CAREER: Rethinking Virtualization in Cloud-Native Systems

职业：重新思考云原生系统中的虚拟化

• 批准号: 2237966
• 负责人: Hui Lu
• 金额: $ 53.3万
• 依托单位: SUNY at Binghamton
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-05-01 至 2024-04-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2237966&HistoricalAwards=false
• 关键词: CAREER; Rethinking; Virtualization; Cloud; Native

Cloud-native technologies offer advanced and effective means to develop and manage today’s ubiquitous cloud applications. For example, monolithic cloud applications are being replaced with graphs of smaller, simpler “microservices” for reduced development complexity and increased code velocity. Further, such microservices are managed by cloud-native systems automatically, liberating cloud users from onerous operations of their in-cloud applications. Unfortunately, systems software that underpins cloud-native systems, such as virtualization, faces critical challenges to meeting the stringent needs of emerging microservices-based cloud applications, such as strong-yet-lightweight isolation, fast inter-microservice communication, and fine-grained elasticity control. This CAREER project proposes to conduct a holistic study of virtualization techniques to 1) identify critical bottlenecks in resource isolation, I/O communication, and service elasticity; 2) propose new system virtualization solutions to address these bottlenecks; and 3) validate the proposed solutions with real-world prototypes. The knowledge developed in this project will advance the key aspects of systems software in cloud-native systems, thus benefiting all cloud applications that are integral to society running on these systems. The research outcomes will have influences on the design and implementation of production cloud-native systems via university-enterprise collaborations and technology transfer and be integrated into core computer science courses. This project will provide training in the computer systems domain to graduate students, undergraduate students, and high school students, via diverse outreach plans of summer camps, high school student/instructor mentorship, and the inclusion of underrepresented minority and women engineers. The overarching goal of the CAREER project is to investigate and develop virtualization techniques for highly secure, efficient, and elastic cloud-native systems. First, the project will develop a strong-yet-lightweight isolation architecture for efficiently and securely sandboxing distributed microservices. It will move monolithic kernel functions to more isolated and lightweight userspace kernel microservices to provide system services to (and sandbox) all microservices of a cloud-native application. Second, the project will build fast userspace (network and storage) data planes tailored for interactive microservices. It will retrofit kernel I/O stacks to preserve high-quality kernel functionality meanwhile augmenting existing I/O stacks to address critical inter-layer data communication/processing bottlenecks.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

云原生技术提供了先进且有效的方法来开发和管理当今无处不在的云应用程序，例如，单一的云应用程序正在被更小、更简单的“微服务”图形所取代，以降低开发复杂性并提高代码速度。不幸的是，支撑云原生系统的系统软件（例如虚拟化）面临着满足严格需求的严峻挑战。新兴的基于微服务的云应用程序，例如强大而轻量级的隔离、快速的微服务间通信和细粒度的弹性控制。该职业项目建议对虚拟化技术进行全面研究，以 1) 识别资源隔离中的关键瓶颈。 、I/O 通信和服务弹性；2) 提出新的系统虚拟化解决方案来解决这些瓶颈；3) 使用实际原型验证所提出的解决方案将推动关键方面的发展。研究成果将通过校企合作和技术转让对生产云原生系统的设计和实现产生影响。该项目将通过夏令营、高中生/教师指导以及纳入弱势群体等多种外展计划，为研究生、本科生和高中生提供计算机系统领域的培训。少数族裔和女性工程师。 CAREER 项目的首要目标是研究和开发高度安全、高效和弹性的云原生系统的虚拟化技术，首先，该项目将开发一个强大而轻量级的隔离架构，用于高效、安全地沙箱分布式微服务。将单一内核功能转移到更加隔离和轻量级的用户空间内核微服务中，以便为云原生应用程序的所有微服务提供系统服务（和沙箱）。 其次，该项目将构建快速的用户空间（网络和存储）数据。它将改造内核 I/O 堆栈以保留高质量的内核功能，同时增强现有 I/O 堆栈以解决关键的层间数据通信/处理瓶颈。该奖项是 NSF 的法定使命，并已被视为值得通过使用基金会的智力优点和更广泛的影响审查标准进行评估来支持。