Server-side WebAssembly takes shape, but faces challenges

WebAssembly makes progress, but devil's in the details

While WASI-Preview 2's stable release of the component model has not yet become generally available, WebAssembly platform vendor Cosmonic unveiled its first support for the components model in its Wasm-based PaaS product this week. The vendor's CEO conducted a live demo of the component model within the company's wasmCloud platform in which he moved a simple workload between AWS, Azure and an IoT device on his badge during a keynote presentation.

"If that doesn't let you know that the Wasm component model is ready for prime time, I don't know what [will]," said Liam Randall, founder and CEO at Cosmonic, during the presentation. "With the component model, we finally have our Docker moment."

Other WasmCon presenters took a more tempered view but still expressed optimism that server-side WebAssembly will be key to the next generation of edge computing in IoT and manufacturing environments.

We still see WebAssembly as the most promising solution. … [It] has such a low overhead compared to systems like containers that it's really a cheap decision.

Over the last year, engineers at automotive, industrial technology and consumer goods manufacturing company Robert Bosch LLC and its subsidiaries have developed open source software components that link WASI to existing automotive compute systems, according to another keynote presenter.

"We still see WebAssembly as the most promising solution. … [It] has such a low overhead compared to systems like containers that it's really a cheap decision," said Emily Ruppel, research scientist at Bosch Research, during a WasmCon keynote presentation. "As much as it is challenging to make this work [with heterogeneous hardware targets], it's still our best bet because that low memory overhead means we have more room for applications on tiny [systems]."

So far, the WASI component model has also proven too heavy to run on the smallest IoT microprocessors, Ruppel said.

While Bosch's teams have demonstrated that their new WASI stack can support real-time, safety-critical applications in a manufacturing environment through lab tests, there's still much that needs to be done to make the tech more mature and to get it certified by regulators, Ruppel said.

"The big thing that's keeping us from taking WebAssembly and deploying it in real safety-critical systems right now … is that establishing the safety of an emerging standard is extremely challenging," she said. "A concerted effort to safety-certify the WASI toolchain will be required."

Slow but steady wins the race?

As these challenges emerge and more is disclosed about WASI's component model, some industry observers have begun to wonder whether it's all worthwhile.

"I'm not a big fan of the component model -- it feels like an obvious scope creep that's going to result in over-engineered APIs that never mature," wrote Dan Lorenc, co-founder and CEO at container-based software supply chain security vendor Chainguard Inc., in a LinkedIn post Sept. 5. "The group is now working on new neural network APIs, key/value stores -- if you can dream it, they can standardize it! … but history has shown that we never get these things right on the first try. Baking them into WASI means we'll either never finish, or get a bunch of formalized, half-baked APIs that make it harder to advance the spec long-term."

Lorenc isn't alone in doubts about server-side WebAssembly. According to the Cloud Native Computing Foundation's first State of WebAssembly report, released this week, enterprise IT pros that work with WASI remain in the minority, with 34% of 252 respondents saying they are currently using WASI in their projects. Another 34% said they planned to use it in the next 12 months. But there are several key features respondents said they were awaiting as WASI develops, such as support for HTTP requests, SQL stores and filesystem support.

WASI-Preview 3, due out in the first quarter next year, will break ground on important features WASI-Preview 2 doesn't address that are also crucial for production-grade enterprise applications, such as application concurrency and streaming support, according to Wagner's presentation. WASI-Preview 3 will introduce the concept of a handler that simplifies the connections between Wasm components, Wagner said.

Another WasmCon presentation explored ongoing work within the WASI group to fully support programming languages with garbage collection mechanisms that are among the most popular used by enterprises, including Go, Java, JavaScript, Python and Ruby.

Finally, WASI maintainers must address enterprise security concerns and ensure backward compatibility between versions of the technology as they go, which will also make for a slow process, said Larry Carvalho, an independent analyst at Robust Cloud. But in his view, that's OK.

"I would rather have the WASI standards team take time and do a good job than rush something through," Carvalho said. "A well-thought-out standard will enable radically different use cases rather than an approach that hobbles future innovation because WASI is half-baked."

Beth Pariseau, senior news writer at TechTarget, is an award-winning veteran of IT journalism. She can be reached at [email protected] or on Twitter @PariseauTT.