vm2-process

Run untrusted code via vm2, but inside a separate process which has additional restrictions:

1. Limit how much of a CPU can be used
2. Limit how much memory can be used
3. Limit how much time it can take (even if blocked by sync code)

Installation

npm install --save vm2-process

API

The createVm2Pool (default export) accepts the following options:

Title	Key	Default
Min Threads	min	-
Max Threads	max	-
CPU	cpu	100 percent
Memory	memory	2000 megabytes
Execution Time	time	1000 milliseconds

It will return a run function that takes two arguments: run(code, scope)

code is a string of JavaScript code. scope is an object, of which will be globally accessible during execution.

Note: Communication is done via a unix socket, and therefore the scope, and result from the execution needs to be JSON serializable.

Usage

Simple usage with only code

1import createVm2Pool from 'vm2-process';
2
3const { run, drain } = createVm2Pool({ min: 1, max: 3 });
4const result = await run('1 + 1');
5
6console.log(result) // prints '2'
7
8drain();

Simple usage with some scope

1import createVm2Pool from 'vm2-process';
2
3const { run, drain } = createVm2Pool({ min: 1, max: 3 });
4const result = await run('1 + a', { a: 2 })
5
6console.log(result) // prints '3'
7
8drain();

Simple usage with some limits

1import createVm2Pool from 'vm2-process';
2
3const { run, drain } = createVm2Pool({
4  min: 1, /* min threads in the pool */
5  max: 3, /* max threads in the pool */
6  cpu: 100, /* in percent */
7  memory: 2000, /* in megabytes */
8  time: 1000 /* in milliseconds */
9});
10const result = await run('while (true) {}', null);
11
12// above throws as it either takes too long or exceeds the memory limit
13drain();