Vercel

Optimizing secure build infrastructure with Secure Compute

Dec 18, 2024
Optimizing secure build infrastructure with Secure Compute
SummaryAI, from the source post

This post details the integration of Vercel's Secure Compute with its internal build compute platform, Hive. It explains the key components: EC2 instances as connectors using WireGuard for encrypted tunnels, a Key Exchange Service for managing keys and routing, and network routing via namespaces and CNI plugins. The post highlights the performance improvements achieved, reducing provisioning time from 90 seconds to 5 seconds and increasing build performance by 30% compared to the previous Fargate-based approach. It also describes the secure traffic flow and the process of starting a new Secure Compute build.

More from the Vercel Build Compute Platform (Hive) trail