this would have been helpful the last time I was working with Firecracker; it’s a fairly restrictive VM, and VSOCK is the main way to talk out to the host:

firecracker-microvm.github.io/