Unikernels are here today.

The other way to eliminate protection boundary crossings is to push everything to userspace, a la Snabb, DPDK etc.