CAREER: Rethinking Virtualization in Cloud-Native Systems

职业：重新思考云原生系统中的虚拟化

• 批准号: 2237966
• 负责人: Hui Lu
• 金额: $ 53.3万
• 依托单位: SUNY at Binghamton
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-05-01 至 2024-04-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2237966&HistoricalAwards=false
• 关键词: CAREER; Rethinking; Virtualization; Cloud; Native

Cloud-native technologies offer advanced and effective means to develop and manage today’s ubiquitous cloud applications. For example, monolithic cloud applications are being replaced with graphs of smaller, simpler “microservices” for reduced development complexity and increased code velocity. Further, such microservices are managed by cloud-native systems automatically, liberating cloud users from onerous operations of their in-cloud applications. Unfortunately, systems software that underpins cloud-native systems, such as virtualization, faces critical challenges to meeting the stringent needs of emerging microservices-based cloud applications, such as strong-yet-lightweight isolation, fast inter-microservice communication, and fine-grained elasticity control. This CAREER project proposes to conduct a holistic study of virtualization techniques to 1) identify critical bottlenecks in resource isolation, I/O communication, and service elasticity; 2) propose new system virtualization solutions to address these bottlenecks; and 3) validate the proposed solutions with real-world prototypes. The knowledge developed in this project will advance the key aspects of systems software in cloud-native systems, thus benefiting all cloud applications that are integral to society running on these systems. The research outcomes will have influences on the design and implementation of production cloud-native systems via university-enterprise collaborations and technology transfer and be integrated into core computer science courses. This project will provide training in the computer systems domain to graduate students, undergraduate students, and high school students, via diverse outreach plans of summer camps, high school student/instructor mentorship, and the inclusion of underrepresented minority and women engineers. The overarching goal of the CAREER project is to investigate and develop virtualization techniques for highly secure, efficient, and elastic cloud-native systems. First, the project will develop a strong-yet-lightweight isolation architecture for efficiently and securely sandboxing distributed microservices. It will move monolithic kernel functions to more isolated and lightweight userspace kernel microservices to provide system services to (and sandbox) all microservices of a cloud-native application. Second, the project will build fast userspace (network and storage) data planes tailored for interactive microservices. It will retrofit kernel I/O stacks to preserve high-quality kernel functionality meanwhile augmenting existing I/O stacks to address critical inter-layer data communication/processing bottlenecks.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

云本地技术提供了高级有效的方法来开发和管理当今无处不在的云应用程序。例如，整体云应用程序被替换为较小，更简单的“微服务”的图，以降低开发复杂性和增加代码速度。此外，此类微服务由云本地系统自动管理，从而使云用户摆脱了其云中应用程序的繁重操作。不幸的是，基础云本地系统（例如虚拟化）的系统软件面临着满足基于微服务的云应用程序的严格需求的关键挑战，例如重量较高的隔离，快速的微型服务中的快速 - 微维持式通信以及细粒度的弹性控制。这项职业项目的建议是对虚拟化技术进行整体研究，以确定资源隔离，I/O通信和服务弹性中的关键瓶颈； 2）提出新系统虚拟化解决方案来解决这些瓶颈； 3）用实际原型验证提出的溶液。该项目中开发的知识将推进云本地系统中系统软件的关键方面，从而使所有在这些系统上运行的社会不可或缺的云应用程序受益。研究成果将通过大学 - 企业合作和技术转移对生产云的设计和实施产生影响，并将其集成到核心计算机科学课程中。该项目将通过潜水员的夏令营，高中生/讲师的心态以及包括代表性不足的少数民族和女工程师的潜水员外展计划，为研究生，本科生和高中生提供计算机系统领域的培训。职业项目的总体目标是调查和开发针对高度安全，高效和弹性的云本地系统的虚拟化技术。首先，该项目将开发出强大的轻量级隔离体系结构，以有效，安全地沙箱分布式微服务。它将将整体内核功能移至更孤立和轻巧的用户空间内核微服务，以向云本地应用程序的所有微服务提供系统服务。其次，该项目将建立快速的用户空间（网络和存储）数据平面，该数据平面是为交互式微服务量身定制的。它将改装内核I/O堆栈以保持高质量的内核功能，同时增加现有的I/O堆栈以解决关键的层间数据通信/加工瓶颈。该奖项反映了NSF的法定任务，并通过使用该基金会的智力功能和广泛的影响来评估NSF的法定任务，并被认为是珍贵的支持。