Nigel Douglas

Product Marketing Manager

LinkedIn logo
kubectl proxy’s Filter Gap and Your kubelet /run Attack Surface

October 28, 2026

kubectl proxy’s Filter Gap and Your kubelet /run Attack Surface

Read more
Passing a TPU Through to a Paravirtualized Guest A customer asked us to run Google TPUs inside our zones. The obvious way to hand a guest a piece of PCI hardware is IOMMU-backed passthrough, and Xen has supported that for HVM guests for years. Our zones default to PV, without hardware virtualization extensions or a VT-x or AMD-V dependency. That is a big part of why they boot and fork as fast as they do. Moving these workloads to a different guest model would have meant giving up properties we deliberately built the runtime around, so the interesting problem was making passthrough work without changing the execution model. Xen's PV mode had never had an IOMMU story for a domU. Every DMA a PV guest issues goes out under dom0's address space, because PV was designed before device passthrough to an unprivileged domain was something anyone needed from it. The TPU work ended up being three problems stacked on top of each other. We had to give Xen an IOMMU interface a PV guest could actually

October 27, 2026

Passing a TPU Through to a Paravirtualized Guest

Read more
It's Beginning to Look a Lot Like CVE Season: PHP2Shell and Beyond

October 23, 2026

It's Beginning to Look a Lot Like CVE Season: PHP2Shell and Beyond

Read more

Edera Joins CNCF & Linux Foundation and Heads to KubeCon + CloudNativeCon London!

March 10, 2025

Read it Now

Kubernetes' Dirty Secret: Why You're Burning Cash on Containers

March 10, 2025

Read it Now

The RCE-cipe for Platform Security: Isolation Without Compromise

March 6, 2025

Read it Now

Have Your Cake and Eat It: Strong Isolation While Reducing Cloud Spend

March 4, 2025

Read it Now

Edera Raises $15 Million Series A to Transform Cloud and AI Infrastructure Security

February 25, 2025

Read it Now

2024 Vulnerability Exploitation Trends: Moving Beyond Whack-a-Mole Security

February 18, 2025

Read it Now

Critical NVIDIA Container Toolkit Vulnerability Highlights the Need for Strong Isolation

February 12, 2025

Read it Now