How to design a library OS for practical containers?

Tazaki, Hajime; Moroo, Akira; Kuga, Yohei; Nakamura, Ryô

doi:10.1145/3453933.3454011

Cited by 9 publications

(5 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This change points to lightweight, application specific machine images to be run directly on a hypervisor (i.e., the VM runtime) or even on bare metal. Anykernels 16 are a term for a modular model to the building of a Unikernel, by making OS-specific (e.g., NetBSD-based) drivers in the form of libraries. Anykernels provide improved security, lighter footprint, and faster boot times, when compared to typical VMs.…”

Section: Iot Based Edge Network and Virtualization Although Virtualiz...mentioning

confidence: 99%

An intelligent model for supporting edge migration for virtual function chains in next generation internet of things

Tsakanikas

Dagiuklas

Iqbal

et al. 2023

Sci Rep

View full text Add to dashboard Cite

The developments on next generation IoT sensing devices, with the advances on their low power computational capabilities and high speed networking has led to the introduction of the edge computing paradigm. Within an edge cloud environment, services may generate and consume data locally, without involving cloud computing infrastructures. Aiming to tackle the low computational resources of the IoT nodes, Virtual-Function-Chain has been proposed as an intelligent distribution model for exploiting the maximum of the computational power at the edge, thus enabling the support of demanding services. An intelligent migration model with the capacity to support Virtual-Function-Chains is introduced in this work. According to this model, migration at the edge can support individual features of a Virtual-Function-Chain. First, auto-healing can be implemented with cold migrations, if a Virtual Function fails unexpectedly. Second, a Quality of Service monitoring model can trigger live migrations, aiming to avoid edge devices overload. The evaluation studies of the proposed model revealed that it has the capacity to increase the robustness of an edge-based service on low-powered IoT devices. Finally, comparison with similar frameworks, like Kubernetes, showed that the migration model can effectively react on edge network fluctuations.

show abstract

Section: Iot Based Edge Network and Virtualization Although Virtualiz...mentioning

confidence: 99%

An intelligent model for supporting edge migration for virtual function chains in next generation internet of things

Tsakanikas

Dagiuklas

Iqbal

et al. 2023

Sci Rep

View full text Add to dashboard Cite

show abstract

“…Generally, future container research and development should continue to explore efficient ways to broaden the functionalities of containers [228] while ensuring high NF performance levels. This requires mainly ongoing research and development on container management strategies, QoS mechanisms, and networking interfaces.…”

Section: ) Containersmentioning

confidence: 99%

Operating Systems and Hypervisors for Network Functions: A Survey of Enabling Technologies and Research Studies

et al. 2022

View full text Add to dashboard Cite

Scalable and flexible communication networks increasingly conduct the packet processing for Network Functions (NFs) in General Purpose Computing (GPC) platforms. The input/output (I/O)-intensive and latency-sensitive packet processing is challenging for the operating systems and hypervisors running on GPC platforms. This article surveys the existing enabling technologies and research studies on operating system and hypervisor aspects that directly influence the packet processing for NFs on GPC platforms. We organize this survey according to the main categories abstraction approach, memory access, and I/O strategy. We further categorize abstraction approach technologies and research studies into the categories operation systems, hypervisors, and containers. We partition the memory access category into the two subcategories of memory allocation and memory access, while we partition the I/O strategy category into the sub-categories I/O device virtualization and I/O device access. Our survey gives a comprehensive summary of the capabilities and limitations of the existing enabling technologies and researched approaches for abstraction, memory access, and I/O for NF packet processing. We outline critical future research directions for advancing NF packet processing on GPC platforms.

show abstract

“…Library OSs can be used to de-privilege OS kernel components or create user-level containers. µKontainer [58] is a container kernel based on the LKL library OS [36]. Williams et al [67] show that library OSs can be efficiently executed on top of processes instead of bare VMs.…”

Section: Related Workmentioning

confidence: 99%

CAP-VMs: Capability-Based Isolation and Sharing for Microservices

Sartakov¹,

Vilanova²,

Eyers³

et al. 2022

Preprint

View full text Add to dashboard Cite

Cloud stacks must isolate microservices, while permitting efficient data sharing between isolated services deployed on the same physical host. Traditionally, the MMU enforces isolation and permits sharing at a page granularity. MMU approaches, however, lead to cloud stacks with large TCBs in kernel space, and the page granularity requires inefficient OS interfaces for data sharing. Forthcoming CPUs with hardware support for memory capabilities offer new opportunities to implement isolation and sharing at a finer granularity.We describe cVMs, a new VM-like abstraction that uses memory capabilities to isolate application components while supporting efficient data sharing, all without mandating application code to be capability-aware. cVMs share a single virtual address space safely, each having only capabilities to access its own memory. A cVM may include a library OS, minimizing its dependency on the cloud environment. cVMs efficiently exchange data through two capability-based primitives assisted by a small trusted monitor: (i) an asynchronous read/write interface to buffers shared between cVMs; and (ii) a call interface to transfer control between cVMs. Using these two primitives, we build more expressive mechanisms for efficient cross-cVM communication. Our prototype implementation using CHERI RISC-V capabilities shows that cVMs isolate microservices (Redis and Python) with low overhead while improving data sharing.

show abstract

How to design a library OS for practical containers?

Cited by 9 publications

References 17 publications

An intelligent model for supporting edge migration for virtual function chains in next generation internet of things

An intelligent model for supporting edge migration for virtual function chains in next generation internet of things

Operating Systems and Hypervisors for Network Functions: A Survey of Enabling Technologies and Research Studies

CAP-VMs: Capability-Based Isolation and Sharing for Microservices

Contact Info

Product

Resources

About