Edera announces KVM support alongside Xen for its micro-VM isolation platform at KubeCon Europe, letting customers run secure zones on existing infrastructure.

The New Stack is a publication covering trends and technologies in cloud-native development, DevOps, and software delivery. Developers can learn about containerization, Kubernetes, and cloud computing, as well as explore topics such as microservices architecture, serverless computing, and continuous integration/continuous delivery (CI/CD) pipelines.

The New Stack

Edera, known for building its micro-VM isolation platform on the Xen hypervisor, is adding KVM support this summer. Despite previously positioning Xen as more secure than KVM, the company is responding to customer demand from organizations with existing KVM infrastructure. The core isolation model — zones with per-workload kernels, isolated memory, and device namespaces — remains unchanged; only the underlying hypervisor substrate changes. Xen retains advantages for greenfield deployments, GPU assignment, and high-assurance features like secret escrow, while KVM support enables brownfield adoption without infrastructure rebuilds. The shift also reflects KVM's growing dominance as AWS, T-Mobile, and others have migrated away from Xen.

Edera spent years calling KVM less secure. Here’s why it changed its mind.