BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.cloud-native.rejekts.io//cloud-native-rejekts-atlant
 a-na-atlanta-2025//3XRKM8
BEGIN:VTIMEZONE
TZID:EST
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10;UNTIL=20061029T070000Z
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:STANDARD
DTSTART:20071104T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=11
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000402T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4;UNTIL=20060402T080000Z
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20070311T030000
RRULE:FREQ=YEARLY;BYDAY=2SU;BYMONTH=3
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-cloud-native-rejekts-atlanta-na-atlanta-2025-3JKGF7@cfp.cloud-n
 ative.rejekts.io
DTSTART;TZID=EST:20251108T151000
DTEND;TZID=EST:20251108T154000
DESCRIPTION:Kubernetes enables teams to deploy almost any workload without 
 modification\, but its boundaries are still defined by namespaces and cgro
 ups. The presence of seven container-escape CVEs from 2022 to 2024 shows t
 hese boundaries can be breached. Full VMs or Kata Containers can restore s
 ecurity but suffer from multi-second cold starts and high memory usage\, i
 mpacting latency-sensitive or densely packed clusters.\nIn this talk\, we 
 will explore a middle ground with Hyperlight\, a CNCF virtual-machine moni
 tor that boots micro-VMs\, and Nanvix\, an open-source Rust microkernel de
 signed to keep guests small yet compatible. This combination allows unmodi
 fied Rust\, Python\, and Wasm services to start up in tens of milliseconds
  while maintaining VM-class isolation.\nWe will delve into the architectur
 e\, present head-to-head benchmarks\, and conduct a live demo. By the end 
 of the session\, you will have a clear understanding of the trade-offs and
  a checklist for implementing micro-VM isolation.
DTSTAMP:20261013T135012Z
LOCATION:Crystal Dining Room
SUMMARY:VM-Class Secure\, Millisecond-Fast Cloud-Native Apps With Hyperligh
 t + Nanvix - Danilo (Dan) Chiarlone\, Pedro Henrique Penna
URL:https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atl
 anta-2025/talk/3JKGF7/
END:VEVENT
END:VCALENDAR