Memory Matters: Load-Time Deduplication for Unikernels
Unikernels offer strong isolation and performance benefits over traditional virtual machines, but their specialized, statically linked design complicates memory deduplication—particularly in multi-tenant environments. Traditional approaches like Kernel Samepage Merging (KSM) struggle with convergence delays, high CPU usage, and unpredictable memory savings. Dynamic linking improves memory reuse but compromises performance, simplicity, and security. We present Spacer-SLT, a novel load time deduplication mechanism that eliminates the need for memory scanners. Spacer-SLT extracts common libraries into a shared pool and uses a custom Firecracker-based loader to enable instant, deterministic memory deduplication at launch time. Unlike KSM, it introduces no runtime overhead and maintains the benefits of static linking, including performance and reduced attack surface.
Authors
- Gaulthier Gain (ORCID: https://orcid.org/0000-0002-8348-9555)
- Cyril Soldani
- Benoit Knott
- Laurent Mathy
Institutions
- University of Liège (BE)
Publication Details
- Published
- 2025-11-19
- DOI
- https://doi.org/10.1145/3772052.3772247
- Primary Topic
- Security and Verification in Computing
- Type
- article
- Field-Weighted Citation Impact
- 0.00