Background: I am a data security engineer, and our team is planning to utilize Trusted Execution Environment (TEE) techniques, such as Intel SGX or TDX, for secure data exchange and computing tasks. We are considering purchasing a cloud Kubernetes service that supports TEE, such as Alibaba Cloud’s ACK-TEE.
Question: I am searching for potential risks and challenges we might encounter in our project using these TEE-enabled cloud services. However, I have not found any user reviews or practical use cases discussing these aspects.
Attempts: I have referred to the product whitepapers provided by cloud companies, but they typically do not mention potential risks. I have also searched on several forums, such as Quora, Medium, and InfoQ, but could not find posts from product users.
Request: If you have experience using cloud K8s services with TEE support, could you please share any insights or challenges you encountered? Specifically, I am interested in:
- Performance overhead due to TEE.
- Complexity in configuration and management.
- Compatibility issues with existing applications.
- Any other potential risks or challenges.
Your feedback and experiences would be greatly appreciated!