Optimizing secure build infrastructure with Secure Compute
Dec 18, 2024

Summary
This post details the integration of Vercel's Secure Compute with its internal build compute platform, Hive. It explains the key components: EC2 instances as connectors using WireGuard for encrypted tunnels, a Key Exchange Service for managing keys and routing, and network routing via namespaces and CNI plugins. The post highlights the performance improvements achieved, reducing provisioning time from 90 seconds to 5 seconds and increasing build performance by 30% compared to the previous Fargate-based approach. It also describes the secure traffic flow and the process of starting a new Secure Compute build.