[01.00]THE TENSION section 01 / 04

Cloud engineers shouldn't have to choose between fast, safe, and cheap.

For twenty years, infrastructure has forced a triangle: pick two. Containers boot fast but share kernels. VMs isolate but boot slow. Functions scale but fence in your stack. Unikraft Cloud is what happens when you refuse the trade-off.

[02.00]THE SHIFT section 02 / 04

Built for milliseconds, not minutes.

Three architectural rewrites — VM stack, network layer, app startup — engineered for one outcome: every workload starts, scales, and stops at hardware speed.

COLD START
10 ms

From dead-cold to first byte. 100× faster than typical alternatives.

INSTANCES / SERVER
100,000 +

Strongly isolated VMs on a single machine — Prisma runs PostgreSQL at this density.

MEMORY REDUCTION
10 ×

Specialized images carry only what your app needs.

INFRA COST CUT
99 %

Two orders of magnitude — measured in production.

[03.00]BUILD section 03 / 04

A standard Dockerfile.
A radically different runtime.

Your existing Dockerfile in. A specialized microVM image out — typically 10× smaller. Built on custom infrastructure tuned for millisecond cold boot times.

BUILD · STAGE 01

Dockerfile → microVM

Same source. Same registry workflow. A radically different runtime artifact comes out the other end.

DOCKERFILE
FROM node:20-slim
WORKDIR /app
COPY . .
RUN npm ci --omit=dev
CMD ["node","server.js"]
OCI IMAGE
APP
LIBC
LIBOS
KERNEL
microvm 25 MB ↓91%
UKC HOST
Highly isolated microVMs
LOCAL
REMOTE · UKC
$ UNIKRAFT BUILD · PUSH · CREATE
OCI · FIRECRACKER · 25 MB
  1. 01 No Dockerfile changes — same files, same registry workflow
  2. 02 Built locally with the unikraft CLI, pushed as a standard OCI image
  3. 03 Direct push: each UKC host runs its own OCI registry — no internet hop
  4. 04 Hardware isolation per instance — every microVM is its own VM
[04.00]SCALE TO ZERO section 04 / 04
Runtime · Stage 02

Idle to first byte —
inside one RTT.

The proxy buffers the request. The controller resumes the right instance from snapshot. The VMM brings the microVM live. The app replies — all within a single round trip. Animated below, phase by phase.

Cold-start within an RTT

A request lands. The proxy holds it open. The controller resumes the right instance from snapshot. The microVM ignites. The app replies — all before a traditional cloud has finished pulling its image.

req
buffer
id
resume
User
Proxy
Controller
VMM Firecracker
Instance
reply
unbuffer
ready
ready
Cold start < 10 ms · Idle cost $0