Oracle steers GraalVM to the enterprise

GraalVM Enterprise brings performance and security extras to the shared runtime supporting JVM languages, JavaScript, and native code.

Paul Krill May 10th 2019
Oracle_steers_GraalVM_to_the_enterprise.jpg

Oracle is offering an enterprise edition of its GraalVM multi-language virtual machine. A shared runtime for applications written in Java, Scala, Kotlin, JavaScript, Node.js, and native code, GraalVM Enterprise enables interoperability between these programming languages to allow developers to write polyglot applications. 

Based on Java SE (Standard Edition), GraalVM Enterprise Edition provides performance and security capabilities for running enterprise applications. It is positioned for use in cloud environments, with programs compiled ahead of time to improve startup times and minimize memory footprints. GraalVM Enterprise also supports microservices, functions-as-a-service, and service mesh.

Security functions in GraalVM Enterprise address issues including buffer overflows in native code. Most real-world applications in managed languages like Java include native libraries to improve performance of compute-intensive code, but these libraries may form a back door to enable an attacker to bypass VM-level isolation features. GraalVM Enterprise includes a safe mode for native libraries, compiling portions of applications implemented in C code to use managed memory, garbage collection, and bounds checks to protect against vulnerabilities. 

GraalVM Enterprise core capabilities include:

  • A native image that allows scripted applications to be compiled ahead of time into a native machine code binary.
  • A compiler that generates compiled code to run applications on a JVM, standalone, or embedded in another system.
  • Polyglot support for Java, Scala, Kotlin, JavaScript, Node.js, and C/C++.
  • A language implementation framework for implementing any language for the GraalVM.
  • An LLVM runtime to permit native code to run in a managed environment. LLVM features modular, reusable compiler and toolchain technologies.

GraalVM Enterprise is free for evaluation and development usage from the Oracle Technology Network. It also is available for purchase. It also is free on Oracle Cloud.