ELASTIC Participates in the “Women in ICT Standardisation” Webinar – 5th Edition

On 20 March 2026, the “Women in ICT Standardisation” webinar – 5th edition will bring together experts, researchers, policymakers, and industry representatives to discuss how to strengthen the participation and visibility of women in the development of ICT standards.

ELASTIC Releases RP1 Results Presentation and Research Outputs

Following the publication of its mid-term success press release, the ELASTIC project is now sharing a consolidated overview of the work carried out during its first reporting period (M1–M18).

To present these results in a structured way, the consortium has released the ELASTIC RP1 Results Presentation, bringing together the main outcomes achieved during the first phase of the project. The presentation summarises progress across the project’s work packages, covering technological developments, demonstrator preparation, research outputs, and activities related to dissemination, exploitation, and standardisation.

Highlights from the First Reporting Period

Future 6G services will operate across a highly distributed cloud–edge–IoT continuum, spanning constrained IoT devices, industrial edge nodes, private infrastructures, and public clouds. Ensuring secure, portable, trustworthy, and efficient execution across such heterogeneous environments is a major challenge identified by the Smart Networks and Services Joint Undertaking (SNS JU).

The ELASTIC project addresses this challenge by introducing a framework that enables workloads to run seamlessly on-premise, at the edge, or in the cloud, without compromising security, confidentiality, or performance. By combining technologies such as WebAssembly, extended Berkeley Packet Filter (eBPF), and confidential computing, ELASTIC enables lightweight, isolated, and privacy-preserving execution, architecture-agnostic serverless orchestration, and secure IoT and edge services aligned with European 6G priorities.

During its first reporting period, the project consolidated its reference architecture, mapped 25 interoperable components to demonstrator requirements, and delivered initial implementations and prototypes supporting secure and efficient orchestration across distributed infrastructures.

Key achievements of the first phase include:

• Development of the ELASTIC architecture and technology framework supporting orchestration across the cloud–edge continuum.
• Progress in lightweight workload execution and serverless orchestration technologies based on WebAssembly.
• Advances in confidential computing approaches, integrating Trusted Execution Environments (TEEs) and remote attestation mechanisms.
• Implementation of monitoring and observability mechanisms using eBPF, enabling efficient security analysis and system monitoring.
• Preparation of the ELASTIC demonstrators for validating technologies in real-world environments.
• Contributions to scientific publications, open-source ecosystems, and standardisation initiatives.

Key ELASTIC Technologies Developed in RP1

During its first reporting period, ELASTIC delivered several core technologies forming the foundation of its secure orchestration framework across the cloud–edge–IoT continuum. These components demonstrate how lightweight execution environments, confidential computing, and advanced observability mechanisms can be combined to support trustworthy and efficient service deployment.

Among the technologies developed within the project are:

• Propeller Orchestrator – A unified orchestration framework for managing and deploying WebAssembly workloads across heterogeneous infrastructures, from cloud environments to edge and IoT devices.
• Wasm-operator – A framework enabling Kubernetes operators to run as event-driven serverless functions using WebAssembly, improving portability and resource efficiency.
• WasmHAL-Trust – A hardware abstraction layer enabling WebAssembly workloads to run securely within Trusted Execution Environments, supporting confidential computing across different platforms.
• Reliable Enclave Migration Protocols – Mechanisms enabling secure migration of workloads between trusted environments while ensuring continuity, accountability, and trust.
• NETTO and eBPF-based Observability Frameworks – Technologies enabling real-time monitoring and analysis of distributed workloads with minimal performance overhead.
• AI-based Intrusion Detection System (AI-IDS) – A hardware-accelerated intrusion detection framework integrating artificial intelligence techniques with eBPF-based monitoring to detect threats in distributed infrastructures.

These technologies contribute to the ELASTIC vision of enabling secure, portable, and efficient service execution across distributed infrastructures supporting future 6G systems.

Demonstrators and Validation Scenarios

To validate its technologies in realistic environments, ELASTIC is developing two demonstrators based on concrete operational scenarios.

Smart Connected Factory of the Future

The first demonstrator focuses on a secure IoT data fabric for industrial environments, showcasing how ELASTIC technologies can support orchestration across distributed factory infrastructures.

Three complementary scenarios are explored:

• Predictive Maintenance, where sensor data is processed at the edge to detect anomalies in real time while protecting machine data and intellectual property.
• Cross-Factory Data Sharing, enabling collaboration between manufacturing sites through federated learning while preserving data sovereignty.
• Real-Time Robot Control, where control logic is executed close to robots to guarantee the ultra-low latency required for safety-critical automation.

Across these scenarios, workloads are dynamically orchestrated across the edge-cloud continuum, sensitive data is protected within Trusted Execution Environments, and execution integrity is verified through remote attestation mechanisms.

Privacy-Preserving Cloud Migration

The second demonstrator validates the secure migration of sensitive enterprise services to cloud environments. The demonstrator focuses on the Badge Request Tool (BRT), which manages personal and security-critical identity data.

Within this scenario, the service runs inside Trusted Execution Environments to protect data during processing, while remote attestation verifies the trustworthiness of the cloud infrastructure.

ELASTIC RP1 Results Presentation

The ELASTIC First Reporting Period Results Presentation provides a consolidated overview of the work carried out during the first phase of the project.

The presentation includes:

• The ELASTIC vision and reference architecture
• Progress across the technical work packages
• Development of core technologies and prototypes
• Preparation of industrial demonstrators
• Scientific publications and open-source contributions
• Activities related to dissemination, exploitation, and standardisation

Explore ELASTIC RP1 Outputs

In addition to the results presentation, several outputs from the first phase of the project are available for the community:

• Scientific publications presenting research results on WebAssembly security, eBPF technologies, confidential computing, and distributed orchestration.
• Public deliverables describing the project architecture, technology design, and research findings.
• Demonstration videos showcasing selected ELASTIC technologies and experimental results.
• Open-source releases enabling researchers and developers to explore and build upon the technologies developed within the project.

These resources provide deeper insight into the work carried out by the ELASTIC consortium and reflect the project’s commitment to openness, collaboration, and knowledge sharing.

Looking Ahead

During its first reporting period, ELASTIC defined a consolidated architecture, identified 26 core components, and delivered initial implementations of 14 prototypes supporting secure orchestration across distributed infrastructures.

The project also established strong links with open-source ecosystems and international standardisation initiatives, including activities related to W3C/WASI and ETSI.

As the project progresses, ELASTIC will continue integrating its technologies into the demonstrators and expanding its contributions to research, open-source communities, and standardisation efforts, helping enable secure, efficient, and trustworthy 6G cloud–edge services.

ELASTIC Consortium Meeting in Lund: Advancing Integration and Demonstrator Development

Integration milestones, demonstrator alignment, and confidential computing developments mark an important step forward for the ELASTIC 6G research project.

The ELASTIC consortium gathered in Lund, Sweden, on 20–21 January 2026 for a two-day plenary and technical meeting hosted by Lund University. Bringing together partners from academia, research organisations, and industry, the meeting provided an opportunity to review the project’s latest developments and strengthen collaboration as ELASTIC enters a critical phase of technology integration.

With several core components reaching maturity, the focus of the consortium is now shifting from individual developments toward system-level integration and demonstrator validation. These efforts aim to ensure that the technologies developed across the project can operate together as a coherent framework enabling secure, portable, and efficient orchestration across the cloud–edge–IoT continuum, a key requirement for future 6G infrastructures.

Key Outcomes of the Lund Meeting

The meeting allowed partners to align their technical work and prepare the next steps of the project, with several important outcomes:

• Alignment of technical components developed across ELASTIC work packages
• Progress in integrating orchestration, security, and monitoring mechanisms
• Consolidation of demonstrator integration workflows
• Advancements in confidential computing and remote attestation technologies
• Coordination of the roadmap towards upcoming milestones and validations

Progress Across ELASTIC Technical Work Packages

WP1 – Efficient, Portable and Secure Executable Isolation
WP1 partners presented progress on secure execution environments based on WebAssembly and related runtime technologies. The work focuses on enabling portable workloads that can run across heterogeneous infrastructures while maintaining strong isolation and security guarantees. Recent developments strengthen runtime extensibility and cross-platform execution, allowing ELASTIC workloads to operate consistently across IoT devices, edge systems, and cloud environments.

WP2 – Serverless Orchestration and Distributed Execution
WP2 discussions focused on the orchestration layer responsible for managing distributed services across the cloud–edge continuum. Partners presented progress on serverless orchestration frameworks, distributed supervision mechanisms, and networking technologies that support low-latency communication between services. These capabilities enable dynamic service deployment and efficient lifecycle management of workloads across heterogeneous infrastructures.

WP3 – Confidential Computing and Trusted Execution
Within WP3, partners reviewed developments related to Trusted Execution Environments (TEEs), remote attestation, and secure workload lifecycle management. These technologies enable privacy-preserving service execution, ensuring that sensitive data can be processed securely even in partially trusted infrastructures. The work contributes to building a strong trust layer within the ELASTIC architecture.

WP4 – Secure and Efficient Edge Workload Orchestration
The WP4 session highlighted progress in enabling secure and resource-efficient computation at the edge. Partners discussed technologies supporting machine learning at the edge, hardware-assisted security mechanisms, and lightweight protection techniques for IoT and industrial environments. These capabilities ensure that ELASTIC technologies can operate effectively in resource-constrained edge infrastructures while maintaining high performance and strong security guarantees.

WP6 – Dissemination, Standardisation and Exploitation
The consortium also reviewed dissemination activities and ecosystem engagement efforts aimed at maximising the impact of ELASTIC results. Partners continue to contribute to scientific publications, open-source communities, and relevant standardisation initiatives related to WebAssembly, edge computing, and secure service orchestration. These activities strengthen ELASTIC’s position within the broader European 6G research ecosystem.

Integration Focus: From Components to End-to-End Systems

A central focus of the Lund meeting was advancing the integration of ELASTIC technologies into complete validation environments. Dedicated workshops examined how orchestration mechanisms, runtime environments, security technologies, and monitoring tools can be combined into coherent systems capable of supporting distributed applications.

Rather than revisiting application scenarios, partners concentrated on practical integration aspects such as component interoperability, deployment workflows, and validation infrastructures. These discussions helped clarify the technical roadmap for the coming months and strengthened coordination across the consortium.

By aligning these elements, the project is moving closer to demonstrating how ELASTIC technologies can support secure and efficient service execution across distributed cloud–edge infrastructures.

Preparing the Next Phase of ELASTIC

As the project advances, the consortium will continue focusing on system integration, demonstrator validation, and ecosystem engagement. Upcoming work will concentrate on validating the ELASTIC framework in realistic environments while further strengthening collaborations with research communities, industry stakeholders, and standardisation initiatives.

The meeting also provided an opportunity for the consortium to review the feedback received during the project review, discussing the recommendations and aligning the next technical and coordination steps accordingly. These discussions helped ensure that the project continues to progress in line with its objectives while strengthening the integration and validation activities planned for the coming months.

The meeting helped align the consortium on the next phase of the project, with a clear focus on integrating the project’s technologies and preparing the demonstrators for upcoming validation activities.

As always, the technical sessions were complemented by a consortium social dinner, offering partners the opportunity to connect beyond formal discussions. These informal moments remain an important part of ELASTIC’s collaboration culture, strengthening trust and teamwork across organisations and countries.

PRESS RELEASE: ELASTIC Mid-Term Success

Advancing secure, efficient, and portable orchestration of 6G edge–cloud services through WebAssembly, eBPF, and Confidential Computing.

The Horizon Europe project ELASTIC – Efficient, portabLe And Secure orchesTration for reliable servICes, funded by the Smart Networks and Services Joint Undertaking (SNS JU), has successfully completed its mid-term reporting period. The European Commission confirmed that ELASTIC delivered strong scientific, technical, and industrial progress, proving the feasibility of secure, portable, and confidential workload execution across edge, cloud, and 6G infrastructure.

At the midpoint of the project, ELASTIC has already demonstrated that future services can be executed anywhere — on-premise, at the edge, or in the cloud — without losing control over security, confidentiality, or performance.

Mid-Term Achievements at a Glance

During RP1, ELASTIC built the scientific, technological, and ecosystem foundations required to demonstrate secure edge–cloud orchestration at scale.

Technical and architectural progress

The consortium delivered a reference architecture, aligning all technical work packages. ELASTIC defined 26 software components, implemented first working versions of 14 prototypes, and derived 40+ functional and non-functional requirements directly from demonstrator needs. The project contributed to 7 major open-source ecosystems (LLVM, WASI, kube-rs, etc.), reinforcing technology transfer and adoption beyond the project.

Demonstrators and validation setup

Two demonstrators — Smart Connected Factory of the Future (D1) and Migration of a Sensitive IT Service from On-Premise to Public Cloud (D2) — were fully defined.

Three test environments were prepared across partner sites, and two MVPs were delivered to guide integration. More than 40 validation KPIs were defined to guarantee measurable impact.

Strategic and ecosystem engagement

ELASTIC established the External Expert Advisory Board (EEAB) and held its first meeting, providing validation and steering from leading European experts. The project engaged in collaboration with four clustering projects (CONFIDENTIAL6G, HARPOCRATES, RIGOUROUS, PREDICT-6G) and connected with five global innovation ecosystems, including the Confidential Computing Consortium (CCC), CNCF, eBPF Foundation, OSF, and OECG. These engagements strengthen alignment with SNS JU priorities: trust, efficiency, and interoperability.

ELASTIC also contributes to SNS JU and 6G-IA strategic work, with participation in 2 programme boards (Steering and Technical), 1 Communication Task Force, and 9 SNS working groups covering security, architecture, hardware technologies, TMV, pre-standardisation, and software networking.

Dissemination, communication, and scientific visibility

The ELASTIC website attracted 2K+ unique visitors and 4.3K total visits, supported by active social media (590 followers) and the publication of 8 public deliverables, newsletters, videos, and press releases.

The consortium published 16 scientific papers, participated in 30+ events, organised a webinar with 125 participants, and distributed 1,700+ communication materials.

Exploitation and standardisation impact

ELASTIC completed the first phased exploitation plan, analysed exploitation potential for 26 components, and prioritised 5 Key Exploitable Results (KERs) for industrial uptake. The project contributes to standardisation through W3C/WASI, ETSI, 3GPP, ENISA, FIRST.org, and is already collaborating with 34+ external organisations, with 15 expressing interest in testing ELASTIC outputs.

Work Package Achievements

WP1 — Efficient, Portable and Secure Executable Isolation

During RP1, WP1 established the technical foundation of ELASTIC by analysing the state of the art in WebAssembly and eBPF sandboxing and using the findings to define the project’s component architecture (submitted as Deliverable D1.1). Building on this analysis, WP1 introduced new techniques to strengthen WebAssembly sandbox security, improving memory safety and enabling secure and portable execution both in traditional environments and in distributed deployments. WP1 also contributed to early confidential computing validation, demonstrating that WebAssembly workloads can be combined with secure enclave technologies such as Intel TDX and AMD SEV-SNP, ensuring portability and orchestration security across heterogeneous infrastructures.

In parallel, WP1 delivered tangible technical advances through innovative tooling and hardware acceleration. The team developed Pretty Verifier, a new eBPF static analysis tool that improves usability and vulnerability detection, and introduced an FPGA-accelerated intrusion detection system (IDS), already showing more than 25% performance improvement compared to software-based IDS. WP1 also contributed to open-source through early releases of WASI interfaces, the wasm-operator interface, and the ELASTIC HAL. Initial work explored portable packaging for WebAssembly components and feasibility of component models for eBPF—supporting future attestation, deployment, and integration into ELASTIC demonstrators.

In RP2, WP1 will focus on performing extensive analyses and memory-safety research. WP1 will expand the wacky static analysis tool to support the broader WASI component model, implement WASI-SPI hardware abstraction, and integrate enclave migration protocols into other ELASTIC components. Work will continue on modular Wasm/eBPF applications, including contributions to a joint WP6 whitepaper on standardisation gaps and recommendations.

WP2 — Portable orchestration through WebAssembly-based FaaS

During RP1, WP2 delivered the core serverless FaaS orchestration results captured in D2.1 and D2.2. The team released the Propeller orchestrator (open-source) and a wasm-operator PoC enabling event-driven, low-footprint orchestration from cloud to RTOS and microcontroller nodes, and published CoCoS, an open-source confidential AI framework that runs ML inside TEEs. WP2 also produced Cyber-Physical WASI interfaces (i2c, usb, gpio prototypes), performed a large-scale security analysis of 2,758 serverless components (ESORICS 2025), demonstrated eBPF/XDP-accelerated communication (up to 2× throughput and large latency reductions), implemented eBPF state synchronization prototypes, and delivered initial observability tooling for Wasm FaaS.

In RP2, WP2 will harden and integrate these components for demonstrator validation: Propeller will be extended and integrated with Kubernetes and Zephyr RTOS, the wasm-operator will be productionised, and eBPF/XDP and RDMA-based communication acceleration and state-sync will be matured and benchmarked. Work will also focus on improving non-intrusive observability for serverless Wasm, finalising lightweight ABAC/capability-based access control for secure orchestration, advancing Cyber-Physical WASI specs (including SPI) and preparing scientific publications on confidential Wasm workload fingerprinting.

WP3 — Confidential Computing and secure execution inside TEEs

WP3 achieved a milestone rarely reached in European R&I projects: executing WebAssembly workloads inside Trusted Execution Environments (TEEs). Through Deliverable D3.1, the team developed the TEE Hardware Abstraction Layer (HAL) and a minimal Linux HAL for confidential containers, enabling Wasm workloads to run unmodified on different confidential computing platforms. Initial support for remote attestation across multiple platforms was achieved, and a Proof of Concept showcased collective attestation for distributed workloads — an essential step toward secure orchestration across federated cloud and edge environments.

In RP2, WP3 will focus on optimisation and industrialisation. Partners will reduce TEE execution overheads, complete the multi-tenant orchestration agent, and finalise support for confidential container lifecycle management aligned with OCI standards. The team will also complete attestation integration into Wasm runtimes, enabling “zero-trust by default” deployment of workloads in Demonstrators.

WP4 — Secure AI, data protection, and edge learning

WP4 advanced secure edge intelligence by developing AutoML-based defences against poisoning attacks on mobility datasets and validating them on real-world and simulated data. The team deployed Wasm runtimes on constrained edge devices and prepared the confidential computing infrastructure, demonstrating fast bootstrap and portability. Initial architecture was defined for secure data-at-rest using TEEs and embedded secure elements, contributing to KPIs on orchestration security, portability, and data protection (Deliverable D4.1).

During RP2, WP4 will integrate Federated / Split Learning with Trusted Execution Environments to enable secure distributed training across IoT and cloud. The work will incorporate remote attestation and secure element–based key storage, and extend testing to Wasm + hardware acceleration (GPU/FPGA). WP4 will complete secure data-at-rest protection using PKCS#11 and finalise integration of eBPF + AI-IDS into edge nodes for industrial demonstrators.

WP5 — Demonstrators and MVP integration (where the research becomes real)

WP5 is where all ELASTIC technologies meet reality — transforming research into Minimum Viable Products (MVPs) deployed in real industrial environments.

During RP1, WP5 defined the technical and business requirements of both demonstrators, mapped ELASTIC components to use case needs, and developed the validation and KPI framework. Infrastructure was provisioned across both pilot sites, and integration touchpoints with WP1–WP4 technologies were finalised. (Deliverable 5.1)

The project is validating its innovations through two demonstrators:

• Demonstrator 1 — Smart Connected Factory of the Future (Industry 4.0 / ERF lead): D1 deploys an IoT Data Fabric across edge–fog–cloud to support predictive maintenance, real-time robot control and cross-factory data sharing. Using WebAssembly, TEEs, and eBPF/XDP, workloads run securely and with low latency on heterogeneous industrial devices.
• Demonstrator 2 — Privacy-preserving Cloud Migration (Enterprise IT / THD lead): D2 validates that sensitive IT services can be migrated to the public cloud without losing control, confidentiality, or data sovereignty. Using WebAssembly, TEEs, and Remote Attestation, ELASTIC ensures that workloads run securely inside Confidential Computing environments and that trust is verified before execution.

By the end of RP1, both demonstrators had already integrated first MVP components, proving interoperability of ELASTIC technologies and confirming the feasibility of the full integration planned for RP2.

In other words: ELASTIC is not just research — it already runs on real industrial infrastructure.

WP6 — Dissemination, standardisation, and exploitation

In RP1, WP6 implemented the dissemination and communications strategy, resulting in strong visibility across online channels, the ELASTIC website, newsletters, and webinars. WP6 produced 16 scientific publications, multiple public deliverables, and contributed to open-source and standardisation bodies (ETSI, W3C/WASI, 3GPP, IETF/IRTF, ENISA, OASIS, CCC, CNCF, eBPF Foundation, etc.). Through Deliverable D6.2, WP6 defined the first standardisation and exploitation roadmap and identified the Key Exploitable Results (KERs), enabling structured innovation management during RP2.

In RP2, WP6 will intensify contributions to standardisation and mature the exploitation strategy into partner-specific business plans. Focus will be on strengthening the innovation ecosystem, increasing adoption opportunities, and preparing sustainability actions beyond the project.

WP7 — Coordination, delivery, risks, and quality

WP7 ensured efficient management of the project, guaranteeing delivery of all RP1 deliverables with high quality and full compliance to SNS JU requirements. It oversaw planning, KPI tracking, risk mitigation, and ensured ethical and legal compliance across partners, including security and data-protection aspects.

In RP2, WP7 will continue to guide cross-WP integration, monitor the delivery of demonstrator milestones, and coordinate the exploitation and standardisation strategy to ensure ELASTIC achieves maximum impact at project closure.

A project with momentum

With breakthroughs in secure sandboxing, orchestration, confidential computing and applied AI security, and with demonstrators already running early MVPs, ELASTIC enters RP2 with strong momentum.

Funding acknowledgement

The ELASTIC project has received funding from the Smart Networks and Services Joint Undertaking (SNS JU) under the European Union’s Horizon Europe research and innovation programme under Grant Agreement No. 101139067.

[ELASTIC Demo Series] Wasm-operator – Efficient Kubernetes Orchestration with WebAssembly

Kubernetes operators have become a fundamental building block for automating lifecycle management of cloud-native applications. They enable users to extend the Kubernetes control plane with custom logic, but the traditional way of building operators as containerized microservices comes with limitations that become especially pronounced in resource-constrained or latency-sensitive environments, such as edge nodes or 6G multi-access edge deployments.

To address these challenges, imec has developed a new approach: the Wasm-operator, a Kubernetes operator platform built using WebAssembly (Wasm) instead of Docker containers. This novel architecture, designed and further developed as part of the ELASTIC Project, brings substantial gains in memory efficiency, security, and scalability, and is now publicly available as an open source prototype.

Why Containers Aren’t Always Good Enough for Operators

Kubernetes operators work by continuously reconciling desired state with actual cluster state. In the container-based model:

• Every operator is deployed as one or more long-running pods

• Even when idle, a container consumes RAM, CPU, and storage

• Scaling the number of operators increases overhead significantly

This model works in large data centers, but in edge setups where many operators may be managing independent workloads, simply deploying everything as persistent containers becomes impractical or inefficient.

This is where WebAssembly offers a compelling alternative.

Why WebAssembly for Operators

WebAssembly (Wasm) is a portable, sandboxed execution format initially designed for the web, but now expanding into cloud, edge, and serverless environments. Compared to containers, Wasm components offer:

• Smaller runtime footprint: Minimal memory usage, with fast startup times

• Strong isolation: Secure sandboxing without requiring heavy virtualization

• Dynamic loading/unloading: Wasm modules can be swapped in and out of memory based on demand

• Language flexibility: Write operators in Rust, Go, C/C++, and other supported languages

• Cross-platform portability: Run consistently across CPU architectures and environments

In short, Wasm enables a “sleep until needed” execution model that makes it ideal for Kubernetes operators that respond to events rather than run continuously.

The Wasm-Operator Architecture

The Wasm-operator introduces a fundamentally different approach to operator execution:

✅ Operators as Wasm Components

Each operator is compiled into a Wasm module and loaded into a shared Wasm runtime, instead of running in separate containers.

✅ Event-Based Execution

The runtime wakes up each operator only when a relevant watch or reconciliation event is triggered. No background loops and no constant CPU usage.

✅ Rust + Wasmtime Technology Stack

Operators are developed in Rust and executed using the Wasmtime runtime, balancing high performance, memory safety, and a reduced attack surface.

✅ Swapping Idle Operators to Disk

When operators are idle, they are swapped to disk to recover memory. They can be reloaded instantly when needed, reducing runtime overhead.

✅ Shared Runtime for Multiple Operators

Instead of each operator having its own container, the Wasm-operator allows multiple operators to coexist inside a single runtime environment, drastically reducing resource consumption.

What the Demo Shows

The demo video illustrates:

• How Wasm-based operators are deployed on a Kubernetes cluster

• Reactive, just-in-time loading and execution of operators

• Swapping inactive operators to disk in order to free memory

• Efficient reconciliation without continuous resource use

This highlights the core insight: operators do not need to stay in memory or consume CPU constantly. They can exist as lightweight Wasm components, activated only when necessary.

Why This Matters for Edge and 6G Systems

The Wasm-operator is well-suited for modern edge-native and 6G scenarios, where:

• Devices have strict power and memory constraints

• Nodes may be disconnected or battery-powered

• Real-time or near-real-time decisions require local automation

• Large numbers of fine-grained workloads must be orchestrated

By removing the need for persistent containers and enabling instant-on operators, this approach improves:

• Operator density per device

• System responsiveness

• Memory and energy efficiency

• Manageability and multi-tenancy

Try It Yourself

To install and experiment with the Wasm-operator on your own Kubernetes cluster, follow the official guides from the repository:

• Installation guide: https://github.com/idlab-discover/wasm-operator/blob/main/docs/setup.md
• Usage examples: https://github.com/idlab-discover/wasm-operator/blob/main/docs/usage.md

📌 Repository: https://github.com/idlab-discover/wasm-operator

What’s Next?

Work is ongoing to expand the Wasm-operator’s capabilities, including:

• Better integration with the Go-based Kubernetes SDK.
• Support for operators that contact external non-Kubernetes services for things like metrics.

Contributions and feedback are welcome.

ELASTIC Consortium Meets in Chania for Review Preparation

Static eBPF Code Security Analyser: ELASTIC at IEEE CSR 2025