Part of Volt · CAS Virtualization

Neutron Stardust
Virtualization Without Compromise

Sub-millisecond VM restore. Hardware KVM isolation. Cross-architecture emulation. Content-addressed storage. Every workload, one platform.

From microVMs that wake faster than a network round-trip to full Windows guests and legacy SCADA emulation — all managed through a single CLI.

0.551ms
Snapshot Restore
185×
Faster than Firecracker
3.9 MB
Binary Size
24 MB
Per-VM Footprint
Get Started Explore Features
volt — vm operations
# Restore a microVM from snapshot in sub-millisecond
$ volt workload restore api-worker --from snapshot:latest
✓ Restored from CAS in 0.55ms (in-memory + pool)
● api-worker running — 10.0.1.42:8080

# Launch a Windows VM with UEFI + TPM
$ volt workload create win-dev --mode hybrid-kvm --qemu-profile kvm-uefi
✓ OVMF firmware · vTPM · VNC :5901
● win-dev running — Windows 11 Pro

# Emulate ARM firmware for testing
$ volt workload create arm-test --mode hybrid-emulated --qemu-profile emulate-foreign
✓ TCG aarch64 · 2 vCPU · 4G RAM
● arm-test running — ARM64 Linux

Every Virtualization Use Case

Neutron Stardust isn't one trick. It's the complete CAS virtualization layer inside Volt — from ephemeral microVMs to persistent Windows desktops to cross-architecture emulation.

Scale-to-Zero MicroVMs

VMs that sleep when idle and wake in microseconds. True zero-cost when there's no traffic — not paused, fully deallocated.

  • 0.551ms in-memory restore with VM pool
  • 1.04ms disk-based restore with VM pool
  • Pre-warmed pool decouples VM creation from identity
  • Demand-paged mmap — only active pages load
  • 10,000+ VMs per host
🛡️

Hardware KVM Isolation

Full hardware-assisted virtualization for production Linux workloads. Headless, virtio-optimized, and built for density.

  • Intel VT-x / AMD-V hardware virtualization
  • virtio-blk + virtio-net paravirtual devices
  • SMP support (1-4+ vCPUs)
  • Copy-on-write snapshots via Stellarium CAS
  • 33% less memory per VM than Firecracker
🖥️

Windows & UEFI Guests

Full-featured KVM guests with OVMF firmware, TPM 2.0 emulation, VNC access, and USB passthrough. Run real Windows in production.

  • OVMF UEFI Secure Boot
  • Virtual TPM for Windows 11
  • VNC + USB passthrough
  • QEMU kvm-uefi profile via Stellarium
  • GPU passthrough ready
🌐

Cross-Architecture Emulation

Run ARM, RISC-V, MIPS, or PowerPC workloads on x86 hardware — or emulate legacy x86 systems with full TCG software translation.

  • QEMU TCG — full software emulation
  • ARM64, RISC-V, MIPS, PowerPC targets
  • Legacy x86 for SCADA / industrial systems
  • Firmware development and testing
  • No special hardware required
💎

Stellarium CAS

Every VM image, snapshot, and QEMU profile is stored in content-addressed storage. Instant deduplication, zero-copy clones, and global distribution.

  • 2 MB chunk deduplication (SHA-256)
  • Cross-VM dedup for shared kernel pages
  • In-memory blob cache for zero-copy restore
  • Incremental snapshots — only deltas stored
  • QEMU profiles stored and versioned in CAS
🔒

Defense-in-Depth Security

Five independent isolation layers. An attacker would need to defeat all of them to escape the VMM sandbox. No single point of failure.

  • Seccomp-BPF — 78 syscalls allowed, all others kill
  • Landlock LSM — kernel-level filesystem restriction
  • Linux capability dropping on startup
  • Namespace isolation per VM
  • Memory bounds enforcement

Measured, Not Marketed

All benchmarks on Intel Xeon Silver 4210R, 376 GB DDR4 ECC, NVMe SSD. 15 iterations per configuration, outliers removed at 2σ. Comparison target: Firecracker v1.6.0.

In-Memory + Pool Restore
0.551ms
185× faster than Firecracker snapshot restore. Faster than a cross-datacenter round-trip.
Disk-Based + Pool Restore
1.04ms
98× faster. Demand-paged mmap with pre-warmed VM pool eliminates cold-start entirely.
Cold Boot vs Firecracker
1.92×
Nearly 2× faster VM creation even without snapshots. Leaner KVM initialization path.
Memory per VM
24 MB
33% less than Firecracker's 36 MB. Higher density means better infrastructure economics.
Restore Configuration Time vs. Firecracker
Firecracker v1.6.0 102ms baseline
Stardust disk (no pool) 31ms 3.3× faster
Stardust in-memory (no pool) 24.5ms 4.2× faster
Stardust disk + VM pool 1.04ms 98× faster
Stardust in-memory + VM pool 0.551ms 185× faster

Built for Real Workloads

Whether you're running serverless functions, emulating legacy hardware, or giving every customer their own isolated VM — Neutron Stardust has a profile for it.

🚀

Serverless & FaaS

True scale-to-zero with sub-millisecond cold starts. Functions wake faster than a DNS lookup. No warm pool waste.

MicroVM Scale-to-Zero CAS
🏢

Multi-Tenant SaaS

One VM per customer with full kernel-level isolation. No noisy neighbors. VMs hibernate when the customer is offline — pay only for active tenants.

KVM Isolation Scale-to-Zero Density
🔧

CI/CD Pipelines

Pristine build environments in milliseconds. Every pipeline run gets an isolated VM, restored from a golden snapshot. No state leaks between builds.

MicroVM Ephemeral Snapshot
🖥️

Windows Desktops

Full Windows 11 with TPM, Secure Boot, VNC, and USB passthrough. Remote dev environments, compliance testing, or VDI — all running on KVM.

UEFI KVM Windows
🏭

Legacy & Industrial

Emulate legacy x86 systems, SCADA controllers, or decades-old firmware without dedicated hardware. Full TCG software translation keeps old systems alive.

QEMU TCG x86 Emulation Industrial
🌍

Cross-Architecture Dev

Build and test for ARM64, RISC-V, MIPS, or PowerPC — all on your x86 servers. No special hardware. No cross-compilation nightmares.

Foreign Arch QEMU TCG Dev/Test
🎮

Edge & Gaming

Spin up game server instances in milliseconds as players connect. Scale down when they leave. GPU passthrough for graphics-intensive workloads.

Low Latency KVM GPU Passthrough
🔬

Security Research

Isolated malware analysis environments. Restore to a known-good state in microseconds. Every sample gets a fresh, disposable VM with full hardware isolation.

Isolation Ephemeral Snapshot Restore
💾

Dev Environments

Pre-configured development VMs that boot instantly from CAS snapshots. Every developer gets an identical, isolated environment. Changes tracked as deltas.

CAS Instant Boot Dedup

How It Works

~24,000 lines of Rust compiled into a 3.9 MB binary. Type-2 KVM hypervisor with demand-paged memory, pre-warmed VM pools, and content-addressed storage.

┌─────────────────────────────────────────────────────────────────┐
                      Stellarium CAS Layer                       
                                                                 
   ┌──────────┐ ┌──────────┐ ┌──────────┐ ┌──────────┐         
   │ Chunk A  │ │ Chunk B  │ │ Chunk C  │ │ Chunk D  │  ...   
   │  (2MB)   │ │  (2MB)   │ │  (2MB)   │ │  (2MB)   │         
   └──────────┘ └──────────┘ └──────────┘ └──────────┘         
      ▲ shared     ▲ unique     ▲ shared     ▲ unique       
                                                                 
                    Zero-copy reference                         
                                                                 
                                                                 
   ┌─────────────────────────────────────────────────────┐   
                 Neutron Stardust VMM                      
                                                           
     KVM_SET_USER_MEMORY_REGION → cached chunks            
     mmap MAP_PRIVATE → demand-paged fault-in              
                                                           
     VM Pool: Pre-warmed VMs absorb KVM_CREATE_VM cost    
     Restore: Claim → mmap → registers → devices          
                                                           
     Total: 0.551ms                                       
   └─────────────────────────────────────────────────────┘   
                                                                 
   ┌──────────────────────────────────────────────────┐      
                 QEMU Integration Layer                     
                                                           
     kvm-linux  │  kvm-uefi  │  emulate-x86                
     emulate-foreign  │  Profiles stored in CAS          
   └──────────────────────────────────────────────────┘      
                                                                 
   ┌──────────────────────────────────────────────────┐      
                 Security Layers                            
                                                           
     seccomp-bpf (78 syscalls) │ Landlock LSM              
     Capability drop │ Namespaces │ Memory bounds         
   └──────────────────────────────────────────────────┘      
└─────────────────────────────────────────────────────────────────┘
🧊

Demand-Paged Memory

VM memory is mmap'd with MAP_PRIVATE — execution begins immediately. Pages fault in on-demand as the guest touches them. Cold pages never leave disk.

♻️

Pre-Warmed VM Pool

KVM_CREATE_VM takes ~24ms. The pool creates VMs in advance, absorbing that cost outside the critical path. VMs become fungible resources, shaped at restore time.

📦

QEMU Profiles in CAS

Four QEMU sub-profiles — kvm-linux, kvm-uefi, emulate-x86, emulate-foreign — stored, versioned, and deduplicated in Stellarium alongside microVM snapshots.

Ready to Collapse the Stack?

Neutron Stardust ships with Volt. One install, every virtualization capability. No Docker. No compromise.

Install Volt Read the Docs View Source