github.com/SagerNet/gvisor@v0.0.0-20210707092255-7731c139d75c/website/index.md (about)

     1  <div class="jumbotron jumbotron-fluid">
     2    <div class="container">
     3      <div class="row">
     4        <div class="col-md-3"></div>
     5        <div class="col-md-6">
     6          <p>gVisor is an <b>application kernel</b> for <b>containers</b> that provides efficient defense-in-depth anywhere.</p>
     7          <p style="margin-top: 20px;">
     8            <a class="btn" href="/docs/user_guide/install/">Get started&nbsp;<i class="fas fa-arrow-alt-circle-right ml-2"></i></a>
     9            <a class="btn" href="/docs/">Learn More&nbsp;<i class="fas fa-arrow-alt-circle-right ml-2"></i></a>
    10          </p>
    11        </div>
    12        <div class="col-md-3"></div>
    13      </div>
    14    </div>
    15  </div>
    16  
    17  <div class="container"> <!-- Full page container. -->
    18  
    19  <div class="row">
    20    <div class="col-md-4">
    21      <h4 id="seamless-security">Container-native Security <i class="fas fa-lock"></i></h4>
    22      <p>By providing each container with its own application kernel, gVisor
    23      limits the attack surface of the host. This protection does not limit
    24      functionality: gVisor runs unmodified binaries and integrates with container
    25      orchestration systems, such as Docker and Kubernetes, and supports features
    26      such as volumes and sidecars.</p>
    27      <a class="button" href="/docs/architecture_guide/security/">Read More &raquo;</a>
    28    </div>
    29  
    30    <div class="col-md-4">
    31      <h4 id="resource-efficiency">Resource Efficiency <i class="fas fa-feather-alt"></i></h4>
    32      <p>Containers are efficient because workloads of different shapes and sizes
    33      can be packed together by sharing host resources. gVisor uses host-native
    34      abstractions, such as threads and memory mappings, to co-operate with the
    35      host and enable the same resource model as native containers.</p>
    36      <a class="button" href="/docs/architecture_guide/resources/">Read More &raquo;</a>
    37    </div>
    38  
    39    <div class="col-md-4">
    40      <h4 id="platform-portability">Platform Portability <sup>&#9729;</sup>&#9729;</h4>
    41      <p>Modern infrastructure spans multiple cloud services and data centers,
    42      often with a mix of managed services and virtualized or traditional servers.
    43      The pluggable platform architecture of gVisor allows it to run anywhere,
    44      enabling consistent security policies across multiple environments without
    45      having to rearchitect your infrastructure.</p>
    46      <a class="button" href="/docs/architecture_guide/platforms/">Read More &raquo;</a>
    47    </div>
    48  </div>
    49  
    50  </div> <!-- container -->