Overview
What this challenge is about.
Choose either MirageOS or Unikraft as the unikernel framework. Build an image running a minimal WireGuard data plane (existing OCaml or Rust WireGuard reference implementation is fine to wrap). Boot it on KVM with one network interface. Benchmark against a Linux + WireGuard baseline on: cold-boot time, idle memory footprint, throughput (iperf3), and 99th-percentile latency under 80 percent saturation. Deliver source, the docker-compose-equivalent reproduction (qemu wrapper script), benchmark report, and a 6-page recommendation memo covering the operational tradeoffs (no shell, no debug tooling, custom build pipeline).
The Brief
What you'll do, and what you'll demonstrate.
Build a unikernel-based WireGuard exit-node prototype and assess viability against a Linux baseline on boot time, footprint, throughput, and operational cost.
Earning criteria — what you'll demonstrate
- Understand unikernel design (library OS, single address space)
- Reason about the attack-surface vs operational-cost tradeoff
- Benchmark network throughput rigorously (saturation, percentiles)
- Recommend a kernel-architecture path that respects ops reality
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
Careers
Roles this prepares you for.
Real titles. Real skill bridges. Pick the one closest to your trajectory.
Career mappings coming soon.