TechPrufer
Sign inGet started

Blogs›Vercel›Vercel Build Compute Platform (Hive)

Vercel Build Compute Platform (Hive)

Vercel Build Compute Platform (Hive)

2
posts
2024

Vercel's build infrastructure has been significantly enhanced with the introduction of 'Hive', a new low-level untrusted and ephemeral compute platform. Hive is designed for secure, reliable, and performant builds, utilizing a multi-tenant architecture with KVM and Firecracker microVMs (cells). Optimizations include Docker image caching and block device snapshotting for rapid VM startup, reducing provisioning times from 90 seconds to 5 seconds for Secure Compute customers. Overall build performance has improved by an average of 30%. Secure Compute integrates with Hive via WireGuard tunnels managed by a Key Exchange Service, enabling secure connections to private networks and backends with ephemeral keys and frequent instance rotation.

2024

Optimizing secure build infrastructure with Secure Compute

12/18/2024

This post details the integration of Vercel's Secure Compute with the Hive build compute platform. It explains the key components involved: EC2-based WireGuard connectors managed by autoscalers, a Key Exchange Service for distributing WireGuard public keys and routing information, and the use of WireGuard for encrypting traffic between Hive cells and Secure Compute networks. It also describes the network routing setup using Linux namespaces and CNI plugins to ensure secure traffic flow. The post highlights the significant reduction in provisioning times from 90 seconds to 5 seconds for Secure Compute builds after this integration, and an average 30% improvement in build performance.

A deep dive into Vercel’s build infrastructure

10/30/2024

Introduced 'Hive', a new compute platform for Vercel builds, featuring a multi-tenant architecture with KVM and Firecracker microVMs (cells). Detailed the components: Hive (cluster), Box (bare metal), Cell (VM), Control Plane (orchestration), and API. Explained the build lifecycle, including pre-warmed cells and rapid provisioning for new cells. Highlighted performance improvements: 30% overall build time reduction, and up to 40% reduction for builds requiring new cell provisioning, with provisioning times reduced from 90s to 5s.