logo

Extreme Specialization for
Security and Performance

Unikraft automatically builds extremely efficient and secure software. By tailoring the operating system, libraries and tools to the particular needs of your application, it vastly reduces virtual machine and container image sizes to a few KBs, drastically cutting down your software stack's attack surface

A New Age of Unikernels

Unikraft is a comprehensive toolchain and library operating system which builds highly specialized unikernels, software bundles that consist of a target application along with just the operating system primitives and libraries features it needs to run.

Unikraft breaks the status quo of building unikernels manually, providing an automated toolchain that builds tailored unikernels that meet your (and your application's) needs.

github

Fast boot and
migration time

10s of milliseconds or less (as little as 2.3ms)[1][2].

github

Low memory footprint

Few MBs of RAM or less[3].

github

Strong security

Attack surface is reduced: including deadcode elimination; smaller trusted compute base; strong isolation by hypervisor.

github

High density

8k guests on a single x86 server[1].

github

High performance

10-40Gbps throughput on a single guest CPU[3][4].

github

Developer friendly

Unikraft is easily extensible and is packed with developer tools to suit your workflow.

  1. LightVM [Manco SOSP 2017]
  2. Jitsu [Madhvapeddy, NSDI 2015]
  3. ClickOS [Martins NSDI 2014]
  4. Elastic CDNs [Kuenzer VEE 2017]

Works with DevOps workflows

Unirkaft integrates into Continuous Integration and Continuous Delivery (CI/CD) systems as a compile-time specialization mechanism.

Open source

Unikraft is developed openly and in collaboration with institutes across the globe. Retain control of your software and avoid suprises.

Runs on all major platforms

Along with major CPU architectures, Unikraft can be deployed on leading cloud providers.