair amount of fuzzing[2], so I am wondering is wasmtime considered production-ready in the aspect of both reliability and performance?

As a newbie of Rust, I'm also quite worried about the vast dependencies of wasmtime and the possibility of a supply chain attack.

Thanks.

[1] Tian Zhang, Dong Xie, Feifei Li, and Ryan Stutsman. 2019. Narrowing the Gap Between Serverless and its State with Storage Functions. In ACM Symposium on Cloud Computing (SoCC ’19) (https://www.cs.utah.edu/~lifeifei/papers/shredder.pdf)
[2] https://bytecodealliance.org/articles/1-year-update


Last updated: Dec 23 2024 at 12:05 UTC