Sandboxing user code in Knative with kata containers, gvisor, and unikernels

https://gvisor.dev/docs/architecture_guide/performance/#star... should be pretty close, according to the numbers reported in the official docs. Essentially, it depends on what the workload does.

I am curious about the gvisor results. Does it really perform similarly to containers?