Serverless WebAssembly with Waxosuit

By Kevin Hoffman

Elevator Pitch

Waxosuit is a secure WebAssembly runtime environment for enterprise-grade, cloud-native applications with a focus on productivity and developer experience. Learn how WebAssembly can make building microservices and functions easy, secure, and fast.

Description

WebAssembly is currently benefiting from tremendous momentum and excitement. Everyone wants to use it, and the possibilities for its applications are seemingly limitless. However, most people think Wasm is just for building front-end, browser-based applications. I believe that WebAssembly’s true power niche is in the cloud, building portable, secure, enterprise-grade workloads that can run in Kubernetes, on workstations, in other docker schedulers, or even on Raspberry Pis and embedded devices.

Not only do I think WebAssembly belongs in the cloud, but I am convinced that we can eliminate the vast majority of boilerplate code by developing a secure way of exposing capability abstractions like message brokers, key-value stores, HTTP servers, clients, and much more to WebAssembly modules. This is where Waxosuit comes in.

I’ve created a host runtime that embeds secure JWTs in WebAssembly modules and dynamically loads capability providers, hosting a guest Wasm module that embraces the sandbox rather than violates it. In short, we can have our cloud-native cake and securely eat it too.

Notes

I’m unveiling this OSS project at KubeCon shanghai and will also likely be doing another presentation of it at KubeCon north america. I’ll also be mentioning this same project at O’Reilly OSCon 2019 in Portland.