Ant Financial’s System Software Practices and Open‑Source Collaboration
In a 2019 OS2ATC talk, Ant Financial’s system department head explained how the company tackles massive data pressure, ultra‑high availability, secure containers, confidential computing, and open‑source initiatives such as OceanBase, Occlum, SOFAMesh, and Kata Containers to drive financial‑grade system software innovation.
On December 15, 2019, Ant Financial researcher and system department head He Zhengyu shared Ant’s practice experience in financial‑grade system software and its open‑source collaboration at OS2ATC 2019.
He emphasized that the financial industry heavily values technology because advanced tech quickly translates into business advantage, and Ant aims to serve billions of consumers and millions of micro‑entrepreneurs, relying on large‑scale data‑intelligent capabilities such as its 310‑loan system.
The core challenge for Ant’s system software is ensuring service continuity and loss‑risk monitoring under massive data pressure, requiring ultra‑high availability (beyond five‑nines) and 100 % fund safety.
Ant pursues excellence across several system‑software domains: OceanBase broke Oracle’s long‑standing dominance in TPC‑C benchmarks as a distributed relational database; Ant contributed to the Occlum trusted execution environment project with Tsinghua, which was accepted by ASPLOS and helped define China’s first secure‑computing standard; the company developed the SOFAMesh cloud‑native service mesh and validated it during Double‑11; and its Kata Containers are part of the OpenStack ecosystem.
He argued that system software is a means, not an end, and must solve concrete problems rather than being built for its own sake.
One case study highlighted the isolation challenges when migrating workloads from virtual machines to containers; Ant’s secure‑container solution adds a hypervisor‑level middle layer to provide fine‑grained auditability and reduce host compromise risk.
Another case study introduced confidential computing (TEE/Enclave) and the Occlum LibOS, which can port TensorFlow Lite into an enclave within a minute, enabling Ant’s business scenarios such as shared intelligence and blockchain to benefit from confidential‑computing advantages.
He stressed that open‑source is also a means, not a goal, and that a thriving open ecosystem is essential for long‑term vitality of system software, warning against “Galápagos syndrome” where closed‑door development leads to stagnation.
Ant continues to collaborate with top academic institutions worldwide and encourages more open‑source contributions and partnerships.
AntTech
Technology is the core driver of Ant's future creation.
How this landed with the community
Was this worth your time?
0 Comments
Thoughtful readers leave field notes, pushback, and hard-won operational detail here.